Repository Index

A Python RESTful API framework for online malware analysis and threat intelligence services.

• python
• cybersecurity
• malware
• malware-analysis

Astral-PE is a low-level mutator (Headers/EP obfuscator) for native Windows PE files (x32/x64)

• cybersecurity
• hacktoberfest
• low-level
• mutator

DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.

• python
• malware-analysis
• automation
• config-dump

The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted drives and extracted artifacts from Windows, Linux, MacOS, and Android devices

Various wordlists FR & EN - Cracking French passwords

• wordlists
• hashcat
• french
• cracking-hashes

Hashcat web interface

• hashcat
• cracking
• analytics
• pentesting

The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups

• active-directory
• cheatsheet
• ctf
• cybersecurity

Generic Low Interaction Honeypot

• honeypot
• hacktoberfest

Universal web application security sensor intended for real-time monitoring and defense.

inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques

• forensics
• hypervisor
• memory-dump
• reverse-engineering

Splunk code (SPL) for serious threat hunters and detection engineers.

• splunk
• threat-hunting
• use-case
• siem

👤Minimalist Google OAuth Authentication for Elixir Apps. Tested, Documented & Maintained. Setup in 5 mins. 🚀

• elixir
• google
• google-api
• auth

A modular Python application to collect intelligence for malicious hosts.

• cybersecurity
• investigation

Autonomous OODA-loop pentesting agent. Hermes brain, Kali + Playwright tools over MCP, ATT&CK as the Orient language.

• ai-agents
• autonomous-agents
• kali-linux
• llm-agents

Aggregates security advisories from 10 international CERTs daily and provides an AI skill that cross-references alerts against your project's tech stack.

• cve
• security
• security-alerts
• vulnerability

Web interface for the Volatility Memory Forensics Framework

CMS/LMS/Library etc Versions Fingerprinter

• fingerprinting
• cms
• security-tools

Sandia Cyber Omni Tracker (SCOT)

• perl
• javascript
• cyber-security
• incident-response

THE MOST POWERFUL OFFENSIVE AI AGENT FOR PENTESTING , OSINT , AND ETHICAL HACKING

• ai-bug-bounty
• ai-bug-finder
• ai-bug-reporter
• ai-hacking

:hammer: A multiple reverse shell session/client manager via terminal

• socket
• python
• ctf
• attack-defense

PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡

• proxy
• tcp
• tcp-proxy
• penetration-testing

WebAppSec Content Security Policy

A desktop app where AI agents decompile the games you own into C/C++ that rebuilds them byte for byte.

• ai
• artificial-intelligence
• artificialintelligence
• decompilation

Find known secrets in your AI coding agent sessions (Claude Code, Codex, Cursor), then guard the next one with local hooks that trace risky commands to the content that dictated them. Open source, no telemetry.

• agent-security
• ai-agents
• ai-security
• claude-code