Repository Index

CLI tool for decompiling Android apps to Java. It does resources! It does Java! Its real easy!

Scalpel is an open source data carving tool. It is not being actively maintained.

Fake sshd that logs ip addresses, usernames, and passwords.

A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule

A mostly-serverless distributed hash cracking platform

CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.

Tiny hashing module that uses the native crypto API in Node.js and the browser

• hashing
• hash-functions
• sha256
• crypto

WinDBG Anti-RootKit Extension

• kernel-mode
• c-plus-plus
• malware
• malware-analysis

Go-Guardian is a golang library that provides a simple, clean, and idiomatic way to create powerful modern API and web authentication.

• golang
• totp
• hotp
• 2fa

Advanced keyboard-walk generator with configureable basechars, keymap and routes

Web Application Honeypot

:white_check_mark: .NET crypto done right. Professionally audited.

• crypto
• cryptography
• c-sharp
• aead

Defanged Indicator of Compromise (IOC) Extractor.

• ioc
• indicators-of-compromise
• library
• ioc-extractor

🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more

• tls
• ssl
• certificate
• keystore

Password cracking rules and masks for hashcat that I generated from cracked passwords.

Simple to use, simple to deploy, one time self destruct messaging service, with hashicorp vault as a backend

• golang
• vault
• security
• secrets

:atom: Social (OAuth1\OAuth2\OpenID\OpenIDConnect) sign with PHP :shipit:

• php
• oauth
• social
• oauth-application

🔒Unified API for password hashing algorithms

• credential
• nodejs
• hash-functions
• security

JShell - Get a JavaScript shell with XSS.

Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux

High-Performance word generator with a per-position configureable charset

🌰 encrypt/decrypt using ssh keys

• encryption
• aes-256
• ssh
• ssh-keys

Standalone password candidate generator using the PRINCE algorithm

:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.