Repository Index

A simple zero-config tool to make locally trusted development certificates with any names you'd like.

• https
• tls
• certificates
• local-development

Decrypt and export passwords, cookies, history and more from 20 browsers on Windows, macOS and Linux. For authorized security research, incident response and DFIR.

• chrome
• macos
• windows
• pentest-tool

Bitwarden client apps (web, browser extension, desktop, and cli).

• webextension
• javascript
• bitwarden
• typescript

Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening

• privacy
• firefox
• security
• settings

Adversary Emulation Framework

• security-tools
• implant
• golang
• dns-server

Firefox user.js for optimal privacy and security. Your favorite browser, but better.

• firefox
• anti-tracking
• mozilla
• privacy

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

• vulnerabilities
• scanner
• firefox-extension
• grunt-plugins

Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox

• google-chrome
• hindsight
• chrome
• forensics

Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part of NCC Group).

• dfir
• dissect
• python

OpenID/Connect, OAuth2, WS-Federation and SAML 2.0 server based on Duende IdentityServer and ITFoxtec Identity SAML 2.0 with its admin UI

• openid-connect
• admin-ui
• iam
• openid

Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.

• pentesting
• security
• chrome-extension
• api-keys

Quantum Insert

• quantum-insert
• python
• detection
• pcap

acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.

Collection of hashcat lists and things.

• hashcat
• hashcat-rules
• hashcat-masks
• password-cracking