Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
In-depth attack surface mapping and asset discovery
- go
- dns
- subdomain
- enumeration
Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .
- thefatrat
- bypass
- linux
- autorun
Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.
Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.
The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
Database documentation built easy
Wordlist, rules and masks from Kaonashi project (RootedCON 2019)
- wordlist
- password
- password-strength
- password-safety
RockYou2021.txt is a MASSIVE WORDLIST compiled of various other wordlists. RockYou2021.txt DOES NOT CONTAIN USER:PASS logins!
- wordlist
- rockyou
- rockyou2021
- wordlists
Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)
The AI Agent for Cyber Security.
Password cracking rules and masks for hashcat that I generated from cracked passwords.
High-Performance word generator with a per-position configureable charset
Simple authorization gem for GraphQL :lock:
Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.
A mysqldump anonymizer
- mysqldump
- anonymizer
- database-anonymizer
- rgpd
Open-source agentic security operations platform:
Universal script packer-- transforms any type of script into a protected ELF executable, encrypted with anti-debugging.
A honeypot for the Log4Shell vulnerability (CVE-2021-44228).
YALIH (Yet Another Low Interaction Honeyclient) is a low Interaction Client honeypot designed to detect malicious websites through signature, anomaly and pattern matching techniques
A probably paranoid Golang utility library for securely hashing and encrypting passwords based on the Dropbox method. This implementation uses Blake2b, Scrypt and XSalsa20-Poly1305 (via NaCl SecretBox) to create secure password hashes that are also encrypted using a master passphrase.
- golang
- golang-library
- scrypt
- password-hash
Collection of hashcat lists and things.
- hashcat
- hashcat-rules
- hashcat-masks
- password-cracking
IOS/MAC Denial-Of-Service [POC/EXPLOIT FOR MASSIVE ATTACK TO IOS/MAC IN NETWORK]