Why is this running? Trace any process, port, container, or file back to what started it - CLI + TUI.
Repository Index
47,133 repositories indexed
1–24 of 27 · Most stars
⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡
- decryption
- natural-language-processing
- cryptography
- cipher
A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
Cross-platform desktop GUI app to clean image metadata
- exif
- exiftool
- electron
- javascript
LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures from Android devices. It also minimizes its interaction between user and kernel space processes during acquisition, which allows it to produce memory captures that are more forensically sound than those of other tools designed for Linux memory acquisition.
ECDH and ECDSA for 8-bit, 32-bit, and 64-bit processors.
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
- github-actions
- actions
- supply-chain-security
- hardening
IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
- cybersecurity
- threat
- ioc
- malware
Scan files or process memory for CobaltStrike beacons and parse their configuration
Advanced keyboard-walk generator with configureable basechars, keymap and routes
Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux
High-Performance word generator with a per-position configureable charset
Standalone password candidate generator using the PRINCE algorithm
This library provides a set of F# helpers for string manipulations, logging, collection data structures, file operations, text processing, security, async, parsing, diagnostics, configuration files and Json serialization.
inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques
- forensics
- hypervisor
- memory-dump
- reverse-engineering
Merge multiple pcap files together, gracefully.
- pcap
- merge
- tcpdump-capture
- packet-processing
Deep memory analysis for Windows processes — the tool that saves you hours of debugging
- analyzer
- binary-analysis
- delphi
- dissassembler
Hascat Rules Collection – Probably the largest collection of hashcat rule-files anywhere.
- hashcat
- hashcat-rules
- hashcat-rule
- password-cracking
A process monitoring tool that tries to detect exploitation
Malware/IOC ingestion and processing engine
AI-powered platform for OSINT intelligence analysis. Features archive discovery with hypothesis-driven investigation, GLiNER entity extraction, Mapbox geospatial visualization, network analysis, and document processing. Built with FastAPI, Next.js, Weaviate, and DSPy.
- ai-agents
- document-processing
- dspy
- entity-extraction
Gulp.js command execution for humans
- gulp
- execa
- gulp-plugin
- gulpjs
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
XAsyncSockets is an efficient Python/MicroPython library of managed asynchronous sockets.
- python
- asynchronous
- sockets
- tcp