Why is this running? Trace any process, port, container, or file back to what started it - CLI + TUI.
Repository Index
71,235 visible repositories in the index
1–24 of 45 · Most stars
⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡
- decryption
- natural-language-processing
- cryptography
- cipher
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.
- security-tools
- osint
- recon
- recon-engine
Monitor linux processes without root permissions
- ctf
- pentesting
- privesc
- enumeration
The first AI agent that builds permissionless integrations through reverse engineering platforms' internal APIs.
A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws
Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
- pe-format
- hooking
- pe-dumper
- pe-analyzer
Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.
An open-source digital image forensic toolset
- image-forensics
- image-processing
- gui
- toolkit
IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by law enforcement or in a corporate investigation by private examiners.
- forensic
- recovery
- digital-forensics
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
- pe-sieve
- anti-malware
- malware-analysis
- malware-detection
obtain free SSL certificates from letsencrypt ACME server Suitable for automating the process on remote servers.
- getssl
- certificate
- ssl-certificate
- acme-server
LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures from Android devices. It also minimizes its interaction between user and kernel space processes during acquisition, which allows it to produce memory captures that are more forensically sound than those of other tools designed for Linux memory acquisition.
ECDH and ECDSA for 8-bit, 32-bit, and 64-bit processors.
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
- github-actions
- actions
- supply-chain-security
- hardening
IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
- cybersecurity
- threat
- ioc
- malware
Scan files or process memory for CobaltStrike beacons and parse their configuration
C++23 procedure hooking library.
- hook
- hooks
- detour
- detours
Advanced keyboard-walk generator with configureable basechars, keymap and routes
Python tool for aircraft Doppler audio geolocation using historical ADS-B flight data (Source-available)
- ads-b
- airplane
- doppler-effect
- geolocation
Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux
High-Performance word generator with a per-position configureable charset
Standalone password candidate generator using the PRINCE algorithm