awesome-csirt

here

Nice list by

,

— Third Edition

useful

SANS Pen-Testing Resources:

list

Some of security projects

: is the world's first search engine for Internet-connected devices

: Criminal IP is a specialized Cyber Threat Intelligence (CTI) search engine that allows users to search for various security-related information such as malicious IP addresses, domains, banners, etc. It can be widely integrated

crypto

: Lecture notes for a course on cryptography

tink

: Tink is a multi-language, cross-platform library that provides cryptographic APIs that are secure, easy to use correctly, and hard(er) to misuse

: Exploit search engine

: Vulmon is a vulnerability search engine

: Crypto 101 is an introductory course on cryptography, freely available for programmers of all ages and skill levels

SMHasher

is a test suite designed to test the distribution, collision, and performance properties of non-cryptographic hash functions

: Cache Poisoned Denial of Service

cacao

: OASIS CACAO TC: Official repository for work of the

:

and

How to Secure Anything

. How to systematically secure anything: a repository about security engineering

Metasploitable3

: is a VM that is built from the ground up with a large amount of security vulnerabilities

: builds solutions to enhance the security of the global commons. Our goal is to provide the tools and insights needed for companies and governments to outpace emerging global security threats. Our non-traditional approach has a bias towards action, as we build trust across domains, provide unprecedented access, and deliver and implement solutions

pluto-eris

: Generator and supporting evidence for security of the Pluto/Eris half-pairing cycle of elliptic curves

cset

: Cybersecurity Evaluation Tool by CISA.gov

comply

: Compliance automation framework, focused on SOC2

Open Security Controls Assessment Language (OSCAL)

: NIST is developing the Open Security Controls Assessment Language (OSCAL), a set of hierarchical, XML-, JSON-, and YAML-based formats that provide a standardized representations of information pertaining to the publication, implementation, and assessment of security controls

: The DWF Identifiers dataset, distributed weakness filing

notrandom

: reverse the Mersenne Twister

: Crisis drills planning platform

: The National Cyber Security Index is a global index, which measures the preparedness of countries to prevent cyber threats and manage cyber incidents

: This documentation covers parts of the PagerDuty Incident Response process

security-training

: Public version of PagerDuty's employee security training courses

incident-response-docs

: PagerDuty's Incident Response Documentation

global-irt

: Global IRT (Incident Response Team) is a project to describe common IRT and abuse contact information

atc-react

: A knowledge base of actionable Incident Response techniques

Beagle

is an incident response and digital forensics tool which transforms security logs and data into graphs

DFIRTrack

: The Incident Response Tracking Application

FIR

(Fast Incident Response): is an cybersecurity incident management platform designed with agility and speed in mind

Aurora Incident Response

: Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders

timesketch

: Collaborative forensic timeline analysis

FastIR Collector Linux

(no longer maintained)

Maltrail

: Malicious traffic detection system

: First Chosen-Prefix Collision on SHA-1 and Application to the PGP Web of Trust

here

Some CVEs stuff and links and in

search on shodan

TROMMEL

: Sift Through Directories of Files to Identify Indicators That May Contain Vulnerabilities

cve_manager

: A python script that a) parses NIST NVD CVEs, b) prcoesses and exports them to CSV files, c) creates a postgres database and imports all the data in it, d) provides query capabilities for this CVEs database

dorkbot

: Command-line tool to scan Google search results for vulnerabilities

NotQuite0DayFriday

: This is a repo which documents real bugs in real software to illustrate trends, learn how to prevent or find them more quickly

: The Exploit Prediction Scoring System (EPSS) is an open, data-driven effort for predicting when software vulnerabilities will be exploited. Our goal is to assist network defenders to better prioritize vulnerability remediation efforts

CVE PoC

: Almost every publicly available CVE PoC

Awesome Malware Analysis

: A curated list of awesome malware analysis tools and resources

Great online by

:

list

Some other botnets

Analyzing a New macOS DNS Hijacker:

al-khaser

A PoC "malware" application with good intentions that aims to stress your anti-malware system:

Great analysis of

Puszek

: Yet another LKM rootkit for Linux. It hooks syscall table

Joe Sandbox Cloud

is a deep malware analysis platform which detects malicious files - API Wrapper

: Automated Malware Analysis

CBG

: Cuckoo Breeding Ground Hash Table

by Decent Security

makin

reveal anti-debugging and anti-VM tricks

colental/byob: BYOB (Build Your Own Botnet)

, another

snake

: a malware storage zoo

malware-ioc

: Indicators of Compromises (IOC) of our various investigations

pftriage

: Python tool and library to help analyze files during malware triage and analysis

imaginaryC2

: Imaginary C2 is a python tool which aims to help in the behavioral (network) analysis of malware. Imaginary C2 hosts a HTTP server which captures HTTP requests towards selectively chosen domains/IPs. Additionally, the tool aims to make it easy to replay captured Command-and-Control responses/served payloads

Vba2Graph

: Vba2Graph - Generate call graphs from VBA code, for easier analysis of malicious documents

malwoverview

: Malwoverview.py is a first response tool to perform an initial and quick triage on either a directory containing malware samples or a specific malware sample

SECT CTF 2018 :: , More Smoked Leet Chicken

Linux.Malware

: Additional Material for the Linux Malware Paper

: inside the source code

multiscanner

: Modular file scanning/analysis framework

FCL

: FCL (Fileless Command Lines) - Known command lines of fileless malicious executions

(dated 2018-08-27): In this post I analyze a Neutrino Bot sample

pafish

: Pafish is a demonstration tool that employs several techniques to detect sandboxes and analysis environments in the same way as malware families do

: This is the annotated transcript of our DefCon 23 / BlackHat 2015 talk, which presented the full details of Thunderstrike 2, the first firmware worm for Apple's Macs that can spread via both software or Thunderbolt hardware accessories and writes itself to the boot flash on the system's motherboard

: a Tool to Build Malware Analysis Virtual Machines,

IceBox

: Icebox is a Virtual Machine Introspection solution that enable you to stealthily trace and debug any process (kernel or user). It's based on project Winbagility

Joel Sandbox Analysis Report

:

Aleph

: OpenSource /Malware Analysis Pipeline System

Aleph

: File Analysis Pipeline

,

— Automating AV Evasion: AMSI, the “AntiMalware Scan Interface”, has been around for some time. In a broad sense, it’s a component of Windows 10 which allows applications to integrate with AV products, though most people know it for it’s ability to make file-less malware visible to AV engines

A collection of x64dbg scripts

. Feel free to submit a pull request to add your script

CAPA

: The FLARE team's open-source tool to identify capabilities in executable files

DRAKVUF Sandbox

automated hypervisor-level malware analysis system

: The about Malware Evasion Techniques

HiJackThis Fork v3

: A free utility that finds malware, adware and other security threats

: A NEW GENERATION OF PEER-TO-PEER BOTNETS

speakeasy

: Windows kernel and user mode emulation

: Illuminating GhostDNS Infrastructure

: Brazilian banking malware goes global

: EvilQuest/ThiefQuest malware

Evading Static Machine Learning Malware Detection Models –

ember

: The EMBER dataset is a collection of features from PE files that serve as a benchmark dataset for researchers

Coldfire

: Golang malware development library

pei

, the PE Injector - Inject code on 32-bit and 64-bit PE executables

Freki

:  Malware analysis platform

malware_training_vol1

: Materials for Windows Malware Analysis training (volume 1)

: Backdoor At The End Of The ICMP Tunnel

: Collection of various WINAPI tricks / features used or abused by Malware

pyWhat

: Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is!

Transacted Hollowing

: a PE injection technique, hybrid between ProcessHollowing and ProcessDoppelgänging

: Finding and exploiting vulnerable Malware

: The Mandiant Advanced Practices team recently discovered a new malware family we have named PRIVATELOG and its installer, STASHLOG

: trojanized apps spread malware, via sponsored search results

: First Known Malware Targeting Windows Containers to Compromise Cloud Environments

: Analysing API Obfuscation Through VEH

, : Writeup and scripts for the 2021 malwarebytes crackme

: is a dynamic analysis system for malware targeting Windows, Linux, Android and PDFs. Behavioral heuristics are also applied to identify suspicious activities exhibited by unknown programs

maps Windows APIs to common techniques used by malware

: A Novel Privacy-Preserving Pivot Attack Detection Scheme Based On Statistical Pattern Recognition

Qu1cksc0pe

: All-in-One malware analysis tool

is an experimental Javascript lexer, parser and compiler written in Rust

midrashim

: x64 ELF infector written in Assembly

d0zer

: Elf binary infector written in Go

. , , , ,

Generated by Joe Sandbox

virii

: Collection of ancient computer virus source codes

: TrickBot (TrickLoader) is a modular financial malware that first surfaced in October in 20161. Almost immediately researchers have noticed similarities with a credential-stealer called Dyre. It is still believed that those two families might’ve been developed by the same actor. ,

simple_ransomware

: this script isn't ransomware, it's just script collect all your system files and encrypt it, Can be considered it a simple ransomware

, a triage of the FinSpy (macOS) malware

: Extensive Attack Infrastructure Revealed

Android-Malware-Samples

: Android Malware Samples

Malware Samples

: Malware samples and other artifacts

SoReL-20M

: Sophos-ReversingLabs 20 million sample dataset

minizinh0-FUD

: A Fully Undetectable Ransomware

: n this video we dive into the analysis of Poulight malware, which is a .net based password stealer

A repository of LIVE malwares for your own joy and pleasure

:

is a binary substring searchable malware catalog containing terabytes of malicious code

, by MalwareTech

: Check for Suspicious Domains and IPs. Repo: : System based on +500 blacklists and 5 external intelligences to detect internet potencially malicious hosts

: The goal of this site is to point you to the best C2 framework for your needs based on your adversary emulation plan and the target environment

LOLBITS

: C2 framework that uses Background Intelligent Transfer Service (BITS) as communication protocol and Direct Syscalls + Dinvoke for EDR user-mode hooking evasion

: is a project from abuse.ch with the goal of sharing malware samples with the infosec community, AV vendors and threat intelligence providers

: Malware repository component for samples & static configuration with REST API interface

: The primary goal of Malpedia is to provide a resource for rapid identification and actionable context when investigating malware. Openness to curated contributions shall ensure an accountable level of quality in order to foster meaningful and reproducible research

and

hidden-tear

: It's a ransomware-like file crypter sample which can be modified for specific purposes

: This blog describes our efforts in tracking the REvil ransomware and its affiliates for the past six months. REvil has been around since 2019 and is one of the top variants of ransomware causing havoc at many organizations around the globe ever since. The KPN Security Research Team was able to acquire C2 sinkholes allowing for the tracking of infections across the globe

Phirautee

: A proof of concept crypto virus to spread user awareness about attacks and implications of ransomwares. Phirautee is written purely using PowerShell and does not require any third-party libraries. This tool steals the information, holds an organisation’s data to hostage for payments or permanently encrypts/deletes the organisation data

Raccine

: A Simple Ransomware Vaccine

by SECRET

,

: Total tracked ransomware payments all time. Ransomwhere is the open, crowdsourced ransomware payment tracker. Browse and download ransomware payment data or help build our dataset by reporting ransomware demands you have received

BlackByteDecryptor

: This is a decryptor for the ransomware BlackByte

: We investigate mhyprot2.sys, a vulnerable anti-cheat driver for the popular role-playing game Genshin Impact. The driver is currently being abused by a ransomware actor to kill antivirus processes and services for mass-deploying ransomware

(windows 10)

: Compromised supply chain within a supply chain poses new risks – Microsoft Secure

Inception

: Provides In-memory compilation and reflective loading of C# apps for AV evasion

Invoke-NeutralizeAV

: Quick PoC I Wrote for Bypassing Next Gen AV Remotely for Pentesting

Circlean

: USB key cleaner

mcreator

: Encoded Reverse Shell Generator With Techniques To Bypass AV's

metame

: is a simple metamorphic code engine for

rustdsplit

: At some point, I learned about a method to perform a binary search on a file in order to identify its AV signature and change it to bypass signature-based AV. The tool I used back then is gone, so I wrote this

rustdsplit

: At some point, I learned about a method to perform a binary search on a file in order to identify its AV signature and change it to bypass signature-based AV. The tool I used back then is gone, so I wrote this

:

avcleaner

: C/C++ source obfuscator for antivirus bypass

VxSig

: Automatically generate AV byte signatures from sets of similar binaries

: In and out of its unique Outlook backdoor

QMKhuehuebr

: Trying to hack into keyboards

: vanishing antiviruses by interleaving layers and layers of attacks

: Throw your bat cape over your spikes and get started with malware analysis and reverse engineering. I work as a malware analyst and like to share my knowledge

: EMOTET INFECTIONS WITH ZEUS PANDA BANKER AND TRICKBOT (GTAG: DEL34)

, Made with love by S01den (@s01den)

, Tricksy Linux malware goes after HPCs

(pt-br)

REDasm

: Crossplatform, interactive, multiarchitecture disassembler

VivienneVMM

: VivienneVMM is a stealthy debugging framework implemented via an Intel VT-x hypervisor

Xori

: Custom disassembly framework

rattle

: Rattle is an EVM binary static analysis framework designed to work on deployed smart contracts

starshipraider

: High performance embedded systems debug/reverse engineering platform

GBA-IDA-Pseudo-Terminal

: IDAPython tools to aid with analysis, disassembly and data extraction using IDA python commands, tailored for the GBA architecture at some parts

binja-ipython

: A plugin to integrate an IPython kernel into Binary Ninja

PySameSame

: This is a python version of samesame repo to generate homograph strings

Practical-Reverse-Engineering-using-Radare2

: Training Materials of Practical Reverse Engineering using Radare2

r2pipe for V

: r2pipe for V

radare2-webui

: webui repository for radare2

idaemu

: idaemu is an IDA Pro Plugin - use for emulating code in IDA Pro

lighthouse

: Code Coverage Explorer for IDA Pro & Binary Ninja

Lumen

: A private Lumina server for IDA Pro

EFISwissKnife

: An IDA plugin to improve (U)EFI reversing

Tenet

:

pwndbg

: Exploit Development and Reverse Engineering with GDB Made Easy

PEDA

: Python Exploit Development Assistance for GDB

. : GDB Enhanced Features for exploit devs & reversers

Frida hooking android : , , , and

fridump3

: A universal memory dumper using Frida for Python 3

r2flutch

: Tool to decrypt iOS apps using r2frida

site. : is a python script that can be used to automate and speed up specific searches while developing exploits (typically for the Windows platform). It runs on Immunity Debugger and WinDBG, and requires python 2.7. Although it runs in WinDBG x64, the majority of its features were written specifically for 32bit processes

: Library to Instrument Executable Formats ( )

: Predicting Debug Information in Stripped Binaries

: Symbolic Execution Tool For Analysis Of Binaries And Smart Contracts. : Symbolic execution tool

: Earlier in 2018 while revisiting the Delay Import Table, I used dumpbin to check the Load Configuration data of a file and noticed new fields in it. And at the time of writing this, more fields were added! The first CFGuard caught my attention and I learned about Control Flow Guard, it is a new security feature. To put it simple, it protects the execution flow from redirection - for example, from exploits that overwrite an address in the stack. Maybe they should call it the Security Directory instead

PBA - Analysis Tools

: My own versions from the programs of the book "Practical Binary Analysis"

functrace

: is a tool that helps to analyze a binary file with dynamic instrumentation using DynamoRIO

Signature-Base

: signature-base is the signature database for my scanners LOKI and SPARK Core

Generic Anomalies

: Detects an embedded executable in a non-executable file

Virtuailor

: IDAPython tool for C++ vtables reconstruction

execution-trace-viewer

: Tool for viewing and analyzing execution traces

: ELF Binaries

: Understanding and Analysis - Linux Audit

: A new way to develop parsers for binary structures

findLoop

: find possible encryption/decryption or compression/decompression code

: The concepting self hosted executable binary search engine

uncompyle6

: A cross-version

Decompyle++

: C++ python bytecode disassembler and decompiler

: We reverse-engineered a program written for a completely custom, unknown CPU architecture, without any documentation for the CPU (no emulator, no ISA reference, nothing) in the span of ten hours. Read on to find out how we did it…

pev

: pev is a full-featured, open source, multiplatform command line toolkit to work with PE (Portable Executables) binaries

Sourcetrail

: free and open-source cross-platform source explorer

: Qiling Advanced Binary Emulation Framework

batch_deobfuscator

: Deobfuscate batch scripts obfuscated using string substitution and escape character techniques

evilquest_deobfuscator

: EvilQuest/ThiefQuest malware strings decrypter/deobfuscator. : Small utility to hash EvilQuest code and cstrings sections

XLMMacroDeobfuscator

: Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)

syntia

: Program synthesis based deobfuscation framework for the USENIX 2017 paper "Syntia: Synthesizing the Semantics of Obfuscated Code"

: recovering an OLLVM-protected program

Stadeo

: Control-flow-flattening and string deobfuscator

msynth

: Code deobfuscation framework to simplify Mixed Boolean-Arithmetic (MBA) expressions

Glasgow Debug Tool

: Scots Army Knife for electronics

windbglib

: Public repository for windbglib, a wrapper around pykd.pyd (for Windbg), used by mona.py

MalwareSourceCode

: Collection of malware source code for a variety of platforms in an array of different programming languages

VXUG-Papers

: Research code & from members of vx-underground

(pt-br)

HyperDbg Debugger

: The Source Code of HyperDbg Debugger

The HT Editor

: A file editor/viewer/analyzer for executables

ImHex

: A Hex Editor for Reverse Engineers, Programmers and people that value their eye sight when working at 3 AM

flare-floss

: : FireEye Labs Obfuscated String Solver - Automatically extract obfuscated strings from malware

: Tools and Techniques for Automated Software Debugging

. ,

: Scan String, x86 Instruction Set Reference

dexcalibur

: Android reverse engineering tool focused on dynamic instrumentation automation leveraging Frida. It disassembles dex, analyzes it statically, generates hooks, discovers reflected methods, stores intercepted data and does new things from it. Its aim is to be an all-in-one Android reverse engineering platform

rr

: Record and Replay Framework

panda

: Platform for Architecture-Neutral Dynamic Analysis

qira

: QEMU Interactive Runtime Analyser

qemu_blog

: A series of posts about QEMU internals

miasm

: Reverse engineering framework in Python

rehex

: Reverse Engineers' Hex Editor

Bless

: Gtk# Hex Editor (fork)

rizin

: UNIX-like reverse engineering framework and command-line toolset

reFlutter

: Flutter Reverse Engineering Framework

: OpenSecurityTraining Inc. (EIN 86-1180701) is a 501c3 non-profit working to create the world's best cybersecurity training

is an intro to binary exploitation / reverse engineering course based around ctf challenges

capa

: The FLARE team's open-source tool to identify capabilities in executable files

aDLL

Adventure of Dinamic Lynk Library: aDLL is a binary analysis tool focused on the automatic discovery of DLL Hijacking vulnerabilities. The tool analyzes the image of the binary loaded in memory to search for DLLs loaded at load-time and makes use of the Microsoft Detours library to intercept calls to the LoadLibrary/LoadLibraryEx functions to analyze the DLLs loaded at run-time

pyc2bytecode

: A Python Bytecode Disassembler helping reverse engineers in dissecting Python binaries by disassembling and analyzing the compiled python byte-code(.pyc) files across all python versions (including Python 3.10.*)

, using - another java decompiler

NoVmp

: A static devirtualizer for VMProtect x64 3.x powered by VTIL

Awesome IDA, x64DBG & OllyDBG plugins

: A curated list of IDA x64DBG and OllyDBG plugins

edb

is a cross-platform AArch32/x86/x86-64 debugger

Interactive Delphi Reconstructor IDR

: a decompiler of executable files (EXE) and dynamic libraries (DLL), written in Delphi and executed in Windows32 environment

Yara-Rules

: Repository of yara rules

yara

: The pattern matching swiss knife

: Writing YARA rules for the lazy analyst ( )

Yara-Rules

: Repository of YARA rules made by McAfee ATR Team

YaraHunts

: Random hunting ordiented yara rules

yara-validator

: Validates yara rules and tries to repair the broken ones

Vim Syntax Highlighting for YARA Rules

: A Vim syntax-highlighting file for YARA rules covering YARA 4.0

xored_pefile_mini

: detects files with a PE header at uint32(0x3c), xored with a key of 1, 2 or 4 bytes. by

: is a software reverse engineering (SRE) framework

ghidra-firmware-utils

: Ghidra utilities for analyzing firmware

dragondance

: Binary code coverage visualizer plugin for Ghidra

: Welcome to the Decompiler Analysis Engine. It is a complete library for performing automated data-flow analysis on software, starting from the binary executable

:

Ghidraaas

: Ghidra as a Service

: Simplifying bare-metal ARM reverse engineering

GhidraX64Dbg

: Extract annoations from Ghidra into an X32/X64 dbg database

AngryGhidra

: Use angr in Ghidra

: The new bridge between Ghidra and Frida

ghidra-scripts

: A collection of my Ghidra scripts

Ghidrathon

: The FLARE team's open-source extension to add

malspider

: Malspider is a web spidering framework that detects characteristics of web compromises

AIL-framework

: AIL framework - :

Did Microsoft Just Manually Patch Their Equation Editor Executable? Why Yes, Yes . (CVE-2017-11882)

: Capture The Flag Defensivo que aconteceu na H2HC

CCAT

: Cisco Config Analysis Tool

Ciderpress

: Hardened wordpress installer

debian-cis

: PCI-DSS compliant Debian 7/8 hardening

Endlessh

: an SSH tarpit

ERNW Repository of Hardening Guides

: This repository contains various hardening guides compiled by ERNW for various purposes

fero

: YubiHSM2-backed signing server

FirewallChecker

: A self-contained firewall checker

Hardentools

is a utility that disables a number of risky Windows features

How To Secure A Linux Server

: An evolving how-to guide for securing a Linux server

kconfig-hardened-check

: A tool for checking the hardening options in the Linux kernel config

Iptables Essentials

: Common Firewall Rules and Commands

iptables-essentials

: Iptables Essentials: Common Firewall Rules and Commands

: encrypted and distributed secret sharing software

. Github:

linux-hardened

: Minimal supplement to upstream Kernel Self Protection Project changes

: nftables is the successor to iptables. It replaces the existing iptables, ip6tables, arptables and ebtables framework. It uses the Linux kernel and a new userspace utility called nft. nftables provides a compatibility layer for the ip(6)tables and framework

Nice article with a lot of resources:

opmsg

: is a replacement for gpg which can encrypt/sign/verify your mails or create/verify detached signatures of local files. Even though the opmsg output looks similar, the concept is entirely different

prowler

: AWS Security Best Practices Assessment, Auditing, Hardening and Forensics Readiness Tool. It follows guidelines of the CIS Amazon Web Services Foundations Benchmark and additional checks. Official CIS for

reconbf

: Recon system hardening scanner

Sarlacc

is an SMTP server that I use in my malware lab to collect spam from infected hosts

by

: A proposed standard which allows websites to define security policies

security-txt

: A proposed standard that allows websites to define security policies

See your site config with

solo-hw

: Hardware sources for Solo

ssh-auditor

: The best way to scan for weak ssh passwords on your network

Streisand

sets up a new server running your choice of WireGuard, OpenConnect, OpenSSH, OpenVPN, Shadowsocks, sslh, Stunnel, or a Tor bridge. It also generates custom instructions for all of these services. At the end of the run you are given an HTML file with instructions that can be shared with friends, family members, and fellow activists

The Practical Linux Hardening Guide

: 🔥 This guide details the planning and the tools involved in creating a secure Linux production systems - work in progress

tls-what-can-go-wrong

: TLS - what can go wrong?

upvote

: A multi-platform binary whitelisting solution

: An optimized zero-knowledge proof system

RHEL7-CIS

: Ansible RHEL 7 - CIS Benchmark Hardening Script

cisecurity

: Configures Linux systems to Center for Internet Security Linux hardening standard

: The shellcode emulator

auditd

: Best Practice Auditd Configuration

tosh

: Imagine your SSH server only listens on an IPv6 address, and where the last 6 digits are changing every 30 seconds as a TOTP code

NSA/CISA

CHAPS

: Configuration Hardening Assessment PowerShell Script (CHAPS)

Awesome Windows Domain Hardening

: A curated list of awesome Security Hardening techniques for Windows

: Visualizing the communication between email servers will help you understand what SPF, DKIM, and DMARC do and how these mechanisms work

ssh-audit

: SSH server & client auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

(broken!??)

TSA Servers

certstream-server

: Certificate Transparency Log aggregation, parsing, and streaming service written in Elixir

by

dotdotslash

: An tool to help you search for Directory Traversal Vulnerabilities

: Create your desired C application on top of nginx module

Cheatsheet for finding vulnerable PHP code using grep

: This will assist you in the finding of potentially vulnerable PHP code. Each type of grep command is categorized in the type of vulnerabilities you generally find with that function

. - A tool for performing feasibility analyses of timing attacks. : A tool for performing network timing attacks on plaintext and hashed password authentication

snuffleupagus

: Security module for php7 - Killing bugclasses and virtual-patching the rest!

FOPO-PHP-Deobfuscator

: A simple script to deobfuscate PHP file obfuscated with FOPO Obfuscator

: Decode PHP Obfuscator by FOPO

TSS - Threshold Secret Sharing

: A Ruby implementation of Threshold Secret Sharing (Shamir) as defined in IETF Internet-Draft draft-mcgrew-tss-03.txt

dotdotslash

: An tool to help you search for Directory Traversal Vulnerabilities

is an open source edge and service proxy, designed for cloud-native applications

ghp

: A simple web server for serving static GitHub Pages locally

LEAR

: Linux Engine for Asset Retrieval

NFHTTP

: A cross platform C++ HTTP library that interfaces natively to other platforms

by Mozilla

: A proposed standard which allows websites to define security policies

: A sandbox for the web

Secure Headers

: Manages application of security headers with many safe defaults

RFC 9116:

: WhiteIntel assists companies in identifying compromised credentials through malware campaigns

Cr3dOv3r

Search if your credentials where leaked:

pw-pwnage-cfworker

: Deploy a Cloudflare Worker to sanely score users' new passwords with zxcvbn AND check for matches against haveibeenpwned's 5.1+ billion breached accounts

login_duress

: A BSD authentication module for duress passwords

XSStrike

: Most advanced XSS detection suite

: Search for creadentials leaked on pwndb

bitwarden_rs

: Unofficial Bitwarden compatible server written in Rust

pcfg_cracker

: Probabilistic Context Free Grammar (PCFG) password guess generator

Depix

: Recovers passwords from pixelized screenshots

pwndb

: Search for leaked credentials

Password Lists

: Password lists with top passwords to optimize bruteforce attacks

pwndb.py

:

awsome

KeePass :Curated list of KeePass-related projects

KeePassium

: KeePass-compatible password manager for iOS

, ,

libkeepass

: Python module to read KeePass 1.x/KeePassX (v3) and KeePass 2.x (v4) files

KeepassXC-Pwned

: Check your keepassxc database against previously breached haveibeenpwned passwords

YubiKey-Guide

: Guide to using YubiKey for GPG and SSH

: Sebastian Neef - 0day.work

: Arduino FIDO2 Authenticator

Hardening C/C++ Programs Part II:

is a secure source-control oriented software distribution method

Canary

: Input Detection and Response

by Thinkst,

Wycheproof

: Project Wycheproof tests crypto libraries against known attacks

: Keep Calm and Do Threat Modeling

: Ciphersuite, Hashing, Encryption;

: Understanding key exchange algorithm;

: Understanding Certificate Authority

heaphopper

: HeapHopper is a bounded model checking framework for Heap-implementations

is a technique for constructing prime order elliptic curve groups with non-malleable encodings

: The C rules and recommendations in this wiki are a work in progress and reflect the current thinking of the secure coding community. Because this is a development website, many pages are incomplete or contain errors. As rules and recommendations mature, they are published in report or book form as official releases. These releases are issued as dictated by the needs and interests of the secure software development community

Safe C Library

: The Safe C Library provides bound checking memory and string functions per ISO/IEC TR24731. These functions are alternative functions to the existing standard C library that promote safer, more secure programming

TSLint

: An extensible linter for the TypeScript language

rubocop

: A Ruby static code analyzer and formatter, based on the community Ruby style guide

: transparent code randomization for just-in-time compilers

: Making C Safe by Extension

pigaios

: A tool for diffing source codes directly against binaries

pigaios

: A tool for diffing source codes directly against binaries

: Repository Integrity With Signed Commits. How to use git securely (signing commits)

tlse

: Single C file TLS 1.2/1.3 implementation, using tomcrypt as crypto library

tinyalloc

: malloc / free replacement for unmanaged, linear memory situations (e.g. WASM, embedded devices...)

Sandboxed API

: Sandboxed API automatically generates sandboxes for C/C++ libraries

HACL*

: a formally verified cryptographic library written in F*

Villoc

: Villoc is a heap visualisation tool, it's a python script that renders a static html file

MazuCC

: A minimalist C compiler with x86_64 code generation

: Understanding the challenges with Product commoditization in SCA

huskyCI

: huskyCI is an open source tool that performs security tests inside CI pipelines of multiple projects and centralizes all results into a database for further analysis and metrics

(pt-br) : nice talk by Daniel Carlier and Silvia Pimpão

A Complete Guide

: is a non-profit organization exclusively dedicated to increasing trust in information and communications technology products and services through the advancement of effective software assurance methods

Cheatsheet for finding vulnerable PHP code using grep

: This will assist you in the finding of potentially vulnerable PHP code. Each type of grep command is categorized in the type of vulnerabilities you generally find with that function

QL

: The libraries and queries that power CodeQL and LGTM.com

: How Not to Implement reCAPTCHA

Win10 Crypto Vulnerability:

: Securing Software in a DevOps World

GitGuardian Documentation and Resources

: Resources to help you keep secrets (API keys, database credentials, certificates, ...) out of source code and remediate the issue in case of a leaked API key. Made available by GitGuardian

Vuln Cost - Security Scanner for VS Code

: Find security vulnerabilities in open source npm packages while you code

: tool that analyzes your repository

git-wild-hunt

: A tool to hunt for credentials in github wild AKA git*hunt

shhgit

: Ah Find GitHub secrets in real time

KaiMonkey

: Vulnerable Terraform Infrastructure. KaiMonkey provides example vulnerable infrastructure to help cloud security, DevSecOps and DevOps teams explore and understand common cloud security threats exposed via infrastructure as code

DevSecOps –

SLSA

: Supply-chain Levels for Software Artifacts, Proposal

is a tool to help determine dependency confusion exposure

Security Scorecards

: Security health metrics for Open Source

kcare-uchecker

: A simple tool to detect outdated shared libraries

: A tool for identifying malicious dependencies via runtime monitoring

Awesome AppSec

: A curated list of resources for learning about application security

. repository

dvna

: Damn Vulnerable NodeJS Application

VulnLab

: A web vulnerability lab project developed by Yavuzlar

(skæn) is a free open-source security audit tool for modern DevOps teams. : A Free & Open Source DevSecOps Platform

: is a program matching and transformation engine which provides the language SmPL (Semantic Patch Language) for specifying desired matches and transformations in C code

brakeman

: A static analysis security vulnerability scanner for Ruby on Rails applications

Sonarqube Community Branch Plugin

: A plugin that allows branch analysis and pull request decoration in the Community version of Sonarqube

: Google-backed tool probes Python environments for vulnerable packages

trivy

: Scanner for vulnerabilities in container images, file systems, and Git repositories, as well as for configuration issues

: invisible Source Code Vulnerabilities

: Unicode bi-directional characters can be present but unseen and thus missed during the review. With this PR, we create a list of characters that we want to warn the users about if present in a PR. Since that list is configurable, it can be extended as needed/desired

ikos

: Static analyzer for C/C++ based on the theory of Abstract Interpretation

OWASP Web Security Testing Guide

: The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services

OWASP-Web-Checklist

: OWASP Web Application Security Testing Checklist

,

DependencyCheck

: OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies

vAPI

is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios in the means of Exercises

CheatSheetSeries

: The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics

secDevLabs

: A laboratory for learning secure web development in a practical manner

VulnyCode

: PHP Code Static Analysis. Python script to detect vulnerabilities inside PHP source code using static analysis, based on regex

PwnMachine

: PwnMachine is a self hosting solution based on docker aiming to provide an easy to use pwning station for bughunters

: is a learning environment created by Omar Santos for different Cybersecurity Ethical Hacking (Web Penetration Testing) training sessions

: Usability suffers when users type in passwords and the only feedback they get is a row of bullets. Typically, masking passwords doesn't even increase security, but it does cost you business due to login failures

oxAuth

: OAuth 2.0 server and client; OpenID Connect Provider (OP) & UMA Authorization Server (AS)

. /

: Share SCYTHE threats with the community. #ThreatThursday adversary emulation plans will be shared here

( )

: Fuzzing Arbitrary Binary Code

Regaxor

: A regular expression fuzzer

BrokenType

: TrueType and OpenType font fuzzing toolset

Dizzy-legacy

: Network and USB protocol fuzzing toolkit

Start-Hollow.ps1

: My musings with PowerShell

auditd-attack

: A Linux Auditd rule set mapped to MITRE's Attack Framework

Dizzy-legacy

: Network and USB protocol fuzzing toolkit

BFuzz

: Fuzzing Browsers

Structure-Aware Fuzzing with libFuzzer

with

Fuzzilli

: A JavaScript Engine Fuzzer

javafuzz

: Javafuzz is coverage-guided fuzzer for testing Java packages

onefuzz

: A self-hosted Fuzzing-As-A-Service platform

ffuf

: Fast web fuzzer written in Go

rFuss2

: Simple rust fuzzer

. : is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services. : Source code for self-hosted service developed for Azure, including the API, orchestration engine, and default set of security tools (including MSR's RESTler), that enables developers to embed security tooling into their CI/CD workflows

Jackalope

: Binary, coverage-guided fuzzer for Windows and macOS

by Dmitry Vyukov:

by Andrey Konovalov

AFLplusplus

: The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!

s a n d s i f t e r

: The x86 processor fuzzer

sandsifter

: The x86 processor fuzzer

Fuzzing-101

: Do you want to learn how to fuzz like a real expert, but don't know how to start?

AFLNet

: A Greybox Fuzzer for Network Protocols

: is a scalable fuzzing infrastructure that finds security and stability issues in software

: 43 Things To Think About When Designing, Testing, and Releasing your API

API-Security-Checklist

: Checklist of the most important security countermeasures when designing, testing, and releasing your API

: Rules And Checklist

API Security Checklist

: Checklist of the most important security countermeasures when designing, testing, and releasing your API

Istio

: An open platform to connect, manage, and secure microservices

hack-requests

: The hack-requests is an http network library for hackers

MindAPI

: Organize your API security assessment by using MindAPI. It's free and open for community collaboration

: Sample Manual Test Case

REST Security Cheat Sheet

: CheatSheetSeries

: Automated Security Testing for REST API’s

bad_json_parsers

: Exposing problems in json parsers of several programming languages

Mellivora

is a CTF engine written in PHP

Write-ups for crackmes and CTF challenges

by eleemosynator

pwntools

: CTF framework and exploit development library

ctf-tasks

: An archive of low-level CTF challenges developed over the years

UTCTF 2019. tl;dr: Extract data from given images using binwalk, Tranform given diophantine equation into a cubic curve and retrieve EC parameters, Solve ECDLP given in extracted data using Pohlig Hellman Algorithm

RsaCtfTool

: RSA attack tool (mainly for ctf) - retreive private key from weak public key and/or uncipher data

BalsnCTF-2019

by CykuTW

HackTheBox CTF Cheatsheet

: This cheasheet is aimed at the CTF Players and Beginners to help them sort Hack The Box Labs on the basis of Operating System and Difficulty

Crypton

: Library consisting of explanation and implementation of all the existing attacks on various Encryption Systems, Digital Signatures, Key Exchange, Authentication methods along with example challenges from CTFs

ctftool

: Interactive CTF Exploration Tool

CTF-Writeups

: writeups for Capture The Flag Competitions

and ,

HITB SECCCONF EDU CTF 2021

: Developed with  by Hackerdom team and HITB

Latinoware CTF 2021

(es)

(es)

emulate an IT infrastructure of real companies and are created for a legal pen testing and improving penetration testing skills

nc-chat-ctf

: Chat Server for CTF Players wrapped in SSL

Ciphr

: CLI crypto swiss-army knife for performing and composing encoding, decoding, encryption, decryption, hashing, and other various cryptographic operations on streams of data from the command line; mostly intended for ad hoc, infosec-related uses

sec-tools

: A set of security related tools

: Solving a Java CTF challenge by writing static analysis passes!

( )

ARM

Azure IoT

-> : Hardware backdoors in some x86 CPUs

Is a BadUSB Attack with A Twist

Ground Zero: Part 3-2

riscv-ida

: RISC-V ISA processor module for IDAPro 7.x

mac-age

: MAC address age tracking

: Lexra did implement a 32-bit variant of the MIPS architecture

IntelTEX-PoC

: Intel Management Engine JTAG Proof of Concept

me_cleaner

: Tool for partial deblobbing of Intel ME/TXE firmware images

IDA-scripts

: IDAPro scripts/plugins

: Hi hackers! Today I want to write about optimizing IR in the MoarVM JIT, and also a little bit about IR design itself

: Analysing WPA3's Dragonfly Handshake

The Hacker's Hardware Toolkit

: The best hacker's gadgets for Red Team pentesters and security researchers

A practical and reliable attack. An attacker with a stolen device can extract the seed from the device. It takes less than 5 minutes and the necessary materials cost around 100$

: A Side Channel Attack on PIN verification allows an attacker with a stolen Trezor One to retrieve the correct value of the PIN within a few minutes

: Machine Check Error Avoidance on Page Size Change

: Saleae logic analyzers are used by electrical engineers, firmware developers, enthusiasts, and engineering students to record, measure, visualize, and decode the signals in their electrical circuits

wacker

: A WPA3 dictionary cracker

:

, - P4wnP1 is below on pentesting section

: With PLATYPUS, we present novel software-based power side-channel attacks on Intel server, desktop and laptop CPUs

: Hardware-based fault injection attacks against Intel SGX Enclaves using the SVID voltage scaling interface

, and

HammerKit

: HammerKit is an open-source library for inducing and characterizing rowhammer that provides out-of-the-box support for Chrome OS platforms

erm I ment USB cable

. : Side Channel Attacks Assisted with Machine Learning

,

BLEAH

: A BLE scanner for "smart" devices hacking

: Causing Havoc on Bluetooth Link Manager

ESP8266 Deauther Version 2

: Scan for WiFi devices, block selected connections, create dozens of networks and confuse WiFi scanners!

Airspy-Utils

: is a small software collection to help with firmware related operations on Airspy HF+ devices

infernal-twin

: wireless hacking - This is automated wireless hacking tool

hcxdumptool

: small tool to capture packets from wlan devices

is a drone engineered to autonomously seek out, hack, and wirelessly take over other drones within wifi distance, creating an army of zombie drones under your control

eaphammer

: Targeted evil twin attacks against WPA2-Enterprise networks. Indirect wireless pivots using hostile portal attacks

whereami

: Uses WiFi signals and machine learning to predict where you are

Part 1, and

BMC-Tools

: RDP Bitmap Cache parser

awesome flipper

: 🐬 A collection of awesome resources for the Flipper Zero device

Dark Flipper

: Flipper Zero Unleashed Firmware

My Flipper Shits

: Free and libre source BadUSB payloads for Flipper Zero. [Windows, GNU/Linux, iOS]

: Intel’s Alder Lake BIOS source code was

Part 1:

Part 2:

– Case study from an in-the-wild iOS 0-day

by :

Part 1 -

Part 2 -

Part 3 -

Awesome Penetration Testing

: A collection of awesome penetration testing resources, tools and other shiny things

Seclists

is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place

Search operating systems on the network:

fleet

: The premier osquery

Penetration Testing Cheat Sheet For Windows Machine –

Windows Exploit Development -

Windows Exploit Development -

Windows Exploit Development -

Windows Exploit Development -

Windows Exploit Development -

Pown.js

: is the security testing an exploitation framework built on top of Node.js and NPM

Sandmap

is a tool supporting network and system reconnaissance using the massive Nmap engine

trackerjacker

: Like nmap for mapping wifi networks you're not connected to, plus device tracking

TIDoS-Framework

: The offensive web application penetration testing framework

GitMiner

: Tool for advanced mining for content on Github

DHCPwn

: All your IPs are belong to us

badKarma

: advanced network reconnaissance toolkit

Danger-zone

: Correlate data between domains, IPs and email addresses, present it as a graph and store everything into Elasticsearch and JSON files

go-tomcat-mgmt-scanner

: A simple scanner to find and brute force tomcat manager logins

IoTSecurity101

: From IoT Pentesting to IoT Security

and : A Virtual environment for Pentesting IoT Devices

SharpSploitConsole

: SharpSploit Console is just a quick proof of concept binary to help penetration testers or red teams with less C# experience play with some of the awesomeness that is SharpSploit

CrackMapExec

: A swiss army knife for pentesting networks

: A penetration testing framework for Linux, MacOS, and Windows systems

proxycannon-ng

: A private botnet using multiple cloud environments for pentesters and red teamers. - Built by the community during a hackathon at the WWHF 2018 security conference

PentestHardware

: Kinda useful notes collated together publicly

: This is a collection of code snippets used in my Pen Test Hackfest 2018 Presentation

pentest_scripts

: scrapes linkedin and generates emails list

: Penetration testing tools cheat sheet, a quick reference high level overview for typical penetration testing engagements. Designed as a quick reference cheat sheet providing a high level overview of the typical commands you would run when performing a penetration test

: Network recon framework ( )

DomainInformation

(pt-br) : Tool para a identificação de arquivos, pastas, servidores DNS, E-mail. Tenta fazer transferência de zona, Busca por subdomínios e por ultimo, procura por portas abertas em cada ip dos subdomínios.. Desfrutem =)

: Often during pen tests you may obtain a shell without having tty, yet wish to interact further with the system

: Find Open Databases in Seconds

pown-recon

: A powerful target reconnaissance framework powered by graph theory

Micro8

: The Micro8 series is suitable for junior and intermediate security practitioners, Party B security testing, Party A security self-test, network security enthusiasts, etc., enterprise security protection and improvement, the series complies with: Free, free, shared, open source

Payloads All The Things

: A list of useful payloads and bypasses for Web Application Security. Feel free to improve with your payloads and techniques!

Penetration Test Guide based on the OWASP + Extra

: This guid is for the penetration testers seeking for the appropriate test cases required during a penetration test project. I rearranged the OWASP Testing Guide v4 from my point of view including 9 Test Classes and each class has several Test Cases to conduct against the target. Each Test Case covers several OWASP tests which also is useful for the report document. I've also added 15 extra Tests Cases marked by the EXTRA-TEST. I hope it will be useful in both penetration test projects and bug-bounty

Insecure Direct Object References

(OTG-AUTHZ-004)

OWASP ZAP w2019-10-14 released:

liffy

: Local file inclusion exploitation tool

: Some of these might be legacy and no longer catching any traffic, but unless you're actually pentesting Mozilla or Google, it shouldn't matter

pentest_compilation

: Compilation of commands, tips and scripts that helped me throughout Vulnhub, Hackthebox, OSCP and real scenarios

: ZIP Privilege Escalation

Presentation Clickers

: Keystroke injection vulnerabilities in wireless presentation clickers

postwoman

: alien API request builder - A free, fast, and beautiful alternative to Postman

SiteBroker

: A cross-platform python based utility for information gathering and penetration testing automation!

PENTESTING-BIBLE

: This repository was created and developed by Ammar Amer @cry__pto Only. Updates to this repository will continue to arrive until the number of links reaches 10000 links & 10000 pdf files .Learn Ethical Hacking and penetration testing .hundreds of ethical hacking & penetration testing & red team & cyber security & computer science resources

Nikto

: web server scanner

:

physical-docs

: This is a collection of legal wording and documentation used for physical security assessments. The goal is to hopefully allow this as a template for other companies to use and to protect themselves when conducting physical security assessments

pentest-tools

: Custom pentesting tools

: Interesting environment variables to supply to scripting language interpreters

rootend

: A *nix Enumerator & Auto Privilege Escalation tool

DroneSploit

: Drone pentesting framework console

( ): Here you will find the typical flow that you should follow when pentesting one or more machines

Huawei_Thief

: Huawei DG8045 & HG633 Devices Exploitation Tool

urldozer

: Perform operations on URLs like extracting paths, parameter names and/or values, domain name, host name (without HTTP[s])

Snaffler

: a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

Jok3r

: Network and Web Pentest Automation Framework

BBT

Bug Bounty Tools

P4wnP1 A.L.O.A.

by MaMe82 is a framework which turns a Rapsberry Pi Zero W into a flexible, low-cost platform for pentesting, red teaming and physical engagements ... or into "A Little Offensive Appliance"

AriaCloud

: A Docker container for remote penetration testing

RustScan

: The Modern Day Port Scanner

Impacket

: is a collection of Python classes for working with network protocols

: Capturing web traffic logs

SecLists

: is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more

is a collection TTPs (tools, tactics, and procedures) for what to do after access has been gained

post-exploitation

: Post Exploitation Collection

GLORP

: A CLI-based HTTP intercept and replay proxy

: a lot of about shellcoding and bufferoverflow

SMB AutoRelay

: SMB Auto Relay provides the automation of SMB/NTLM Relay technique for pentesting and red teaming exercises in active directory environments

Decoder++

: An extensible application for penetration testers and software developers to decode/encode data into various formats

SCShell

: Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

bulwark

: An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports

: : A Bind9 server for pentesters to use for Out-of-Band vulnerabilities

Interactsh

: An OOB interaction gathering server and client library

DNSLOG

: dnslog dns / dns rebinding platform

Weird Proxies

: Reverse proxies cheatsheet

pwncat

: netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)

offensiveph

: use old Process Hacker driver to bypass several user-mode access controls

by cirl.lu

mitmproxy

:

Poor Man's Pentest

: This a collection of the code that I have written for the Poor Man's Pentest presentation

Living Off Trusted Sites ( ) Project: Attackers are using popular legitimate domains when conducting phishing, C&C, exfiltration and downloading tools to evade detection. The list of websites below allow attackers to use their domain or subdomain

: Stay up-to-date with the latest file extensions being used by attackers

EMBArk

: The firmware security scanning environment

EMBA

: The security analyzer for embedded device firmware

OffensiveNim

: My experiments in weaponizing Nim

Automated Reconnaissance Pipeline

: An automated target reconnaissance pipeline

subfinder

is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing

urlhunter

: a recon tool that allows searching on URLs that are exposed via shortener services

URLBrute

: Directory/Subdomain scanner developed in GoLang

degoogle

: search Google and extract results directly. skip all the click-through links and other sketchiness

Investigator

: An online handy-recon tool

linux-smart-enumeration

: Linux enumeration tool for pentesting and CTFs with verbosity levels

Sublist3r

: Fast subdomains enumeration tool for penetration testers

subscraper

: External pentest tool that performs subdomain enumeration through various techniques. In addition, SubScraper will provide information such as HTTP & DNS lookups to aid in potential next steps

massh-enum

: OpenSSH 7.x Mass Username Enumeration

LinEnum

: Scripted Local Linux Enumeration & Privilege Escalation Checks

linpostexp

: Linux post exploitation enumeration and exploit checking tools

A Social Media Enumeration & Correlation Tool

The art of subdomain enumeration

: This repository contains all the supplement material for the book "The art of sub-domain enumeration"

social_mapper

: A Social Media Enumeration & Correlation Tool by Jacob Wilkin(Greenwolf)

LEGION

Automatic Enumeration Tool

discover

Custom bash scripts used to automate various penetration testing tasks including recon, scanning, parsing, and creating malicious payloads and listeners with Metasploit

Z/OS System Enumeration Scripts

: PoC REXX Script to Help with z/OS System enumeration via OMVS/TSO/JCL

WPExploitation

: simples scripts to help windows enumeration

CTFR

does not use neither dictionary attack nor brute-force, it just abuses of Certificate Transparency logs

feroxbuster

: A fast, simple, recursive content discovery tool written in Rust

grinder

: Python framework to automatically discover and enumerate hosts from different back-end systems (Shodan, Censys)

Admin-Scanner

: This tool is to design to find admin panel of websites

Virtual host scanner

: A script to enumerate virtual hosts on a server

vhost-brute

: A PHP tool to brute force vhost configured on a server

grab_beacon_config

: nmap strip to get beacon info

assetfinder

: Find domains and subdomains related to a given domain

hackerone_wordlist

: The wordlists that have been compiled using disclosed reports at HackerOne bug bounty platform

: When performing security testing against an asset, it is vital to have for content and subdomain discovery

Duplicut

: Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)

rule-based online generator to create a wordlist based on a set of words entered by the user. is a distributed password brute-force system that focused on easy use

Elpscrk

: An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)

Ghost Eye

Informationgathering Footprinting Scanner and Recon Tool Release. Ghost Eye is an Information Gathering Tool I made in python 3. To run Ghost Eye, it only needs a domain or ip. Ghost Eye can work with any Linux distros if they support Python 3. Author: Jolanda de Koff

SuperEnum

: This script does the basic enumeration of any open port along with screenshots

: The Domain Dossier tool generates reports from public records about domain names and IP addresses to help solve problems, investigate cybercrime, or just better understand how things are set up

: Java Fingerprinting using Stack Traces

Skanuvaty

: Dangerously fast DNS/network/port scanner

TireFire

: Automate the scanning and enumeration of machines externally while maintaining complete control over scans shot to the target. Comfortable GUI-ish platform. Great for OSCP/HTB type Machines as well as penetration testing

novahot

:A webshell framework for penetration testers

Weevely

: Weaponized web shell

Web-Shells

: (mostly php)

: Cache Coherency on MIPS and ARM

shellcode2asmjs

: Automatically generate ASM.JS JIT-Spray payloads

Shellen

:Interactive shellcoding environment to easily craft shellcodes

: Process Injector written in C that scans for target processes, once found decrypts RC4 encrypted shellcode and injects/executes in target process' space with little CPU & Memory usage

Unicorn

is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory

pe_to_shellcode

: Converts PE into a shellcode