misp-dashboard

misp-dashboard A dashboard showing live data and statistics from the ZMQ feeds of one or more MISP instances. The dashboard can be used as a real-time situational awareness tool to gather threat intelligence information. The misp-dashboard includes a gamification tool to show the contributions of...

jeopardize

Introduction Jeopardize tool is developed to provide basic threat intelligence&response capabilities against phishing domains at the minimum cost as possible. It detects registered phishing domain candidates typosquatting, homograph etc., analyzes them and assigns a risk score to them. After then...

nelson

Nelson Finding vulnerabilities through dumb brute force Inspired by a talk by Nicholas Carlini and the Ralph loop, Nelson is a tool to loop on every file in a project, prompting an agent to look for vulnerabilities. It has a scan mode, similar to Carlini's bash loop, where it asks the model to fi...

PowEnum

PowEnum Penetration testers commonly enumerate AD data – providing domain situational awareness and helping to identify soft targets. PowEnum helps automate the cartological view of your target domain. PowEnum executes common PowerSploit Powerview functions and combines the output into a...

dep-scan

Introduction OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration with ASPM/VM...

powershell-backdoor-generator

/ DISCLAIMER: This program is intended for educational purposes only. By using this program, you agree that you understand the potential risks associated with its use. - This program should not be used on any system or network without proper authorization. Unauthorized use is strictly prohibited....

Mergen

Project Overview: Mergen is a tool engineered to convert Assembly code into LLVM Intermediate Representation IR. This tool is designed for: The deobfuscation or devirtualization of obfuscated binary code The enhancement of the reverse engineering process, making it more efficient and effective,...

kerbrute

Kerbrute A tool to quickly bruteforce and enumerate valid Active Directory accounts through Kerberos Pre-Authentication Grab the latest binaries from the releases page to get started. Background This tool grew out of some bash scripts I wrote a few years ago to perform bruteforcing using the...

avscript

Avast Antivirus JavaScript Interpreter NOTE: On 03/11/2020 Avast announced they had decided to disable this interpreter globally! The main Avast antivirus process is called AvastSvc.exe, which runs as SYSTEM. That service loads the low level antivirus engine, and analyzes untrusted data received...

awesome-web-hacking

awesome-web-hacking This list is for anyone wishing to learn about web application security but do not have a starting point. You can help by sending Pull Requests to add more information. If you're not inclined to make PRs you can tweet me at @infoslack Table of Contents Books Documentation Tool...

heaptrace

About heaptrace is a heap debugger for tracking glibc heap operations in ELF64 x8664 binaries. Its purpose is to help visualize heap operations when debugging binaries or doing heap pwn. replaces addresses with easy-to-understand symbols detects heap corruption and memory leakage issues can debug...

Scavenger

Scavenger - OSINT Bot - REWORKED bot in action Intro Just the code of my OSINT bot searching for sensitive data leaks on paste sites. Search terms: credentials private RSA keys Wordpress configuration files MySQL connect strings onion links SQL dumps API keys complete emails Search terms can be...

santa

Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...

dwipe

dwipe dwipe is a tool to wipe disks and partitions for Linux to help secure your data. dwipe aims to reduce mistakes by providing ample information about your devices during selection. Quick Comparison Feature| dwipe| nwipe| shred| dd ---|---|---|---|--- Firmware wipes SATA/NVMe secure erase| ✓| ...

mitmengine

MITMEngine DEPRECATION NOTICE: This software is no longer maintained. The goal of this project is to allow for accurate detection of HTTPS interception and robust TLS fingerprinting. This project is based off of The Security Impact of HTTPS Interception, and started as a port to Go of their...

GitGot

Description GitGot is a semi-automated, feedback-driven tool to empower users to rapidly search through troves of public data on GitHub for sensitive secrets. How it Works During search sessions, users will provide feedback to GitGot about search results to ignore, and GitGot prunes the set of...

Bugs-feed

Bug's feed Bug's feed is a local hosted portal where you can search for the latest news, videos, CVEs, vulnerabilities... It's implemented as a PWA application so you can get rid of the explorer and use it as a desktop application. Navigate through different tabs and take a look to the latest bug...

findom-xss

FinDOM-XSS FinDOM-XSS is a tool that allows you to finding for possible and/ potential DOM based XSS vulnerability in a fast manner. Installation $ git clone https://github.com/dwisiswant0/findom-xss.git --recurse-submodules Dependencies: LinkFinder Usage To run the tool on a target, just use the...

Pentest-Tools-Framework

Pentest Tools Framework exploits, Scanner, Password. Details | | ---|---|--- NEWS Modules PTF UPDATE! PTF OPtions ------------------------------------------------------------------------------------- | Global Option |...

halo-record

halo-record Tamper-evident audit trails for AI agents — hash-chained Runtime Records, rendered as a Runtime Report your customers can check themselves. Every action your instrumentation captures tool calls, model calls, data access, approvals becomes one Runtime Record in an append-only,...