openwrt

OpenWrt Project is a Linux operating system targeting embedded devices. Instead of trying to create a single, static firmware, OpenWrt provides a fully writable filesystem with package management. This frees you from the application selection and configuration provided by the vendor and allows yo...

misp-extractor

MISP Extractor This code connects to a given MISP Malware Information Sharing Platform server and parses a given number of events, writing the IP addresses, URLs, and MD5 hashes found in the events to three separate files. Usage To use this script, you will need to provide the URL of your MISP...

Awesome-WAF

Awesome WAF Everything about web application firewalls WAFs from a security perspective. 🔥 Foreword: This was originally my own collection on WAFs. I am open-sourcing it in the hope that it will be useful for pentesters and researchers out there.As the saying goes, "the community just learns from...

cli

CloudGraph is the free open-source universal GraphQL API and Cloud Security Posture Management CSPM tool for AWS, Azure, GCP, and K8s. With CloudGraph you get: Free and effortless compliance checks i.e. Azure CIS 1.3.1, GCP CIS 1.2, AWS CIS 1.2, AWS CIS 1.3, AWS CIS 1.4, AWS PCI 3.2.1, AWS NIST...

elfloader

Summary elfloader is a super simple loader for ELF files that generates a flat in-memory representation of the ELF. Pair this with Rust and now you can write your shellcode in a proper, safe, high-level language. Any target that LLVM can target can be used, including custom target specifications...

semgrep-rules

Trail of Bits public Semgrep rules This repository contains Semgrep rules developed by Trail of Bits and made available to the public. They are part of our ongoing development efforts and are used in our security audits, vulnerability reseach, and internal projects. They will evolve over time as ...

mtr

WHAT IS MTR? mtr combines the functionality of the 'traceroute' and 'ping' programs in a single network diagnostic tool. As mtr starts, it investigates the network connection between the host mtr runs on and a user-specified destination host. It sends probes to the destination with successively...

Stryker

Stryker Multi-purpose proof-of-concept tool based on CPU-Z CVE-2017-15303 System Requirements x64 Windows 7/8/8.1/10; Stryker designed only for x64 Windows; Administrative privilege is required. Features Driver Signature Enforcement Overrider similar to DSEFIx; Protected Processes Hijacking via...

Compromised-Org-Chart-Generator

Compromised Org Chart Generator Overview Active Directory is used by organization as the identity provider. It contains information of all employees including their names, job titles, departments, and their managers. Password audits can help to discover weaknesses and risks. You might try passwor...

apm

APM A better local password manager for everyone. APM is a fast, zero-knowledge CLI password manager written in Go and Rust. It stores 25+ structured secret types in a single encrypted vault — from passwords and TOTP codes to SSH keys, medical records, photos, and binary files. Two binaries ship...

twoface

"Two-Face" Rust Linux binary An executable file that runs a harmless program most of the time, but will run a different, hidden code if deployed on a specific target host. See Creating a "Two-Face" Rust binary on Linux. Usage You need a Rust build environment for example from rustup. A nightly...

Extractor

Installation Instructions For Those That Don't Want to Compile Themselves: 1. Download Google's GSON library from Maven http://central.maven.org/maven2/com/google/code/gson/gson/2.8.2/gson-2.8.2.jar wget http://central.maven.org/maven2/com/google/code/gson/gson/2.8.2/gson-2.8.2.jar 2. In Burp's...

RTA

Red Team Automation RTA RTA provides a framework of scripts designed to allow blue teams to test their detection capabilities against malicious tradecraft, modeled after MITRE ATT&CK. RTA is composed of python scripts that generate evidence of over 50 different ATT&CK tactics, as well as a compil...

external_tcpdump_CVE-2018-14879

tcpdump To report a security issue please send an e-mail to [email protected]. To report bugs and other problems, contribute patches, request a feature, provide generic feedback etc please see the file CONTRIBUTING in the tcpdump source tree root. TCPDUMP 4.x.y Now maintained by "The Tcpdump...

Macrome

Macrome An Excel Macro Document Reader/Writer for Red Teamers & Analysts. Blog posts describing what this tool actually does can be found here and here. Installation / Building Clone or download this repository, the tool can then be executed using dotnet - for example: dotnet run -- build...

RESim

RESim Reverse engineering using a full system simulator. Dynamic analysis by instrumenting simulated hardware using Simics1 Trace process trees, system calls and individual programs Reverse execution to selected breakpoints and events Integrated with IDA Protm debugging client Ghidra plugins for...

CANalyzat0r

This software project is a result of a Bachelor's thesis created atSCHUTZWERK in collaboration with Aalen University by Philipp Schmied @CaptnBanana. Please refer to the correspondingblog post for more information. Why another CAN tool? Built from scratch with new ideas for analysis mechanisms...

Stegano

Stegano Stegano, a pure Python Steganography module. Steganography is the art and science of writing hidden messages in such a way that no one, apart from the sender and intended recipient, suspects the existence of the message, a form of security through obscurity. Consequently, functions provid...

ProcessHider

ProcessHider Created by M00nRise IMPORTANT NOTE This tools is allowed to use only for penetration testing and other white-hat activities. Illegal use is absoloutly frobidden! About ProcessHider is a post-exploitation tool designed to hide processes from monitoring tools such as Task Manager and...

fat-finger

Fat-Finger Extends the original finger.nse and attempts to enumerate current logged on users through a full match of the username and a partial match of the GECOS field in /etc/passwd Example output: @output PORT STATE SERVICE 79/tcp open finger | fat-finger: finger: admin: no such user. | finger...