libpo32

libpo32 A small C99 library for Teenage Engineering PO-32 acoustic data transfers and drum synthesis. libpo32 reimplements the PO-32 Tonic transfer stack and a compatible drum voice model. It is not a full PO-32 firmware or UI emulator; it covers the packet format, acoustic modem, frame decoder,...

keyhog

Website · Documentation · Architecture · Vyre GPU engine KeyHog: GPU-accelerated secret scanner for code, cloud, and CI KeyHog is an open-source secret scanner in Rust that finds and verifies leaked API keys, tokens, passwords, and credentials across source code, Git history, containers, cloud...

Adalanche

Adalanche Open Source Attack Graph Visualizer and Explorer Adalanche gives instant results, showing you what permissions users and groups have in an Active Directory. It is useful for visualizing and exploring who can take over accounts, machines or the entire domain, and can be used to find and...

Politician

Politician A sophisticated WiFi auditing library for ESP32 microcontrollers Politician is an embedded C++ library designed for WiFi security auditing on ESP32 platforms. It provides a clean, modern API for capturing WPA/WPA2/WPA3 handshakes and harvesting enterprise credentials using advanced...

EDRSandblast

EDRSandBlast EDRSandBlast is a tool written in C that weaponize a vulnerable signed driver to bypass EDR detections Notify Routine callbacks, Object Callbacks and ETW TI provider and LSASS protections. Multiple userland unhooking techniques are also implemented to evade userland monitoring. As of...

wikipedia-c2

Wikipedia-C2 Wikipedia C2 Blog Post This is a demo project to demonstrate Command and Control utilizing Wikipedia. After Josh Abraham's demo of C2 utilizing Slack and ICMP, I thought I'd explore what other options in the internet's top sites could be used for C2. After reviewing Wikipedia's API, ...

amira

AMIRA: Automated Malware Incident Response & Analysis AMIRA is a service for automatically running the analysis on the OSXCollector output files. The automated analysis is performed via OSXCollector Output Filters, in particular The One Filter to Rule Them All : the Analyze Filter. AMIRA takes ca...

hawk

Hawk Documentation and Resources Visit hawkforensics.io for comprehensive documentation including: Detailed installation and permissions guides Step-by-step tutorials and "How to" videos Troubleshooting help Best practices and usage examples What is Hawk? Hawk is a free, open-source PowerShell...

CVE-2019-5418

CVE-2019-5418 1.وصف الثغرة Ruby on Rails هو إطار عمل لتطبيقات الويب، وهو إطار عمل حديث نسبيًا مبني على لغة Ruby. تحدث هذه الثغرة بشكل أساسي لأن Ruby on Rails يستخدم render file مع معلمات محددة لعرض طرق عرض خارج التطبيق. يمكننا تعديل حزمة الطلب للوصول إلى متحكم معين، واستخدام '../../../../' لتحقيق...

security-skills

Security Skills for Claude Code A plugin marketplace of Claude Code skills that automate security operations. Install individual skills to automate specific platforms, or combine several for end-to-end integration across your security stack. Available Skills Skill| Platform| What It Does...

EvilSlackbot

EvilSlackbot A Slack Attack Framework for conducting Red Team and phishing exercises within Slack workspaces. Disclaimer This tool is intended for Security Professionals only. Do not use this tool against any Slack workspace without explicit permission to test. Use at your own risk. Background...

TProxer

TProxer A Burp Suite extension made to automate the process of finding reverse proxy path based SSRF. How • Install • Todo • Join Discord How it works Attempts to gain access to internal APIs or files through a path based SSRF attack. For instance https://www.example.com/api/v1/users we try the...

MSSqlPwner

MSSqlPwner MSSqlPwner is an advanced and versatile pentesting tool designed to seamlessly interact and pwn MSSQL servers. That tool is based on impacket, which allows attackers to authenticate to databases using clear-text passwords NTLM Hashes, and kerberos tickets. With MSSqlPwner, users can...

Hollow

Hollow hollow is a shellcode loader generator. You give it a raw shellcode binary and a profile, and it spits out a compiled Windows PE loader with your shellcode encrypted inside. Getting Started Binaries are available on the releases page, or build from source: go build -o hollow . Requires...

crime-mapper

Mener des enquêtes cyber depuis un navigateur Un outil prototype pour cartographier la cybercriminalité Créé par @UKDanielCard La version expérimentale est la version live, à la pointe du progrès la Live Demo est surtout l'endroit où je stocke une version relativement stable... mais tout est en D...

policy_sentry

Policy Sentry IAM Least Privilege Policy Generator. Tutorial Installation Package managers Shell completion Step 1: Create the Template Step 2: Copy/paste ARNs Step 3: Write-policy command Cheat sheets Policy Writing cheat sheet IAM Database Query Cheat Sheet Local Initialization Optional Other...

pyfiscan

pyfiscan About Pyfiscan is free web-application vulnerability and version scanner and can be used to locate out-dated versions of common web-applications in Linux-servers. Example use case is hosting-providers keeping eye on their users installations to keep up with security-updates. Fingerprints...

subfinder

أداة سريعة لتعداد النطاقات الفرعية بشكل سلبي. الميزات • التثبيت • الاستخدام • إعداد API • المكتبة • انضم إلى Discord subfinder هي أداة لاكتشاف النطاقات الفرعية تُرجع نطاقات فرعية صالحة للمواقع الإلكترونية، باستخدام مصادر سلبية عبر الإنترنت. تتميز ببنية بسيطة ومعيارية ومحسّنة للسرعة. صُممت subfind...

klar

Klar Integration of Clair and Docker Registry supports both Clair API v1 and v3 Klar is a simple tool to analyze images stored in a private or public Docker registry for security vulnerabilities using Clair https://github.com/coreos/clair. Klar is designed to be used as an integration tool so it...

klar

كلار دمج Clair مع سجل Docker يدعم كلاً من Clair API v1 و v3 كلار هي أداة بسيطة لتحليل الصور المخزنة في سجل Docker خاص أو عام بحثًا عن الثغرات الأمنية باستخدام Clair https://github.com/coreos/clair. صُممت كلار لتكون أداة تكامل، لذا فهي تعتمد على متغيرات البيئة. وهي عبارة عن ملف ثنائي واحد لا يتطلب...