opensquat

openSquat Core 📑 Table of Contents What is openSquat? Featured In Open-Core Model Key Features Quick Start Requirements Usage Premium and API Modes Configuration Automation CLI Reference Contributing Author License 🎯 What is openSquat? openSquat is an Open Source Intelligence OSINT security tool...

alexafaraday

https://www.faradaysec.com https://github.com/infobyte/faraday Amazon Alexa Faraday Skill Using Flask-ASK and VMware REST API's This is the GitHub Repository for Amazon Echo, Python Flask/Flask-ASK, and Faraday API's blogpost and subsequent updates. We leverage Flask-Ask to interact with the Amaz...

reverse-shell-generator

reverse-shell-generator Hosted Reverse Shell generator with a ton of functionality -- great for CTFs Hosted Instance https://revshells.com Features Generate common listeners and reverse shells Save button to download Payloads from browser. Raw mode to cURL shells to your machine. Button to...

chomp-scan

Chomp Scan A scripted pipeline of tools to simplify the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs. If you've found any bugs using this tool, please let me know! Scope Chomp Scan is a Bash script that chains together the fastest and most effective tools in...

fingerprint

fingerprint Monitoring Registry and File Changes in Windows - forensic analytics for windows registry and files "fingerprint" records the state of a windows system, in terms of files and registry. Such fingerprints can be compared to find all changed data. The data can be narrowed with procmon...

BinAIVulHunter

BinAIVulHunter An IDA PRO plugin to help in finding vulnerabilites in binaries. Use IDA PRO HexRays decompiler with OpenAIChatGPT to find possible vulnerabilities in binaries Disclaimer, possible replies while trying to find binary vulnerabilites using an AI may lead to false positives, however i...

agentic-threat-hunting-framework

Agentic Threat Hunting Framework ATHF Quick Start • Installation • Documentation • Examples Give your threat hunting program memory and agency. The Agentic Threat Hunting Framework ATHF is the memory and automation layer for your threat hunting program. It gives your hunts structure, persistence,...

api-security-audit-action

GitHub Action: 42Crunch REST API Static Security Testing The REST API Static Security Testing action locates REST API contracts that follow the OpenAPI Specification OAS, formerly known as Swagger and runs thorough security checks on them. Both OAS v2 and v3.0.x are supported, in both JSON and YA...

valhalla

valhalla Valhalla finds vulnerable devices on shodan, it can also scan a list of domains to find vulnerabilities. INSTALLATION git clone https://github.com/gotr00t0day/valhalla.git cd valhalla pip3 install -r requirements.txt chmod +x install.sh ./install.sh USAGE , , |\ , |\ / . \ -.:. \ -...

packetsifterTool

PacketSifter What is PacketSifter? PacketSifter is a tool to perform batch processing of PCAP data to uncover potential IOCs. Simply initializePacketSifter with your desired integrations VirusTotal, AbuseIPDB and pass PacketSifter a pcap and the desired switches and PacketSifter will sift through...

Guinevere

Guinevere - Automated Security Assessment Reporting Tool This tool works with Gauntlet a private tool to automate assessment reporting. Main features include: Generate Assessment Report Export Assessment Generate Retest Report Generate Pentest Checklist Generate Assessment Report This option will...

minder

| | | | | Installation | Documentation | Releases What is Minder? Minder is an open source platform that helps development teams and open source communities build more secure software, and prove to others that what they’ve built is secure. Minder helps project owners proactively manage their...

ghidrecomp

Ghidrecomp - Command Line Ghidra Decompiler About This Python command line tool decompiles all functions of a binary and writes them to a directory in separate C files: flowchart LR afilename -- bghidrecomp a2Symbol Server -- b b -- eGhidra Project Files b -- output subgraph output subgraph...

pyghidra-mcp

PyGhidra-MCP - Ghidra Model Context Protocol Server Overview pyghidra-mcp is a command-line Model Context Protocol MCP server that brings the full analytical power of Ghidra, a robust software reverse engineering SRE suite, into the world of intelligent agents and LLM-based tooling. It bridges...

bluemonday

bluemonday bluemonday is a HTML sanitizer implemented in Go. It is fast and highly configurable. bluemonday takes untrusted user generated content as an input, and will return HTML that has been sanitised against an allowlist of approved HTML elements and attributes so that you can safely include...

sicat

SICAT - The useful vulnerability and exploit finder SICAT is a powerful tool designed to aggregate and search for vulnerabilities and exploits from multiple high-profile sources. It simplifies the reconnaissance phase by automatically checking reputable databases based on keywords, Nmap scan...

IDAssistMCP

IDAssistMCP Standalone MCP Model Context Protocol server plugin for IDA Pro 9.x that exposes IDA's analysis capabilities to LLM clients like Claude Desktop. Features 41 MCP tools covering binary analysis, decompilation, cross-references, symbol management, type system, navigation, patching, expor...

OWASP-WSTG-Rag

OWASP WSTG RAG A Retrieval-Augmented Generation RAG system that indexes the OWASP Web Security Testing Guide WSTG into a vector database, providing instant access to security testing methodologies via REST API and MCP Model Context Protocol for Claude Code integration. Features Complete WSTG...

ccs

Code Credential Scanner This script is intended to scan a large, diverse codebase for hard-coded credentials, or credentials present in configuration files. These represent a serious security issue, and can be extremely hard to detect and manage. The specific focus of this script is to create a...

threat-modeling-mcp-server

Threat Modeling MCP Server A Model Context Protocol MCP server for comprehensive threat modeling with guided code validation. Table of Contents Overview Quick Start Prompts Key Features Prerequisites Installation Running with Kiro CLI Output File Management Quick Reference Tools Overview Threat...