engine

Droidefense Engine Advance Android Malware Analysis Framework Latest release Download What Droidefense is Droidefense originally named atom: a nalysis t hrough o bservation m achine is the codename for android apps/malware analysis/reversing tool. It was built focused on security issues and trick...

EmbedOS

EmbedOS EmbedOS - Embedded security testing operating system based on Ubuntu 18.04 preloaded with firmware security testing tools. The virtual machine can be downloaded and imported as an OVF file into VirtualBox or VMWare. Download Link The most recent version is 2020.2 from October 2020 and can...

AIX360

AI Explainability 360 v0.3.0 ✨ NEW: IBM Research has a new In-Context Explainability 360 ICX360 toolkit that extends explainability to LLMs , specifically in terms of the input given to the LLM. Please check it out! 🚀✨ The AI Explainability 360 toolkit is an open-source library that supports...

uac

Unix-like Artifacts Collector UAC About • Documentation • Main Features • Supported Operating Systems • Usage • Contributing • Support • License 🔎 About UAC UAC Unix-like Artifacts Collector is a powerful and extensible incident response tool designed for forensic investigators, security analysts...

CVE-2022-2588

CVE-2022-2588 Code adapted for one cpu, and with a vagrant file provided to boot up a vulnerable machine used for educational purposes. To create a vulnerable machine, you need to have Vagrant installed on your machine, then execute on the repository root: Vagrant up Wait for installation and...

misp-taxonomies

MISP Taxonomies MISP Taxonomies is a set of common classification libraries to tag, classify and organise information. Taxonomy allows to express the same vocabulary among a distributed set of users and organisations. Taxonomies that can be used in MISP and other information sharing tool, are...

network-attack-detection

Network Attack Detection using Machine Learning Description This project leverages machine learning techniques to classify network attacks such as Port Scanning, Denial of Service DoS, and malware. The input data is in the Netflow V9 format, which is a standard format used by Cisco. The...

hexora

hexora Hexora is a static analysis tool designed to detect malicious and harmful patterns in Python code. It combines a rule-based static analysis engine with a machine-learned model that scores entire source files to classify them as malicious or benign. It can be used to: Audit project...

CVE-2026-43499

CVE-2026-43499 ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python...

ZeroLogon

ZeroLogon CVE-2020-1472 C++ version. This tool directly resets the machine account password. It does not have recovery functionality. Use with caution in real-world scenarios. Referencing the BOF version: ZeroLogon-BOF, this is a modified single-file EXE version. After compilation, it is only abo...

guardd

Guardd Behavioral anomaly detection for Linux, powered by eBPF and machine learning. Guardd learns how a Linux host normally behaves and flags activity that differs from that baseline. Kernel sensors collect process executions and outbound TCP connection attempts; an Isolation Forest scores the...

dd

dd Run Linux containers on macOS — with no VM. What is dd? dd runs Linux containers natively on Apple-Silicon macOS without a virtual machine. There is no Linux kernel and no hypervisor underneath: a JIT translates the container's code and services its Linux syscalls in userspace the gVisor / PRo...

NGWAF

N3XT-G3N Web App Firewall NGWAF NGWAF is created by@yupengfei, @zhangbosen, @matthewng and @elizabethlim. Special shoutout to@ruinahkoh for her contributions to the initial stages of NGWAF. NGWAF is an experimental proof of concept and not ready for production use in its current form. Contents 1...

atomic-red-team

Atomic Red Team Atomic Red Team™ is a library of tests mapped to the MITRE ATT&CK® framework. Security teams can use Atomic Red Team to quickly, portably, and reproducibly test their environments. Get started You can execute atomic tests directly from the command line, no installation required. S...

reko

reko - a general purpose decompiler. Reko Swedish: "decent, obliging" is a decompiler for machine code binaries. This project is freely available under the GNU General Public License. The project consists of front ends, core decompiler engine, and back ends to help it achieve its goals. A...

columbo

Columbo Columbo es una herramienta de análisis forense informático utilizada para simplificar e identificar patrones específicos en conjuntos de datos comprometidos. Descompone los datos en secciones pequeñas y utiliza reconocimiento de patrones y modelos de aprendizaje automático para identifica...

columbo

Columbo Columbo is a computer forensic analysis tool used to simplify and identify specific patterns in compromised datasets. It breaks down data to small sections and uses pattern recognition and machine learning models to identify adversaries behaviour and their possible locations in compromise...

VMPacker

🛡️ VMPacker ARM64 ELF Virtual Machine Protection System Translate ARM64 native instructions into custom VM bytecode for function-level code protection 🇨🇳 中文文档 • Features • Architecture • Quick Start • Usage • License Overview VMPacker is a Virtual Machine Protection VMP system for ARM64 AArch64...

batea

Batea A batea is a large shallow pan of wood or iron traditionally used by gold prospectors for washing sand and gravel to recover gold nuggets. Batea is a context-driven network device ranking framework based on the anomaly detection family of machine learning algorithms. The goal of Batea is to...

igvm

igvm This project is the home of the Independent Guest Virtual Machine IGVM file format. The format specification can be found in the igvmdefs crate, with a Rust implementation of the binary format in the igvm crate. The IGVM file format is designed to encapsulate all information required to laun...