http-desync-guardian

Overview HTTP/1.1 went through a long evolution since 1991 to 2014: HTTP/0.9 – 1991 HTTP/1.0 – 1996 HTTP/1.1 RFC 2068 – 1997 RFC 2616 - 1999 - 2014...

dc-sonar

DC Sonar Community Repositories The project consists of repositories: dc-sonar-frontend dc-sonar-user-layer dc-sonar-workers-layer ntlm-scrutinizer Disclaimer It's only for education purposes. Avoid using it on the production Active Directory AD domain. Neither contributor incur any responsibilit...

PulseAPK-Core

PulseAPK 🌍 Languages English | Deutsch | Español | Français | עברית | 한국어 | Беларуская | Suomi | Latviešu | Eesti | Lietuvių | Čeština | Slovenčina | Magyar | العربية | Português | Русский | Українська | 中文 PulseAPK is a professional-grade, cross-platform GUI for Android reverse engineering and...

QuadraInspect

QuadraInspect root@kitploit: / /\ \ / / / / / / / / / / / / / / / / // // / / / / / / / // / // / // / // / / / // // // / / // / / // / \\,/,/,// ,/// /// .//// // The security of mobile devices has become a critical concern due to the increasing amount of sensitive data being stored on...

jvmxray

JVMXRay: Java Application Security Monitoring Duke history Documentation | Changes from Upstream | Project Blog JVMXRay monitors Java applications in real-time via bytecode injection, detecting vulnerabilities and suspicious activity without code changes. 19 modular sensors track file access,...

qiling

Qiling's use case, blog and related work Qiling is an advanced binary emulation framework, with the following features: Emulate multi-platforms: Windows, macOS, Linux, Android, BSD, UEFI, DOS, MBR. Emulate multi-architectures: 8086, X86, X8664, ARM, ARM64, MIPS, RISC-V, PowerPC. Support multiple...

morf

MORF Mobile Reconnaissance Framework A powerful offensive security toolkit for mobile application analysis Find Secrets. Protect Apps. Stay Secure. 📋 Table of Contents 💡 Overview 🚀 Quick Start 🔍 Key Features 🏗️ Architecture 📋 Common Use Cases 📦 Installation Prerequisites Method 1: Docker...

skills

Trail of Bits 技能市场 Trail of Bits 提供的 Claude Code 插件市场，提供增强 AI 辅助安全分析、测试和开发工作流程的技能。Codex 可通过其 Claude 市场兼容性加载此市场。 另请参阅： claude-code-config · skills-curated · claude-code-devcontainer · dropkit 安装 Claude Code 市场 root@kitploit: /plugin marketplace add trailofbits/skills 浏览并安装插件 root@kitploit: /plugin...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

jsfinder

功能 | 安装 | 使用 | 演示 | 待办事项| 联系方式 jsFinder 是一个用 Go 编写的命令行工具，用于扫描网页，查找 HTML 源代码中链接的 JavaScript 文件。它搜索任何可能包含 JavaScript 文件的属性（例如 src、href、data-main 等），并将文件的 URL 提取到文本文件中。该工具设计简单易用，支持从文件或标准输入读取 URL。 jsFinder 对于想要查找和分析 Web 应用所使用的 JavaScript 文件的开发者和安全专业人员非常有用。通过分析 JavaScript 文件，可以了解应用的功能，并检测任何安全漏洞或敏感信息泄露...

htrace.sh

描述 htrace.sh 是一个用于 HTTP/HTTPS 故障排除和分析的 shell 脚本。它也是一个围绕若干开源安全工具的简单包装器。 要更详细地了解 htrace.sh、其参数、功能以及工作原理，请运行 htrace.sh --examples 或查看 Wiki 。 预览 使用方法 要安装 htrace.sh 本身： root@kitploit: 克隆此仓库 git clone https://github.com/trimstray/htrace.sh 进入目录 cd htrace.sh 安装 sudo ./setup.sh install 安装依赖（支持 Debian...

call_map

========== Call Map .. default-role:: code About Call Map is a tool for navigating call graphs in Python, with plans to support other languages. Below is a screen shot after running callmap -m toolz, then clicking on some functions. .. figure:: docs/UI-clicked-on-function.png While Call Map is...

waf-bypass

WAF Bypass Tool WAF Bypass Tool is an open source tool to analyze the security of any WAF for False Positives and False Negatives using predefined and customizable payloads. Check your WAF before an attacker does. WAF Bypass Tool is developed by Nemesida WAF team with the participation of...

PulseAPK

PulseAPK 🌍 Languages English | Deutsch | Español | Français | עברית | 한국어 | Беларуская | Suomi | Latviešu | Eesti | Lietuvių | Čeština | Slovenčina | Magyar | العربية | Português | Русский | Українська | 中文 💡 Looking for a cross-platform alternative? Download PulseAPK Core here:...

threat-modeling-mcp-server

Threat Modeling MCP Server A Model Context Protocol MCP server for comprehensive threat modeling with automatic code validation. Table of Contents Overview Quick Start Prompts Key Features Prerequisites Installation Running with Kiro CLI Output File Management Quick Reference Tools Overview Threa...

GhidrAssist

GhidrAssist Author: Jason Tang An advanced LLM-powered plugin for interactive reverse engineering assistance in Ghidra. Description GhidrAssist integrates Large Language Models LLMs into Ghidra to provide intelligent assistance for binary exploration and reverse engineering. It supports any OpenA...

trailmark

Trailmark Parse source code into queryable graphs of functions, classes, calls, and semantic annotations for security analysis. Trailmark uses tree-sitter for language-agnostic AST parsing and rustworkx for high-performance graph traversal. The long-term vision is to combine this graph with...

nuvola

nuvola nuvola with the lowercase n is a tool to dump and perform automatic and manual security analysis on AWS environments configurations and services using predefined, extensible and custom rules created using a simple Yaml syntax. The general idea behind this project is to create an abstracted...

cloud

Cloud Monitoring the Cloud Landscape Our mission with this project is to provide an always up-to-date and freely accessible map of the cloud landscape for every major cloud service provider. We've decided to kick things off with collecting SSL certificate data of AWS EC2 and GCP machines,...

drs-malware-scan

Perform malware scan analysis of on-prem servers using AWS services Challenges with on-premises malware detection It can be difficult for security teams to continuously monitor all on-premises servers due to budget and resource constraints. Signature-based antivirus alone is insufficient as moder...