quark-engine

Malware Family Analysis Report Showcase | | ---|---|--- | !https://assets.ki...

nfstream

NFStreamrepo is a multiplatform Python framework providing fast, flexible, and expressive data structures designed to make working with online or offline network data easy and intuitive. It aims to be Python's fundamental high-level building block for doing practical, real-world network flow data...

instaloader

.. image:: https://raw.githubusercontent.com/instaloader/instaloader/master/docs/logoheading.png .. badges-start |pypi| |pyversion| |license| |aur| |contributors| |downloads| .. |pypi| image:: https://img.shields.io/pypi/v/instaloader.svg :alt: Instaloader PyPI Project Page :target:...

NginxHunter

NginxHunter Description NginxHunter is a comprehensive tool designed to analyze Nginx access logs for security vulnerabilities and suspicious activities. It detects SQL injection attempts, scanner tools, sensitive path accesses, exploitation attempts, webshells, and more. Ideal for system...

CVE-2021-33739_PoC_Analysis

This is what I analyzed and studied about CVE-2021-33739 PoC. You can get the full resources from here: https://github.com/freeide2017/CVE-2021-33739-POC...

de4py

de4py ⚠️ de4py is FREE & OPEN SOURCE CC BY-NC 4.0. Any paid versions sold elsewhere or commercial use are NOT permitted. If you paid for de4py, you were misled. De4py is an advanced Python deobfuscator with a beautiful UI PySide6 and a robust set of features for malware analysts and reverse...

shredder-rs

Shredder-RS A polymorphic mutation engine for x8664 binaries. Overview Shredder-RS implements instruction-level shredding to defeat static analysis. By breaking the linear flow of the code and injecting randomized junk nodes, it forces disassemblers to follow a complex graph of JMP-linked...

CVE-2021-44228

Tai-e for CVE-2021-44228 This a sample project that utilizes Tai-e to identify Log4Shell a.k.a. CVE-2021-44228 vulnerability and its trigger paths Related video in Chinese: https://www.bilibili.com/video/BV1dV411F781 Getting started Clone this repository via Git: git clone...

Network-Analysis-Tools

Pcap Capture File Analysis Toolv.1 !CONTACT! | Email: [email protected] | | Github: github/azizaltuntas | | Twitter: @esccopyright | Features 1-Top 10 Visited Sites 2-Emails 3-All Request Urls 4-User-Agents List 5-String Grep Mode 6-Connection details 7-Ports Used 8-ALL Ip List 9-Manuel Pack...

ghostrings

Ghostrings Scripts for recovering string definitions in Go binaries with P-Code analysis. Tested with x86, x86-64, ARM, and ARM64. Scripts Golang These can be found in the Golang category in the Script Manager. GoDynamicStrings.java Analyzes P-Code to find string structures created on the stack...

xed

Intel® X86 Encoder Decoder Intel® XED Doxygen API manual and source build manual: https://intelxed.github.io Bugs: https://github.com/intelxed/xed/issues/new Abbreviated GITHUB building instructions: git clone https://github.com/intelxed/xed.git xed git clone https://github.com/intelxed/mbuild.gi...

prefetch-hash-cracker

Prefetch Hash Cracker Motivation During the forensic analysis of a Windows machine, you may find the name of a deleted prefetch file. While its content may not be recoverable, the filename itself is often enough to find the full path of the executable for which the prefetch file was created. Usin...

SILENTCHAIN

SILENTCHAIN AI™ - Community Edition 🔗 ⛓️ 🔒 AI-Powered Passive Vulnerability Analysis for Burp Suite Intelligent • Silent • Adaptive • Comprehensive 🚀 Getting Started • 📖 Documentation • 🔧 Configuration • 📊 Benchmarks • ⬆️ Upgrade to Pro Note: This is the Community Edition. Commercial and...

np-audit

np-audit — npm package auditor Static security analysis for npm packages — detects obfuscated lifecycle scripts, known vulnerabilities, and malicious patterns before they run. Drop-in replacement for npm install and npm ci. Zero dependencies. Pure Node.js built-ins only. 100 kB on the wire. npx...

qiling

Qiling's use case, blog and related work Qiling is an advanced binary emulation framework, with the following features: Emulate multi-platforms: Windows, macOS, Linux, Android, BSD, UEFI, DOS, MBR. Emulate multi-architectures: 8086, X86, X8664, ARM, ARM64, MIPS, RISC-V, PowerPC. Support multiple...

SHA256-CDP

SHA256-CDP: Cyclic Digit-sum Projection GPU-accelerated rainbow table implementation of the CDP structural analysis framework for SHA-256. Built on the findings of the CDP paper DOI: 10.5281/zenodo.20627240, this repository provides a complete, working implementation of CDP-based rainbow chain...

JSScanner

JSScanner You can find the article related to this script here https://securityjunky.com/scanning-js-files-for-endpoint-and-secrets/ To install the required tools use bash install.sh Change the alive.txt with the domains you need to test. These should be in below format http://example.com...

kubesec

Kubesec !Testing Workflowtestingworkflowbadgetestingworkflowbadge !Security Analysis Workflowsecurityworkflowbadgesecurityworkflowbadge !Release Workflowreleaseworkflowbadgereleaseworkflowbadge !Go Report Cardgoreportcardbadgegoreportcard !PkgGoDevgodevbadgegodev 🚨 v1 API is deprecated, please re...

FOCA

FOCA Fingerprinting Organizations with Collected Archives FOCA is a tool used mainly to find metadata and hidden information in the documents it scans. These documents may be on web pages, and can be downloaded and analysed with FOCA. It is capable of analysing a wide variety of documents, with t...

SCANNER-INURLBR

New repository Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found. https://github.com/MrCl0wnLab/SCANNER-INURLBR...