15871 matches found
machofile
machofile machofile is a module to parse Mach-O binary files, with a focus on malware analysis and reverse engineering. Inspired by Ero Carrera's pefile, this module aims to provide similar capabilities but for Mach-O binaries instead. Reference material and documentation used to gain the file...
nuvola
nuvola nuvola with the lowercase n is a tool to dump and perform automatic and manual security analysis on AWS environments configurations and services using predefined, extensible and custom rules created using a simple Yaml syntax. The general idea behind this project is to create an abstracted...
retoolkit
Reverse Engineer's Toolkit What? This is a collection of tools you may like if you are interested in reverse engineering and/or malware analysis on x86 and x64 Windows systems. After installing this program, you'll have two ways to access the tools: Double-click the retoolkit icon in the Desktop...
pybatfish
Got questions, feedback, or feature requests? Join our community onSlack! Pybatfish Pybatfish is a Python client for Batfish. What is Batfish? Batfish is a network validation tool that provides correctness guarantees for security, reliability, and compliance by analyzing the configuration of...
polytracker
PolyTracker PolyTracker is a tool originally created for the Automated Lexical Annotation and Navigation of Parsers , a backronym devised solely for the purpose of referring to it as The ALAN Parsers Project. However, it has evolved into a general purpose tool for efficiently performing data-flow...
knowsmore
Knows More KnowsMore officially supports Python 3.8+. Main features Import NTLM Hashes from .ntds output txt file generated by CrackMapExec or secretsdump.py Import NTLM Hashes from NTDS.dit and SYSTEM Import Cracked NTLM hashes from hashcat output file Import BloodHound ZIP or JSON file BloodHou...
trailmark
Trailmark Parse source code into queryable graphs of functions, classes, calls, and semantic annotations for security analysis. Trailmark uses tree-sitter for language-agnostic AST parsing and rustworkx for high-performance graph traversal. The long-term vision is to combine this graph with...
XnlReveal
About - v4.5 This is a Chrome/Firefox Extension that can do the following: For hosts that are in scope: Show an alert for any query parameters that are reflected and identify "sus" parameters. Optionally check if the characters '," and are reflected without being encoded. Write details of reflect...
NodeGoat
NodeGoat Being lightweight, fast, and scalable, Node.js is becoming a widely adopted platform for developing web applications. This project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them. Getti...
CyberScan
CyberScan CyberScan is an open source penetration testing tool that can analyse packets , decoding , scanning ports, pinging and geolocation of an IP including latitude, longitude , region , country ... Screenshots Operating Systems Supported Windows XP/7/8/8.1/10 GNU/Linux MacOSX Installation Yo...
malware-check
Install - Usage - Dynamic Analysis - YARA Rules - CI/CD Docs: English | Tiếng Việt Static and dynamic analysis tool for detecting malicious code, suspicious binaries, and privacy violations. Analyzes source code, compiled executables .exe, .dll, .elf, macOS bundles .app, .dmg, .pkg, mobile apps...
DrSemu
Dr.Semu Dr.Semu runs executables in an isolated environment, monitors the behavior of a process, and based on Dr.Semu rules created by you or the community, detects if the process is malicious or not. The tool is in the early development stage whoami: @qazqaz With Dr.Semu you can create rules to...
Above
Above Network security sniffer for finding vulnerabilities in the network. Designed for pentesters and security engineers. / | / / / /| | / / \ | / / \ / |/ // / // / |/ / / // |/.//|// Above: Network Security Sniffer Developer: Mahama Bazarov Caster Contact: [email protected] Version:...
sightline
Sightline Geospatial infrastructure intelligence platform for discovering and analyzing physical-world assets using OpenStreetMap data. Overview Sightline enables searching, monitoring, and analyzing real-world infrastructure including: Telecommunications towers and data centers Power plants,...
X-force
IBM X-Force Exchange library | IBM Security X-FORCE Exchange library in Python 3. Search: threatactivities, threatgroups, malwareanalysis, collector and industries. For others applications. See ---|--- Install pip3 install XForce Use Using you APIKEY make a basic authentication. See . After make ...
vmpdump
VMPDump A dynamic VMP dumper and import fixer, powered by VTIL. Works for VMProtect 3.X x64. Before vs After Usage VMPDump.exe "" -ep= -disable-reloc Arguments: : The ID of the target process, in decimal or hex form. : The name of the module which should be dumped and fixed. This can be an empty...
supply-chain-monitor
Supply Chain Monitor Automated monitoring of the top PyPI and npm packages for supply chain compromise. Polls both registries for new releases, diffs each release against its predecessor, and uses an LLM via Cursor Agent CLI to classify diffs as benign or malicious. Malicious findings trigger a...
QuadraInspect
QuadraInspect / /\ \ / / / / / / / / / / / / / / / / // // / / / / / / / // / // / // / // / / / // // // / / // / / // / \\,/,/,// ,/// /// .//// // The security of mobile devices has become a critical concern due to the increasing amount of sensitive data being stored on them. With the...
reverse-SynthID
Reverse-Engineering SynthID Discovering, detecting, and surgically removing Google's AI watermark through spectral analysis Visit us on PitchHut This fork adds a drag and drop desktop app for the V3 bypass, no command line needed after setup. See gui/README.md for setup and usage. What the...