talisman

Talisman チェックインされる秘密情報を検出・防止するツール 目次 Talismanとは？ インストール パスにインストール（推奨） グローバルフックテンプレートとしてのインストール プロジェクトの設定 フックフレームワークとの併用 Pre-commit Husky Talismanを直接実行する アップグレード Talismanの動作 検証 ファイルの無視 対話モード 特定の検出器を無視する 特定のキーワードを無視する 同じタイプの複数ファイルを無視する（ワイルドカード使用） 言語スコープを指定してファイルを無視する カスタム検索パターン 重大度しきい値の設定...

dissect

dissect Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT part of NCC Group. This project is a meta package, it will install all other Dissect modules wi...

KubiScan

KubernetesクラスターのRole-Based Access Control（RBAC）認可モデルにおける危険なパーミッションをスキャンするツール。 本ツールは、「Securing Kubernetes Clusters by Eliminating Risky Permissions」調査の一部として公開されました。https://www.cyberark.com/threat-research-blog/securing-kubernetes-clusters-by-eliminating-risky-permissions/ 目次 概要 できること 使用方法 コンテナ...

WifiForge

A complete WiFi hacking sandbox - virtual, sandboxed, no radio required. mininet-wifi virtual networks in software · spin up a wireless-attack lab from one menu Overview · Installation · Usage · Writing Labs · Labs | Walkthroughs · Safety Overview WifiForge is a terminal-driven framework for...

yasuo

YASUO @0xsauby Description Yasuo is a ruby script that scans for vulnerable 3rd-party web applications. While working on a network security assessment internal, external, redteam gigs etc., we often come across vulnerable 3rd-party web applications or web front-ends that allow us to compromise th...

androwarn

Androwarn 又一款针对恶意Android应用程序的静态代码分析工具 描述 Androwarn 是一款主要旨在检测并警告用户关于 Android 应用程序开发的潜在恶意行为的工具。 该检测通过静态分析应用的 Dalvik 字节码（以 Smali 形式表示）执行，借助 androguard 库。 分析会根据用户选择的技术详细程度生成一份报告。 特点 针对不同恶意行为类别的字节码结构与数据流分析 电话标识符窃取 ：IMEI、IMSI、MCC、MNC、LAC、CID、运营商名称…… 设备设置窃取 ：软件版本、使用统计、系统设置、日志…… 地理位置信息泄露 ：GPS/WiFi 地理位置……...

recollapse

REcollapse REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications. It can also be helpful to bypass WAFs and weak vulnerability mitigations. For more information, take a look at the REcollapse blog post. The goal of this tool ...

go_parser

Yet Another Golang binary parser for IDAPro English | 中文 注意 ： 最新的 master 分支为 Python3 版，以前的 master 分支已重命名为 py2 分支，并且暂停维护。 Python3 版本使用说明 此版本是在 macOS/Windows 上 IDA7.4+, python3.8.x 版本测试通过，如果在其他平台上测试存在问题，欢迎提issue 或者 PR。 另外需要注意，macOS 上 IDA7.4+ 是使用系统默认安装的 Python3，这样可能导致自己安装的第三方库无法加载，需要切换到brew 安装的...

go_parser

Yet Another Golang binary parser for IDAPro English |中文 NOTE : Now the latest master branch is the Python3 version. The old master branch has been changed to branch py2 , and temporarily not maintained. Instructions for Python3 branch This version is developed and tested on macOS/Windows, IDA7.4+...

ubertooth

Ubertooth Project Ubertooth is an open source wireless development platform suitable for Bluetooth experimentation. Ubertooth ships with a capable BLE Bluetooth Smart sniffer and can sniff some data from Basic Rate BR Bluetooth Classic connections. The latest release is 2020-12-R1. The latest...

yara-x

YARA-X YARA-X is a re-incarnation of YARA, a pattern matching tool designed with malware researchers in mind. This new incarnation intends to be faster, safer and more user-friendly than its predecessor. The ultimate goal of YARA-X is replacing YARA as the default pattern matching tool for malwar...

ALEAPP

Android Logs Events And Protobuf Parser If you want to contribute hit me up here: https://abrignoni.github.io Blog posts here: https://leapps.org/blog Download Pre-built releases need no Python installation: ALEAPP GitHub Releases, or LEAPPs Releases for the whole LEAPP family. Platform| Download...

krbrelayx

Krbrelayx - Kerberos relaying and unconstrained delegation abuse toolkit Toolkit for abusing Kerberos. Requires impacket, ldap3 and dnspython to function. It is recommended to install impacket from git directly to have the latest version available. More info about this toolkit available in my blo...

mip22

mip22 mip22 v3.3 mip22 is a advanced phishing tool 83 default websites, clone any site with manual method, add any site with customize method, mask link with subdomains, url shortener, audio notice for view the credentials live, music in background etc... The program is made for educational...

aclpwn.py

aclpwn.py Aclpwn.py is a tool that interacts with BloodHound to identify and exploit ACL based privilege escalation paths. It takes a starting and ending point and will use Neo4j pathfinding algorithms to find the most efficient ACL based privilege escalation path. Aclpwn.py is similar to the...

kube-score

kube-score kube-score is a tool that performs static code analysis of your Kubernetes object definitions. The output is a list of recommendations of what you can improve to make your application more secure and resilient. You can test kube-score out in the browser with the online demo source...

r2frida

r2frida Radare2 与 Frida 强强联合 描述 radare2 的自包含插件，内置 frida，允许使用 r2 命令（但不限于）Frida 脚本 来对本地或远程进程进行插桩。 radare 项目提供了一套完整的逆向工程工具链， 它被积极维护，提供维护良好的功能， 并通过其他编程语言和工具扩展其特性。 Frida 是一个动态插桩工具包，通过注入你自己的 JavaScript， 可以轻松检查和操纵正在运行的进程，并且可选地与你的脚本进行通信。 特性 运行未经修改的 Frida 脚本（使用 :. 命令） 在任意进程中执行 C、Javascript 或 TypeScript 代码...

r2frida

r2frida Radare2 and Frida better together Description Self-contained plugin for radare2 that ships frida and allows to instrument local or remote processes using r2 commands instead but not limited to Frida scripts. The radare project provides a complete toolchain for reverse engineering, it's...

SharpHound

SharpHound 获取 SharpHound SharpHound 的最新构建版本始终可以在此处找到。 要确定与已部署的 BloodHound CE 实例兼容的 SharpHound 版本，请登录 BloodHound CE 的 Web UI，点击 ⚙️（设置）→ 下载收集器。然后，点击用户界面中的“下载 SharpHound”按钮，或使用显示的 SharpHound 版本下载相应的发布二进制文件。或者，从相应的发布提交编译 SharpHound 二进制文件。 文档 请参阅 SharpHound 部分，它是 BloodHound Community Edition 文档 的一部分。...

changeme

changeme A default credential scanner. About changeme picks up where commercial scanners leave off. It focuses on detecting default and backdoor credentials and not necessarily common credentials. It's default mode is to scan HTTP default credentials, but has support for other credentials. change...