peniot

بينيوت: أداة اختبار الاختراق لإنترنت الأشياء جدول المحتويات وصف المشروع ما هو بينيوت؟ لماذا نحتاج بينيوت؟ ماذا يقدم بينيوت؟ تعليمات البناء التوثيق الاختبار المساهمون ملاحظة المطور ملصق المشروع وصف المشروع ما هو بينيوت؟ بينيوت هي أداة اختبار اختراق لأجهزة إنترنت الأشياء IoT. تساعدك على اختبار/اختر...

physical-bitcoin-attacks

Known Physical Bitcoin Attacks A list of known attacks against Bitcoin / crypto asset owning entities that occurred in meatspace. NOTE: this list is not comprehensive; many attacks are not publicly reported. If you are aware of an attack that is not listed, please open an issue or pull request —...

rupture

Rupture Rupture is a framework for easily conducting BREACH and other compression-based attacks. Authors Rupture is developed by: Dimitris Karakostas [email protected] Dionysis Zindros [email protected] Eva Sarafianou [email protected] Dimitris Grigoriou [email protected] This...

Pinacolada

Wireless Intrusion Detection System for Hak5's WiFi Coconut Pinacolada looks for typical IEEE 802.11 attacks and then informs you about them as quickly as possible. All this with the help of Hak5's WiFi Coconut, which allows it to listen for threats on all 14 channels in the 2.4GHz range...

MAD-CAT

MAD-CAT Meow Attack Data Corruption Automation Tool Overview MAD-CAT Meow Attack Data Corruption Automation Tool is a comprehensive security tool designed to simulate data corruption attacks against multiple database systems. The tool supports both single-target attacks and bulk CSV-based attack...

Mr.SIP

SIP Security, Attack and Audit Framework Mr.SIP is...

Mr.SIP

إطار عمل لأمن SIP والهجوم والتدقيق Mr.SIP هي أداة...

Awesome-MoAI-Security

Awesome Mobile On-Device AI Security SoK: Attack and Defense Landscape of Mobile On-device AI Systems Mobile on-device AI systems execute AI models locally through ML frameworks such as LiteRT/TFLite , Core ML , ExecuTorch , ONNX , and hardware-backed accelerators. This repo tracks the security...

IoT-Pentest-devices-and-purpose

IoT Pentest Devices and Their Purpose - 2025 Edition This document outlines the latest tools and hardware for IoT security testing in 2025, covering different protocols and technologies. It includes cutting-edge attacks, newly discovered vulnerabilities, and updated hardware and software tools wi...

AzureAD-Attack-Defense

Manuel de jeu d'attaque et de défense pour Microsoft Entra Cette publication est un recueil de divers scénarios d'attaque courants sur Microsoft Entra et de la manière dont ils peuvent être atténués ou détectés. Tous les scénarios, analyses et commentaires inclus sont basés sur les expériences de...

sgx-step

A Practical Attack Framework for Precise Enclave Execution Control SGX-Step is an open-source framework to facilitate side-channel attack research on Intel x86 processors in general and Intel SGX platforms in particular. SGX-Step consists of an adversarial Linux kernel driver and a small user-spa...

relay_bible

Relay Bible — Internal Penetration Testing Relay Guide A comprehensive reference for NTLM relay attacks during authorized internal penetration tests. Covers authentication fundamentals, coercion techniques, per-protocol relay targets, tooling, advanced chaining, and defensive mitigations...

SecML

SecML: A library for Secure and Explainable Machine Learning SecML is an open-source Python library for the security evaluation of Machine Learning ML algorithms. It comes with a set of powerful features: Wide range of supported ML algorithms. All supervised learning algorithms supported by...

bluemonday

bluemonday bluemonday is a HTML sanitizer implemented in Go. It is fast and highly configurable. bluemonday takes untrusted user generated content as an input, and will return HTML that has been sanitised against an allowlist of approved HTML elements and attributes so that you can safely include...

packj

Packj flags malicious/risky open-source packages Packj pronounced package is a tool to help to mitigate software supply chain attacks. It can detect malicious, vulnerable, abandoned, typo-squatting, and other "risky" packages from popular open-source package registries, such as NPM, RubyGems, and...

snmpwn

SNMPwn is an SNMPv3 user enumerator and attack tool. It is a legitimate security tool designed to be used by security professionals and penetration testers against hosts you have permission to test. It takes advantage of the fact that SNMPv3 systems will respond with "Unknown user name" when an...

libsrtp

Introduction to libSRTP This package provides an implementation of the Secure Real-time Transport Protocol SRTP, the Universal Security Transform UST, and a supporting cryptographic kernel. The SRTP API is documented in include/srtp.h, and the library is in libsrtp2.a after compilation. This...

css-the-bomb-inside-your-inbox

CSS : la bombe dans votre boîte de réception Bienvenue dans ce dépôt. Ce dépôt contient tous les supports de ma présentation « CSS : la bombe dans votre boîte de réception ». Ce dépôt contient des codes de preuve de concept, des cas de test et du matériel d'appui qui ont été identifiés, développé...

My-Presentation-Slides

Mes diapositives de présentation Diapositives des présentations publiques d'Orange Tsai. Vous pouvez me trouver à : Blog : https://blog.orange.tw/ E-mail : [email protected] Twitter : @orange8361 2024 WorstFit : Révéler les transformateurs cachés dans Windows ANSI ! Black Hat Europe DEVCORE...

adfsbrute

adfsbrute A script to test credentials against Active Directory Federation Services ADFS, calculating the ADFS url of an organization and allowing password spraying or bruteforce attacks. The main idea is carrying out password spraying attacks with a random and high delay between each test and...