6446 matches found
demiguise
Demiguise - HTA encryption tool Released as open source by NCC Group Plc - http://www.nccgroup.trust/ Developed by Richard Warren, richard dot warren at nccgroup dot trust http://www.github.com/nccgroup/demiguise Released under AGPL, see LICENSE for more information What does it do? The aim of th...
HFish
HFish design concept HFish is a community free honeypot that focuses on enterprise security scenarios. It provides users with independently operable and practical functions from three scenarios: intranet loss detection, internet threat awareness, and threat intelligence production. It increases...
RvbbitSafe
RvbbitSafe: The Hacker's Nightmare β A Six-Fortress Anti-Ransomware Architecture for Windows π‘οΈ Overview RvbbitSafe is a research prototype demonstrating a paradigm shift in ransomware defense. It's an active, multi-layered fortress that combines hardware virtualization, AI-driven deception,...
awesome-pentest
Awesome Penetration Testing A collection of awesome penetration testing and offensive cybersecurity resources. Penetration testing is the practice of launching authorized, simulated attacks against computer systems and their physical infrastructure to expose potential security weaknesses and...
Kraken
Kraken Kraken, a modular multi-language webshell coded by @secux11. Requirements β’ Support β’ Install β’ Usage β’ Advanced Usage β’ Contributing β’ FAQ β’ Acknowledgments Kraken is a modular multi-language webshell focused on web post-exploitation and defense evasion. It supports three technologies PHP...
shellsum
Shellsum What is this? A defense tool - detect web shells in local directories via md5sum Features Fast speed Lightweight Big database Table output Usages Install git clone https://github.com/ManhNho/shellsum.git chmod 755 -R shellsum/ cd shellsum/ pip install -r requirements.txt Run python...
ved-ebpf
VED-eBPF: Kernel Exploit and Rootkit Detection using eBPF VED Vault Exploit Defense-eBPF leverages eBPF extended Berkeley Packet Filter to implement runtime kernel security monitoring and exploit detection for Linux systems. Introduction eBPF is an in-kernel virtual machine that allows code...
defense-matrix
Defense Matrix Archived Project This project was an attempt to automate various aspects of Linux security auditing and hardening. As time passed, I K4YT3X found many of the methodologies used in this project to be unideal and obsolete. Therefore, I recommend not continuing using this project but...
NovaHypervisor
NovaHypervisor Description NovaHypervisor is a defensive x64 Intel host based hypervisor. The goal of this project is to protect against kernel based attacks either via Bring Your Own Vulnerable Driver BYOVD or other means by safeguarding defense products AntiVirus / Endpoint Protection and kerne...
EhTrace
EhTrace EhTrace pronounced "ATrace" is a high-performance binary tracing and instrumentation framework for Windows. It enables deep runtime analysis of Windows executables without requiring source code, binary modifications, or traditional debugging. Overview EhTrace leverages Windows Vectored...
maritime-security-paper
Maritime Security Research Paper Comprehensive research on security vulnerabilities in autonomous maritime vessels and defense recommendations π Overview This repository contains the complete maritime security research paper, documentation, and supplementary materials for academic publication and...
Agentic-SOC-Simulation
π‘οΈ Agentic SOC Parallel Simulation ASPS: Autonomous Security Operations Parallel Simulation Center Redefining the Future of Security Operations: Full-Stack SOC Parallel Simulation, Multi-Agent Collaboration, and Data-Driven Autonomous Defense π¨π³ δΈζζζ‘£ Chinese Version This project is a cutting-edge...
DonPAPI
DonPAPI DonPAPI automates secrets dump remotely on multiple Windows computers, with defense evasion in mind. Collected credentials: Chromium browser Credentials, Cookies and Chrome Refresh Token Windows Certificates Credential Manager Firefox browser Credentials and Cookies Mobaxterm Credentials...
fence
Fence wraps commands in a sandbox that blocks network access by default and restricts filesystem operations based on configurable rules. It's most useful for running semi-trusted code package installs, build scripts, CI jobs, unfamiliar repos with controlled side effects, and it can also compleme...
Mahoraga-Webapp-Defender
Mahoraga Webapp Defender AI-powered reactive webapp defense system designed to withstand AI-powered hacks in real-time. Table of Contents Mahoraga Webapp Defender Table of Contents Introduction Target Website Mahoraga Defender Architecture Dual Environments Agent Pipeline How to Start Getting rea...
RedTeaming-Tactics-and-Techniques
description: - These are notes about all things focusing on, but not limited to, red teaming and offensive security. What is ired.team notes? This is publicly accessible personal red teaming notes at https://ired.team and https://github.com/mantvydasb/RedTeam-Tactics-and-Techniques about my...
memguard
MemGuard Software enclave for storage of sensitive information in memory. This package attempts to reduce the likelihood of sensitive data being exposed when in memory. It aims to support all major operating systems and is written in pure Go. Features Sensitive data is encrypted and authenticated...
propox
Propox π‘οΈπ Propox is a high-performance, secure, and observable HTTP/HTTPS proxy written in Rust. It is designed to handle high-throughput traffic while actively defending against abusive clients using advanced security mechanisms. β¨ Key Features π Extreme Performance Optimized Concurrency : Built...
frostbyte
FrostByte Progolue: In the past few days I've been experimenting with the AppDomain manager injection technique had a decent success with it in my previous Red Team engagements against certain EDRs. Although, this is really good for initial access vector, I wanted to release a POC which will help...
RecycledInjector
RecycledInjector Description Currently Fully Undetected same-process native/.NET assembly shellcode injector based on RecycledGate by thefLink, which is also based on HellsGate + HalosGate + TartarusGate to ensure undetectable native syscalls even if one technique fails. To remain stealthy and ke...