stegowiper

stegoWiper: A powerful and flexible active attack for disrupting stegomalware Over the last 10 years, many threat groups have employed stegomalware or other steganography-based techniques to attack organizations from all sectors and in all regions of the world. Some examples are: APT15/Vixen Pand...

Ashok

Ashok Incredible Fast Recon Swiss Army Knife 📌 Introduction Reconnaissance is the first phase of penetration testing which means gathering information before any real attacks are planned So Ashok is an Incredible fast recon tool for penetration tester which is specially designed for Reconnaissanc...

Insider-Threat

Insider Threat Graph Models R5.2 & R6.2 This repository contains data preparation, feature extraction, and graph-based models GCN-NN, GCN-BiLSTM, and GCN-BiLSTM+Attention for implicit+explicit signals for insider-threat detection using the CMU CERT Insider Threat Test Dataset R5.2, R6.2. Reposito...

log4j-detect

log4j-detect Simple Python 3 script to detect the "Log4j" Java library vulnerability CVE-2021-44228 for a list of URL with multithreading The script "log4j-detect.py" developed in Python 3 is responsible for detecting whether a list of URLs are vulnerable to CVE-2021-44228. To do so, it sends a G...

jsubfinder

JSubFinder is a tool writtin in golang to search webpages & javascript for hidden subdomains and secrets in the given URL. Developed with BugBounty hunters in mind JSubFinder takes advantage of Go's amazing performance allowing it to utilize large data sets & be easily chained with other tools...

keyFinder

KeyFinder Passive API key and secret discovery for Chrome and Firefox KeyFinder is a browser extension for Chrome and Firefox that passively scans every page you visit for leaked API keys, tokens, secrets, and credentials. It runs silently in the background with zero configuration required. What ...

TraceTree

TraceTree TraceTree Demo TraceTree cascade-analyzer is an autonomous security organism designed for the agentic era. It moves beyond simple scanning into a robust, hardened, and scalable detection ecosystem. Like its mascot, the spider, TraceTree weaves a comprehensive web of protection around yo...

whids

IMPORTANT: this README and other documentation is not updated to reflect the changes made to latest beta releases as a lot of changes happened. All this will be updated in time when a stable version will be released see Roadmap until next release. Feel free to run beta releases on your own and as...

USBvalve

!NOTE USBvalve Version 1.0.0 A complete rewrite of the application has been done: moved away from Arduino IDE environment, now the code is written for the Pi Pico SDK dependencies on external libraries have been reduced a lot USB host support for Low Speed devices is now more robust ATTiny85,...

raink

Use LLMs for document ranking. Description There's power in AI in that you can "throw a problem at it" and get some result, without even fully defining the problem. For example, give it a bunch of code diffs and a security advisory, and ask, "Which of these diffs seems most likely to fix the...

VulnLLM-R

VulnLLM-R: Specialized Reasoning LLM for Vulnerability Detection Paper: arXiv:2512.07533 Code & Data: GitHub Demo: Web demo Model: 7B Model Environment and dataset 🛠️ Create environment Install Git LFS and clone the repository LFS files are fetched automatically during clone git lfs install...

vmware_vcenter_cve_2020_3952

Proof of concept for CVE-2020-3952 This is a short piece of code that exploits of CVE-2020-3952, which is described in detail at the Guardicore Labs post over here. This vulnerability was published by VMware in April 2020 with a maximum CVSS score of 10.0. It allows an attacker with a network...

mobileAudit

Mobile Audit Security analysis for Android APKs, from upload to actionable findings. Mobile Audit is a Django application for static application security testing and malware inspection. It extracts APK metadata, detects risky implementation patterns, organizes findings by severity, and provides a...

netwatch

NetWatch Network diagnostics in your terminal. netwatch --view dense. Four boxes, no chrome, every keybind on a border. Download grows up from the axis, upload grows down. One binary, no config. sudo netwatch and you have live capture with L7 decode, process attribution where available, and a...

CVE-2025-24813-PoC

CVE-2025-24813-PoC Apache Tomcat Remote Code Execution Vulnerability Batch Detection Script CVE-2025-24813 Disclaimer: The vulnerability and its reproduction steps described in this document are for cybersecurity research and educational purposes only. No one shall use the information provided in...

cyberprobe

Cyberprobe The full documentation is at https://cybermaggedon.github.io/cyberprobe-docs/ Summary Cyberprobe is a network packet inspection toolkit Deep Packet Inspection for real-time monitoring of networks. This has applications in network monitoring, intrusion detection, forensic analysis, and ...

Hunting-Queries-Detection-Rules

KQL Sentinel & Defender queries KQL for Defender XDR, Microsoft Sentinel & other Microsoft Solutions The purpose of this repository is to share KQL queries that can be used by anyone and are understandable. These queries are intended to increase detection coverage through the logs of Microsoft...

malware-check

Install - Usage - Dynamic Analysis - YARA Rules - CI/CD Docs: English | Tiếng Việt Static and dynamic analysis tool for detecting malicious code, suspicious binaries, and privacy violations. Analyzes source code, compiled executables .exe, .dll, .elf, macOS bundles .app, .dmg, .pkg, mobile apps...

graphw00f

Credits to Nick Aleks for the logo! graphw00f - GraphQL Server Fingerprinting Table of Contents How does it work? Detections GraphQL Threat Matrix Prerequisites Installation Configuration Example Usage Fingerprinting GraphQL Detecting & Fingerprinting GraphQL Support & Issues Resources How does i...

xsshunter

DEPRECATED - TRY THE NEW EXPRESS VERSION See here for more info: https://github.com/mandatoryprogrammer/xsshunter-express XSS Hunter Source Code This is a portable version of the source code running on https://xsshunter.com. It is designed to be easily-installable on any server for security...