awesome-nodejs-security

A curated list of awesome Node.js Security resources. Learn Node.js Secure Coding techniques and best practices from Liran Tal Contents Tools Web Framework Hardening Static Code Analysis Dynamic Application Security Testing Input/Output Validation Secure Composition CSRF Vulnerabilities and...

magisk-renef

MagiskRenef A Magisk / KernelSU / APatch module that automatically packages and runs renef — a dynamic instrumentation toolkit for Android. Inspired by magisk-frida. Requirements Rooted Android device Magisk / KernelSU / KernelSU Next / APatch ARM64 only — renef only supports ARM64 Android Androi...

UniversalDVC

Universal Dynamic Virtual Channel connector for Remote Desktop Services UDVC Terminal Services or Remote Desktop Services are offering many hidden features for those who want to dig deeper. One of these services is the Dynamic Virtual Channel that enables us to communicate over an open RDP...

Android-Security-Teryaagh

AST - Android Security Teryaagh 🔥 Android security guides, roadmap, tools, docs, courses, write-ups and teryaagh. 📚Check out the full Documentation Website here! Auto-generated using MkDocs Buy me a coffee ☕ USDTERC20 : 0x36811c0544E09b48Fe491f67C5743a43067b280B Contents 📜 0. Roadmap Programing...

strix

Strix The open-source AI pentesting tool. Autonomous AI hackers that find and fix your app’s vulnerabilities. !TIP New! Strix integrates seamlessly with GitHub Actions and CI/CD pipelines. Automatically scan for vulnerabilit...

muraena

Muraena is an almost-transparent reverse proxy aimed at automating phishing and post-phishing activities. The tool re-implements the 15-years old idea of using a custom reverse proxy to dynamically interact with the origin to be targeted, rather than maintaining and serving static pages...

jackhammer

Jackhammer: One Security vulnerability assessment/management tool to solve all the security team problems. What is Jackhammer? Jackhammer is a collaboration tool built with an aim of bridging the gap between Security team vs dev team, QA team and being a facilitator for TPM to understand and trac...

NmapReportTemplate

Nmap Report Template Template designed to dynamically display information obtained from Nmap Scan Screenshots Usage 1. Download the nmaptemplatereport.xsl file and, when running Nmap , pass the file as a stylesheet. Example nmap --open -A -T4 -F --script vulners -oX scanoutput.xml --stylesheet...

NebulaPulsar

NebulaPulsar Update: This project has now become a sub-project of Alien for demonstrating my ideas and experimental purposes. NebulaPulsar is a proof-of-concept in-memory implant framework for Java JSP and ASP.NET ASPX/ASHX/ASMX, originally developed as part of the Alien project. Unlike tradition...

fuzzuli

fuzzuli Motivation • Background • Installation • Usage • Running fuzzuli • Tool Page fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain. Motivation In my application security testing journey that i have been doing for years, i...

brawl-public-game-001

BRAWL One of the challenging problems for cyber security researchers developing detection and response capabilities is finding a realistic environment in which to test their hypothesis and capabilities. The cheapest method is to test capabilities on a small lab network. But this environment is...

Limon

Limon - Sandbox for Analyzing Linux Malwares Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect the Linux malware before execution, during execution, and...

autossrf

Summary autoSSRF is your best ally for identifying SSRF vulnerabilities at scale. Different from other ssrf automation tools, this one comes with the two following original features : Smart fuzzing on relevant SSRF GET parameters When fuzzing, autoSSRF only focuses on the common parameters relate...

RESim

RESim Reverse engineering using a full system simulator. Dynamic analysis by instrumenting simulated hardware using Simics1 Trace process trees, system calls and individual programs Reverse execution to selected breakpoints and events Integrated with IDA Protm debugging client Ghidra plugins for...

axiom

WARNING : Axiom Classic is now in maintenance mode. We encourage you to transition to the new Ax Framework. In the coming months, we will introduce essential quality-of-life updates to Axiom Classic before 2025. Long live Axiom! Axiom is a dynamic infrastructure framework to efficiently work with...

DrSemu

Dr.Semu Dr.Semu runs executables in an isolated environment, monitors the behavior of a process, and based on Dr.Semu rules created by you or the community, detects if the process is malicious or not. The tool is in the early development stage whoami: @qazqaz With Dr.Semu you can create rules to...

TinyInst

TinyInst Copyright 2020 Google LLC Licensed under the Apache License, Version 2.0 the "License"; you may not use this file except in compliance with the License. You may obtain a copy of the License at https://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in...

CAPEv2

CAPE: Malware Configuration And Payload Extraction - Documentation CAPE is a malware sandbox. A sandbox is used to execute malicious files in an isolated environment whilst instrumenting their dynamic behaviour and collecting forensic artefacts. CAPE was derived from Cuckoo v1 which features the...

revsuit

RevSuit - A Flexible and Powerful Reverse Connection Platform English ｜简体中文 Overview RevSuit is a flexible and powerful reverse connection platform designed for receiving connection from target host in penetration. It currently supports HTTP, DNS, RMI, LDAP, MySQL and FTP protocols. Flexible: 1...

reverse-engineering

Reverse Engineering resources A curated list of awesome reversing resources Awesome Reversing Books Courses Practice Hex Editors Binary Format Disassemblers Binary Analysis Bytecode Analysis Import Reconstruction Dynamic Analysis Debugging Mac Decrypt Document Analysis Scripting Android Yara Book...