mud-visualizer

Manufacturer Usage Description MUD Visualizer Warning: mud-visualizer is currently beta. Use at your own risk. This tool can be used to visualize the MUD files in JSON format. Table of Contents Motivation Installation Supported MUD Abstractions Contribution Support Citation License Motivation MUD...

uac

Unix-like Artifacts Collector UAC About • Documentation • Main Features • Supported Operating Systems • Usage • Contributing • Support • License 🔎 About UAC UAC Unix-like Artifacts Collector is a powerful and extensible incident response tool designed for forensic investigators, security analysts...

tcpflow

TCPFLOW 1.5.0 Downloads directory: http://digitalcorpora.org/downloads/tcpflow/ Installation Most common GNU/Linux distributions ship tcpflow in their repositories. So on Debian/Ubuntu/etc you can say sudo apt-get install tcpflow and on Fedora/RedHat/CentOS/etc you can say sudo dnf install tcpflo...

whatsapp-media-decrypt

WhatsApp Media Decrypt A recent high-profile forensic investigation reported that “due to end-to-end encryption employed by WhatsApp, it is virtually impossible to decrypt the contents of the downloader .enc file to determine if it contained any malicious code in addition to the delivered video.”...

Manalyze

Manalyze Introduction Manalyze is a static analysis tool for PE files that you can use to conduct primary assessment on an executable or set of executables. It collects weak signals that could indicate malicious behavior and displays information that can help a subsequent manual analysis. If you...

claudleak

claudleak Scans public GitHub repositories for leaked credentials in AI coding tool configuration files .claude/, .cursor/, .continue/, .codex/, CLAUDE.md, AGENTS.md, etc.. Uses TruffleHog for secret detection. Example .claude/ directory: "permissions": "allow": "Bashgo build:",...

Registry-Spy

Registry Spy: Cross-Platform Windows Registry Browser Registry Spy is a free, open-source cross-platform Windows Registry viewer. It is a fast, modern, and versatile explorer for raw registry files. Features include: Windows, macOS, and Linux support Fast, on-the-fly parsing means no upfront...

warcannon

WARCannon - معالجة متوازية قوية بشكل كارثي لـ WARC تم بناء WARCannon لتبسيط وتقليل تكلفة عملية 'البحث في الإنترنت'. مع WARCannon، يمكنك: بناء واختبار أنماط التعبيرات العادية regex ضد بيانات Common Crawl الحقيقية تحميل مجموعات بيانات Common Crawl بسهولة للمعالجة المتوازية توسيع قدرات الحوسبة لمعال...

ohmybackup

ohmybackup ohmybackup - Scan Victim's Backup Directories & Backup Files ohmybackup Scans backup folders on target sites. Searches archived files in the folders it finds. With the 2-file scanning system, it adds extensions and filenames in different ways, making it more likely to be found. 1 -...

CVE-2024-28995

إثبات المفهوم PoC والماسح الجماعي CVE-2024-28995 نظرة عامة يحتوي هذا المستودع على إثبات مفهوم PoC وماسح جماعي لثغرة اجتياز الدليل CVE-2024-28995 في SolarWinds Serv-U. تسمح هذه الثغرة بالوصول غير المصرح به لقراءة الملفات الحساسة على الجهاز المضيف. تم اكتشاف الثغرة والإبلاغ عنها بواسطة Hussein Dahe...

unicorn

Unicorn Engine LOOKING FOR CONTRIBUTORS! See this. Unicorn is a lightweight, multi-platform, multi-architecture CPU emulator framework, based on QEMU. Unicorn offers some unparalleled features: Multi-architecture: ARM, ARM64 ARMv8, M68K, MIPS, PowerPC, RISCV, SPARC, S390X, TriCore and X86 16, 32,...

pip-audit

pip-audit pip-audit is a tool for scanning Python environments for packages with known vulnerabilities. It uses the Python Packaging Advisory Database https://github.com/pypa/advisory-database via the PyPI JSON API as a source of vulnerability reports. This project is maintained in part by Trail ...

glasgo

أداة التحليل الثابت Glasgo تم نقل المستودع الرسمي لهذا المشروع إلى Github-ttarvis/glasgo. المشروع هذه أداة تحليل ثابت مكتوبة بلغة Go لتحليل كود Go. ستكتشف المشكلات الأمنية وبعض مشكلات الصحة التي قد يكون لها تأثير أمني. تجميع لتجميع الأداة، تأكد من تثبيت مترجم Go أولاً. 1. استخدم Go build للحصول ع...

permission-manager

Permission manager Welcome to the Permission Manager! 🎉 🎉 Permission Manager is an application developed by SIGHUP that enables a super-easy and user-friendly RBAC management for Kubernetes. If you are looking for a simple and intuitive way of managing your users within a Kubernetes cluster, this...

termshark

Termshark A terminal user-interface for tshark, inspired by Wireshark. V2.4 is out now with packet search and profiles for colors and columns! See theChangeLog. If you're debugging on a remote machine with a large pcap and no desire to scp it back to your desktop, termshark can help! Features Rea...

CVE-2017-9606

CVE-2017-9606 نظرًا لعدم كفاية التحقق من السلامة والأصالة وانخفاض صلاحيات المستخدم في مجلد التحديثات، يمكن للمستخدم المحلي إنشاء ملفات تحديث ViPNet مزيفة تحتوي على كود تنفيذ عشوائي ووضعها في مجلد تحديثات ViPNet. بعد وضع ملفات التحديث المزيفة في مجلد تحديثات ViPNet، يقوم نظام تحديث ViPNet بتنفيذها...

dismember

🔪 Dismember Dismember is a command-line toolkit for Linux that can be used to scan the memory of all processes or particular ones for common secrets and custom regular expressions, among other things. It will eventually become a full /proc toolkit. Using the grep command, it can match a regular...

UnderlayCopy

UnderlayCopy UnderlayCopy est un utilitaire PowerShell pour l'acquisition NTFS de bas niveau et l'extraction d'artefacts système protégés et verrouillés par exemple : SAM , SYSTEM , NTDS.dit , les ruches du registre et autres fichiers normalement inaccessibles pendant que Windows est en cours...

DeepBlueCLI

DeepBlueCLI DeepBlueCLI - a PowerShell Module for Threat Hunting via Windows Event Logs Eric Conrad, Backshore Communications, LLC deepblue at backshore dot net Twitter: @ericconrad http://ericconrad.com Sample EVTX files are in the .\evtx directory Note If your antivirus freaks out after...

kubebot

Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...