604842 matches found
Certitude
Certitude is a Python package to perform supervised malicious URL classification using a joint set of lexicographic and certificate features. All COSSAS projects are hosted onGitLab with a push mirror to GitHub. For issues/contributions check CONTRIBUTING.md Getting Started Certitude requires...
Android-Disassembler
Android-Disassembler CodeFactor Analyze malicious app on your phone Maintenance status Maintenance has resumed, but the project is still in a recovery and modernization phase. The baseline now expects initialized git submodules before building. Default open/import/export flows now use SAF-first...
Security-Datasets
Security Datasets The Security Datasets project is an open-source initiatve that contributes malicious and benign datasets, from different platforms, to the infosec community to expedite data analysis and threat research. Docs https://securitydatasets.com Goals Provide open portable datasets to...
hostintel
hostintel This tool is used to collect various intelligence sources for hosts. Hostintel is written in a modular fashion so new intelligence sources can be easily added. Hosts are identified by FQDN host name, Domain, or IP address. This tool only supports IPv4 at the moment. The output is in CSV...
Minesweeper
A Burpsuite plugin BApp to aid in the detection of scripts being loaded from over 23000+ malicious cryptocurrency mining domains cryptojacking. Summary Minesweeper will passively scan in-scope items looking for matches against more than 23000+ known cryptojacking domains within the source of page...
maltrail
Maltrail Maltrail is a network traffic detection system that identifies communication with known malicious infrastructure and reports selected traffic anomalies. It matches domains, URLs, IP addresses, IP:port pairs, and User-Agent values observed on the network against a set of indicators called...
vet
Quick Start β’ Documentation β’ Community !NOTE vet supports special mode for Agent Skills. Run to scan an Agent Skill hosted in a GitHub repository...
sh4d0wup
sh4d0wup root@kitploit: % docker run -it --rm ghcr.io/kpcyrd/sh4d0wup:edge -h Usage: sh4d0wup OPTIONS Commands: bait Start a malicious update server front Bind a http/https server but forward everything unmodified infect High level tampering, inject additional commands into a package tamper Low...
regexploit
Regexploit Find regexes which are vulnerable to Regular Expression Denial of Service ReDoS. More info onthe Doyensec blog Many default regular expression parsers have unbounded worst-case complexity. Regex matching may be quick when presented with a matching input string. However, certain...
Malicious code in polygon-toolkits-validator (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 247ced1b39382952aa5c665774c77a1c321b80b13d29f7118e938d85ef720c23 The package ships only a minified dist bundle that re-exports familiar node:crypto names createCipheriv, createDecipheriv, createPrivateKey,...
Manalyze
Manalyze Introduction Manalyze is a static analysis tool for PE files that you can use to conduct primary assessment on an executable or set of executables. It collects weak signals that could indicate malicious behavior and displays information that can help a subsequent manual analysis. If you...
Malicious code in amprem-activator (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bb73ef0a9130c0751f253465a40f102cddb6cecdec2835dd7cc9c0f4150efa1 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
androguard
Androguard Do you think your phone has been pwned ? please check IsMyPhonePwned New tool: Goauld Dynamic injection tool for Linux/Android See the new version of Androguard: https://github.com/androguard/androguard/tree/ng Installation Quick installation: root@kitploit: pip install androguard...
malicious-pdf
Malicious PDF Generator β οΈ Generate 67 malicious PDF test files for testing phone-home callbacks, SSRF, XSS, XXE, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh Used for penetration testing, bug bount...
MaliciousMacroGenerator
Malicious Macro Generator Utility Simple utility design to generate obfuscated macro that also include a AV / Sandboxes escape mechanism. Requirement root@kitploit: Python 2.7 Usage root@kitploit: MMG.Malicious Macro Generator v2.0 - RingZer0 Team Author: Mr.Un1k0d3r [email protected] Usage:...
F-Scrack
To prevent this script from being maliciously used, this project has been deleted...
PowerLurk
PowerLurk PowerLurk is a PowerShell toolset for building malicious WMI Event Subsriptions. The goal is to make WMI events easier to fire off during a penetration test or red team engagement. Please see my post Creeping on Users with WMI Events: Introducing PowerLurk for more detailed information:...
MaliciousBrowserExtensions
Malicious Browser Extensions Join the Discord Try our Extension Try ExterminAI Overview β The owner and contributors are NOT RESPONSIBLE in any shape or form for any damage inflicted by the negligent use of samples stored in the repository, users must take necessary precautions prior to executing...
malicious_extension_sentry
Malicious Chrome/Edge Extensions Database An automatically updated database of Chrome extensions removed from the Chrome Web Store for containing malware, policy violation, or bundling unwanted software π Live Dashboard Real-time search, filtering by threat category, and source reports, built on...
excelpeek
ExcelPeek v0.2 ExcelPeek is a tool designed to help investigate potentially malicious Microsoft Excel files. Documentation Use the Installation Guide to get started. Go to the User's Guide for additional information...