BWASP

BWASP The BoB Web Application Security Project BWASP is an open-source, analysis tool to support for Web Vulnerability Manual Analysis hackers. The BWASP tool basically provides predicted information through vulnerability analysis without proceeding with an attack. BWASP supports performing...

deadair

deadair checks whether enabled SIEM detections still have the telemetry they need. It reports missing or stale data, ingest delays, and schema mismatches. Runs locally · Read-only · No agent · No telemetry upload Read the technical write-up · Featured in Detection Engineering Weekly · Featured in...

PacketSender

Introduction https://packetsender.com Read this in other languages:English, Español, Deutsch, Français, italiano 简体中文. Packet Sender is an open source utility to allow sending and receiving TCP, UDP, and SSL encrypted TCP packets as well as HTTP/HTTPS requests and panel generation. The mainline...

factual-rules-generator

factual-rules-generator Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a running operating system. The goal of the software is to be able to use a set of rules against collected or acquired digital forensic evidences and find...

Recaf

Recaf An easy to use modern Java bytecode editor that abstracts away the complexities of Java programs. Download Launcher Usage & instructions found on the launcher repo Snapshot releases See CI actions for release artifacts Independent releases None for 4X currently Features Edit Java bytecode...

LFI-FINDER

🍀 LFI FINDER TOOL 🍀 Written by TMRSWRR Version 1.0.0 Instagram: TMRSWRR 📹 How to use 📹 Click on the image... LFI-FINDER is an open-source tool available on GitHub that focuses on detecting Local File Inclusion LFI vulnerabilities. Local File Inclusion is a common security vulnerability that allow...

NETworkManager

NETworkManager A powerful open-source tool for managing networks and troubleshooting network problems! Streamline and simplify your network administration and troubleshooting with NETworkManager. Connect, monitor, and troubleshoot your network and server infrastructure using built-in tools like...

phywhispererusb

PhyWhisperer-USB What is this thing? This is a hardware trigger for FI or SCA, which triggers on the USB phy. Be sure to read the documentation at http://phywhispererusb.readthedocs.io/ as well! If you are getting started, there are a few demonstration notebooks showing how to: Sniff Data Stream...

horusec

...

commix

Commix сокращение от command injection exploiter — это инструмент для тестирования на проникновение с открытым исходным кодом, написанный Anastasios Stasinopoulos @ancst, который автоматизирует обнаружение и эксплуатацию уязвимостей внедрения команд. Вы можете посмотреть , демонстрирующих некотор...

LAMMA-beta

LAMMA BETA Vulnerability Assessment Framework for all the Crypto Implimentations. An Open Source Initiative by - SECURITY MONX Lamma Framework Documentation beta root@kitploit: File Name : README Author : @ajithatti Org : Security Monx Version : 0.0.1 Purpose : Gives introduction of Lamma Framewo...

PEpper

PEpper Инструмент с открытым исходным кодом для выполнения статического анализа вредоносных программ на P ortable E xecutable Установка root@kitploit: eva@paradise:$ git clone https://github.com/blackeko/PEpper/ eva@paradise:$ cd PEpper eva@paradise:$ pip3 install -r requirements.txt eva@paradise...

CookieCatcher

CookieCatcher CookieCatcher is an open source application which was created to assist in the exploitation of XSS Cross Site Scripting vulnerabilities within web applications to steal user session IDs aka Session Hijacking. The use of this application is purely educational and should not be used...

docker-bench-security

Docker Bench для безопасности Docker Bench for Security — это скрипт, который проверяет десятки общепринятых лучших практик по развертыванию контейнеров Docker в production. Все тесты автоматизированы и основаны на CIS Docker Benchmark v1.6.0. Мы предоставляем эту утилиту с открытым исходным кодо...

jsql-injection

Description jSQL Injection — это легкое приложение для получения информации из базы данных сервера. Оно бесплатное , с открытым исходным кодом и кроссплатформенное для Windows, Linux и Mac, а также работает с Java от версии 21 до 25. jSQL Injection также является частью официального дистрибутива...

timesketch

Timesketch 목차 1. Timesketch 소개 2. 시작하기 3. 커뮤니티 4. 기여하기 Timesketch 소개 Timesketch는 협업형 포렌식 타임라인 분석을 위한 오픈소스 도구입니다. 스케치를 사용하면 당신과 협력자들이 타임라인을 쉽게 정리하고 동시에 모두 분석할 수 있습니다. 풍부한 주석, 댓글, 태그, 별표로 원시 데이터에 의미를 더하세요. 시작하기 설치 Timesketch 설치...

pythia

소개 / 요약 이 도구는 실행 파일에서 RTTI 및 가상 함수 테이블을 포함한 Delphi 데이터를 스캔합니다. 식별된 클래스와 함수에 대한 정보가 담긴 JSON 파일을 출력하며, 이는 추가 분석에 사용할 수 있습니다. 예를 들어: 클래스 트리를 생성합니다. IDA용 이름 및 주석을 생성합니다. 자동 디컴파일과 같은 후속 처리에 사용합니다. 출력 결과를 IDA에 로드할 수 있는 IDAPython 스크립트가 제공됩니다. 이 스크립트는 Delphi 리버스 엔지니어링을 위한 다른 도구들을 보완하기 위해 작성되었습니다. 작성자 및...

mkchain

mkchain Open source tool to help you build a valid SSL certificate chain. Description • How To Use • Parameters • How it works • Requirements • Other • License Description Is an open source tool to help you build a valid SSL certificate chain. Also can help you fix the incomplete chain and downlo...

windiff

WinDiff О программе WinDiff — это веб-инструмент с открытым исходным кодом, который позволяет просматривать и сравнивать информацию о символах, типах и системных вызовах двоичных файлов Microsoft Windows в разных версиях операционной системы. База данных двоичных файлов автоматически обновляется,...

onionscan

Что такое OnionScan? OnionScan — это бесплатный инструмент с открытым исходным кодом для исследования Тёмной сети. Несмотря на все удивительные технологические инновации в области анонимности и конфиденциальности, всегда существует постоянная угроза, для которой нет эффективного технологического...