Supernova

Supernova Shellcode encryptor & obfuscator. Description Supernova is an open-source tool that empowers users to securely encrypt and/or obfuscate their raw shellcode. -red?link=https%3A%2F%2Fgithub.com%2Fnickvourd%2FSupernova%2Freleases Supernova supports various features beyond those typically...

pythia

Introduction / tl;dr This tool scans an executable file for Delphi data, including RTTI and virtual function tables. It outputs a JSON file with information about identified classes and functions, which can be used for additional analysis, for example: Generate a class tree. Generate names &...

mkchain

mkchain Open source tool to help you build a valid SSL certificate chain. Description • How To Use • Parameters • How it works • Requirements • Other • License Description Is an open source tool to help you build a valid SSL certificate chain. Also can help you fix the incomplete chain and downlo...

BWASP

BWASP The BoB Web Application Security Project BWASP is an open-source, analysis tool to support for Web Vulnerability Manual Analysis hackers. The BWASP tool basically provides predicted information through vulnerability analysis without proceeding with an attack. BWASP supports performing...

horusec

...

Veritensor

🛡️ Veritensor: AI Data & Artifact Security...

PEpper

PEpper An open source tool to perform malware static analysis on P ortable E xecutable Installation root@kitploit: eva@paradise:$ git clone https://github.com/blackeko/PEpper/ eva@paradise:$ cd PEpper eva@paradise:$ pip3 install -r requirements.txt eva@paradise:$ python3 pepper.py ./malwaredir...

deadair

deadair checks whether enabled SIEM detections still have the telemetry they need. It reports missing or stale data, ingest delays, and schema mismatches. Runs locally · Read-only · No agent · No telemetry upload Read the technical write-up · Featured in Detection Engineering Weekly · Featured in...

PurpleKeep

Description With the rapidly increasing variety of attack techniques and a simultaneous rise in the number of detection rules offered by EDRs Endpoint Detection and Response and custom-created ones, the need for constant functional testing of detection rules has become evident. However, manually...

JAW

J A W Website | Docs | Setup | Crawler | Quick Start Docker Example JAW An open-source, prototype implementation of property graphs for JavaScript based on the esprima parser, and the . JAW can be used for analyzing the client-side of web applications and JavaScript-based programs...

Refloow-Geo-Forensics

📍 Refloow™ Geo Forensics Official Github Repository Professional Open-Source OSINT & Digital Forensics Tool Version 1.4.0 Latest: Version 1.0.0 Launch: Refloow™ Geo Forensics is a high-performance, open-source digital forensics tool designed for investigators, OSINT practitioners, and security...

metasploit-framework

Metasploit Framework Metasploit Framework 是一款基于 BSD 风格许可证发布的开源工具。有关详细的许可信息，请参阅 COPYING 文件。 最新版本 从 Nightly Installers 页面获取 Metasploit 的最新版本。 文档 包括使用指南在内的全面文档，可在 Metasploit Docs 找到。 开发环境 要搭建开发环境，请访问 Development Setup Guide。 错误与功能请求 通过 GitHub Issues 跟踪器提交错误和功能请求。新提交可通过 MSF-BUGv1 表单 进行。 API 文档...

CloudGrappler

CloudGrappler Permiso: https://permiso.io Read our release blog: https://permiso.io/blog/cloudgrappler-a-powerful-open-source-threat-detection-tool-for-cloud-environments CloudGrappler is a purpose-built tool designed for effortless querying of high-fidelity and single-event detections related to...

lockc

lockc 是一款用于为容器工作负载提供 MAC（强制访问控制）类型安全审计的开源软件。 lockc 存在的主要原因是容器并不隔离 。容器并不像虚拟机那样安全和隔离。默认情况下，它们会暴露大量关于宿主机的信息，并提供从容器中“逃逸”的方式。lockc 旨在为容器提供更强的隔离性，使其更加安全。 容器并不隔离 文档部分解释了这句话的含义，以及我们希望通过 lockc 限制哪些行为。 lockc 背后的核心技术是 eBPF——更确切地说，是其挂载到 LSM 钩子 上的能力。 请注意，目前 lockc...

vulhunt

VulHunt Community Edition VulHunt 是一个由 Binarly 研究团队开发的漏洞狩猎框架。它旨在帮助安全研究人员和从业者识别软件二进制文件和 UEFI 固件中的漏洞。VulHunt 构建于 Binarly 的二进制分析与检测系统（BIAS）之上，该系统为分析和理解二进制文件提供了强大而灵活的环境。VulHunt 与 Binarly 透明度平台（BTP）的能力集成，以实现大规模漏洞管理、狩猎与分诊能力。 VulHunt Community Edition 是 BTP 中 VulHunt 引擎的免费开源版本，旨在促进社区开发的规则包和集成。 Building...

PacketSender

Introduction https://packetsender.com Read this in other languages:English, Español, Deutsch, Français, italiano 简体中文. Packet Sender is an open source utility to allow sending and receiving TCP, UDP, and SSL encrypted TCP packets as well as HTTP/HTTPS requests and panel generation. The mainline...

EDIDFuzzer

EDID fuzzer A tool for fuzzing Enhanced Display Identification Data Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Andy Davis, andy dot davis at nccgroup dot com https://www.github.com/nccgroup/EDIDFuzzer Released under AGPL see LICENSE for more information...

chain-reactor

Chain Reactor Chain Reactor 是一个用于测试 Linux 机器上检测与响应覆盖率的开源工具。该工具生成可执行文件，用于模拟进程创建、网络连接等操作序列。Chain Reactor 不需要事先具备工程经验；该工具使用 JSON，因此自定义其行为就像编辑一个文件一样简单。 开始使用 有关安装和使用说明，请参阅 wiki 的入门页面。 了解更多 Chain Reactor 文档以 wiki 形式提供。 有关原子项目系列的理念和开发信息，请访问我们的网站 https://atomicredteam.io。 请查看许可证了解有关分发和修改 Chain Reactor 的信...

Recaf

Recaf An easy to use modern Java bytecode editor that abstracts away the complexities of Java programs. Download Launcher Usage & instructions found on the launcher repo Snapshot releases See CI actions for release artifacts Independent releases None for 4X currently Features Edit Java bytecode...

commix

Commix （command injection exploiter 的缩写）是一款开源渗透测试工具，由 Anastasios Stasinopoulos （@ancst ）编写，用于自动化检测和利用 命令注入 漏洞。 您可以访问截图合集，其中展示了wiki上的一些功能。 安装 您可以通过克隆官方Git仓库在任何平台上下载commix： root@kitploit: $ git clone https://github.com/commixproject/commix.git commix 或者，您可以下载最新的tarball或zipball。 注意： 运行commix需要 Pytho...