2920 matches found
mapchar
Generate wordlists using pattern logic and expressions Installation โข Documentation โข Usage โข Contributing !NOTE This project was renamed fromfuse / fuse-generator to mapchar starting from version 7.0.2. The PyPI package, CLI command, and Python package name have all changed accordingly. If you...
Sighthound
Sighthound Tree-sitter based static vulnerability scanner with pattern matching and taint-flow analysis. What It Does Scans source code for security issues using AST-aware rules. Supports pattern mode and taint mode source to sink tracking. Handles multi-file projects and parallel execution...
laravel-threat-detection
Laravel Threat Detection Security monitoring and attack logging for Laravel. Detect and log SQL injection, XSS, RCE, directory traversal, bot scanners and/wp-admin-style recon probes โ every hostile request recorded to your database with full application context. It's an IDS, not a WAF: it never...
RecoverPy
RecoverPy Scan raw partitions and recover data by inspecting disk blocks directly. ๐ฌ Demo ๐ Overview When a file is deleted, its metadata disappears first. The underlying disk blocks often remain intact until they are reused. RecoverPy scans raw partition data directly and searches for byte...
fb-sleep-stats
fb-sleep-stats: Using Facebook to track your friends' sleep A small tool to show the potential privacy implications modern social media have. By tracking online/offline status of people on Facebook, it is possible to get an accurate image of their sleep pattern. Read the blog post:...
CVE-2021-44228
Log4j Vulnerabilities Update 19.12.2021: New vulnerabilities and new ways to exploit them in Log4j are constantly being discovered. We have added three flowcharts mind maps to the git repo that respectively describe vulnerable versions of Log4j, how to check if you are vulnerable, and mitigation ...
cve-2026-42945-scan
cve-2026-42945-scan Static scanner for NGINX configuration files that detects the rewrite/set pattern associated with CVE-2026-42945. The scanner parses NGINX configs with crossplane, walks location blocks, and prints every location that looks affected in this format: //xxx.conf: - location XXXXX...
nodejsscan
nodejsscan Static security code scanner SAST for Node.js applications powered by libsast and semgrep. Made with in India Support nodejsscan Donate via Paypal: Sponsor the Project: e-Learning Courses & Certifications OpSecX Node.js Security: Pentesting and Exploitation - NJS Run nodejsscan docker...
columbo
Columbo Columbo is a computer forensic analysis tool used to simplify and identify specific patterns in compromised datasets. It breaks down data to small sections and uses pattern recognition and machine learning models to identify adversaries behaviour and their possible locations in compromise...
frida-ios-hook
Frida iOS hook ๐ A tool that helps you can easy using frida. It support script for trace classes, functions, and modify the return values of methods on iOS platform. ๐ For Android platform: frida-android-hook ๐ For Intercept Api was encrypted on iOS application: frida-ios-intercept-api Env OS...
Fern Pattern Scanner
Fern Pattern Scanner Welcome to Fern's Pattern Scanner. This scanner scans through your suggested files and finds any patterns stated within the rules/rules.yaml using regex. Then a report is generated with all the findings. This project is used to showcase how a custom security scanner can be...
git-hound
๐พ GitHound A pattern-matching, patch-attacking, batch-catching secret snatcher. Overview GitHound hunts down exposed API keys, secrets, and credentials across GitHub by pairing GitHub dorks with pattern matching, contextual detection, and commit-history analysis. Input a GitHub dork into GitHound...
awesome-yara
Awesome YARA A curated list of awesome YARA rules, tools, and resources. Inspired by awesome-python and awesome-php. YARA is an ancronym for: YARA: Another Recursive Ancronym, or Yet Another Ridiculous Acronym. Pick your choice. -- Victor M. Alvarez @plusvic YARA, the "pattern matching swiss knif...
SkillSpector
SkillSpector Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks before installing agent skills. Overview AI agent skills used by Claude Code, Codex CLI, Gemini CLI, etc. execute with implicit trust and minimal vetting. In the 31,132-skill analyzed...
njsscan
njsscan njsscan is a static application testing SAST tool that can find insecure code patterns in your node.js applications using simple pattern matcher from libsast and syntax-aware semantic code pattern search tool semgrep. Made with in India Support njsscan Donate via Paypal: Sponsor the...
m4ngl3m3
m4ngl3m3! Quick Installation: $ git clone https://github.com/localh0t/m4ngl3m3 $ cd m4ngl3m3 $ ./main.py Basic Help: usage: main.py -h -fy FROMYEAR -ty TOYEAR -sy -nf NUMBERSFILE -sf SYMBOLSFILE -cf CUSTOMFILE -sbs -sap -mm MUTATIONMETHODS MUTATIONMODE STRINGSFILE OUTPUTFILE Common password patte...
FindFunc
FindFunc: Advanced Filtering/Finding of Functions in IDA Pro FindFunc is an IDA Pro plugin to find code functions that contain a certain assembly or byte pattern, reference a certain name or string, or conform to various other constraints. FindFunc won third place in the 2022 HexRays IDA Pro Plug...
CVE-2018-1305
Apache Tomcat Security Bypass Vulnerability Recently, Apache released a security advisory stating that multiple versions of Apache Tomcat 7, 8, and 9 have a security bypass vulnerability. Attackers can exploit this issue to bypass certain security restrictions to perform unauthorized operations,...
osint-pattern-analyzer
OSINT Pattern Analyzer ่คๆฐใฎใขใคใใณใใฃใใฃใใฏใใซ๏ผ้ป่ฉฑ็ชๅทใใฆใผใถใผๅใๅฐๆฅ็ใซใฏใกใผใซใตใใผใ๏ผใซใใใOSINT่ชฟๆปใ่ชๅๅใใใใใฎใใผใซใๆง้ ๅใใผใฟใๆฝๅบใใใใฟใผใณๆคๅบใจ็ธ้ขๅๆใๅฏ่ฝใซใใใใใซ่จญ่จใใใฆใใพใใ ๆฉ่ฝ ้ป่ฉฑOSINT ่คๆฐใฎใใฉใใใใฉใผใ ใง้ป่ฉฑ็ชๅทใๆค็ดข ่คๆฐใฎ้ป่ฉฑ็ชๅทๅฝขๅผ๏ผ+34, 0034, ในใใผในๅบๅใใชใฉ๏ผใใตใใผใ ใซในใฟใ ๆค็ดขใฏใจใช๏ผใจในใณใผใ้ข้ฃใใใกใคใณๅบๆ๏ผ ๅบๅใฟใคใใฎๆคๅบ๏ผ individual group duo ้ป่ฉฑ็ชๅทใฎๅญๅจ็ขบ่ช๏ผphonematch๏ผ ไฟก้ ผๅบฆๅ้กใทในใใ ๏ผ high โ...
BSOD_bitlocker_recover
BitLocker VMK Carving Tool This Python script helps you extract potential BitLocker Volume Master Keys VMKs from memory dump files, such as those generated by a Blue Screen of Death BSOD. It's a command-line utility designed to assist in forensic investigations where BitLocker encryption is...