awesome-yara

Awesome YARA A curated list of awesome YARA rules, tools, and resources. Inspired by awesome-python and awesome-php. YARA is an ancronym for: YARA: Another Recursive Ancronym, or Yet Another Ridiculous Acronym. Pick your choice. -- Victor M. Alvarez @plusvic YARA, the "pattern matching swiss knif...

SkillSpector

SkillSpector Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks before installing agent skills. Overview AI agent skills used by Claude Code, Codex CLI, Gemini CLI, etc. execute with implicit trust and minimal vetting. In the 31,132-skill analyzed...

njsscan

njsscan njsscan is a static application testing SAST tool that can find insecure code patterns in your node.js applications using simple pattern matcher from libsast and syntax-aware semantic code pattern search tool semgrep. Made with in India Support njsscan Donate via Paypal: Sponsor the...

m4ngl3m3

m4ngl3m3! Quick Installation: $ git clone https://github.com/localh0t/m4ngl3m3 $ cd m4ngl3m3 $ ./main.py Basic Help: usage: main.py -h -fy FROMYEAR -ty TOYEAR -sy -nf NUMBERSFILE -sf SYMBOLSFILE -cf CUSTOMFILE -sbs -sap -mm MUTATIONMETHODS MUTATIONMODE STRINGSFILE OUTPUTFILE Common password patte...

CVE-2018-1305

Apache Tomcat Security Bypass Vulnerability Recently, Apache released a security advisory stating that multiple versions of Apache Tomcat 7, 8, and 9 have a security bypass vulnerability. Attackers can exploit this issue to bypass certain security restrictions to perform unauthorized operations,...

osint-pattern-analyzer

OSINT Pattern Analyzer Tool for automating OSINT investigations across multiple identity vectors phone numbers, usernames and future email support, designed to extract structured data and enable pattern detection and correlation analysis. Features Phone OSINT Search phone numbers across multiple...

yara-x

YARA-X YARA-X is a re-incarnation of YARA, a pattern matching tool designed with malware researchers in mind. This new incarnation intends to be faster, safer and more user-friendly than its predecessor. The ultimate goal of YARA-X is replacing YARA as the default pattern matching tool for malwar...

CrimsonEDR

CrimsonEDR / | | | | \ | | | | | | | | | | | | | '| | ' / |/ | ' | | | | | | / | || | | | | | | | \ \ | | | | || || | | \ \ || ||| || ||//|| |||/|| \ Developed by : Matthias Ossard https://github.com/Helixo32 CrimsonEDR is an open-source project engineered to identify specific malware...

Vite Dev Server - Information Exposure

Vite is a frontend tooling framework for JavaScript. Before versions 6.3.4, 6.2.7, 6.1.6, 5.4.19, and 4.5.14, the contents of files in the project root that are denied by a file matching pattern can be returned to the browser. Only apps explicitly exposing the Vite dev server to the network using...

fhex

Fhex - A Full-Featured HexEditor This project is born with the aim to develop a lightweight, but useful tool. The reason is that the existing hex editors have some different limitations e.g. too many dependencies, missing hex coloring features, etc.. This project is based on qhexedit2 , capstone...

Fnord

Fnord Fnord is a pattern extractor for obfuscated code Description Fnord has two main functions: 1. Extract byte sequences and create some statistics 2. Use these statistics, combine length, number of occurrences, similarity and keywords to create a YARA rule 1. Statistics Fnord processes the fil...

alterx

AlterX 功能特性 • 安装 • 使用方法 • 运行 AlterX • 加入 Discord 使用 DSL 的快速可定制子域名词表生成器 功能特性 快速且可定制 自动词汇丰富 预定义变量 可配置模式 模式挖掘 - 自动发现子域名模式（Go 移植自 Regulator） STDIN / 列表输入 多种操作模式（默认、发现、两者） 安装 要安装 alterx，你需要在系统上安装 Golang 1.19。你可以从这里下载 Golang。安装完成后，可以使用以下命令安装 alterx： go install...

firewall

🛡️ Spring4Shell Firewall Defense – Cybersecurity Incident Simulation This project is part of a Cybersecurity Job Simulation I completed through Forage in August 2025. It simulates a real-world incident involving the Spring4Shell CVE-2022-22965 vulnerability and demonstrates how a custom firewall...

stackflow

stackflow Universal stack-based buffer overfow exploitation tool Usage usage: ./stackflow.py OPTIONS optional arguments: -h, --help show this help message and exit -r RHOST, --rhost RHOST rhost -p RPORT, --rport RPORT rport -c CMDS, --cmds CMDS commands to send to server before overflow -v VULNCM...

Zin

Version 1.0 😎 Zin 😎 A Payload Injector for bugbounties written in go Features Inject multiple payloads into all parameters Inject single payloads into all parameters Saves responses into output folder Displays Status Code & Response Length Can grep for patterns in the response Really fast Easy to...

grap

grap: define and match graph patterns within binaries https://github.com/QuoSecGmbH/grap grap takes patterns and binary files, uses a Casptone-based disassembler to obtain the control flow graphs from the binaries, then matches the patterns against them. Patterns are user-defined graphs with...

SSLPinDetect

🔒 SSL Pinning Detector SSLPinDetect is a tool for analyzing Android APKs to detect SSL pinning implementations by scanning for known patterns in decompiled smali code. It helps security researchers and penetration testers identify SSL pinning mechanisms used in mobile applications efficiently. 🚀...

yara

!IMPORTANT このプロジェクトはメンテナンスモードです。詳細：https://virustotal.github.io/yara-x/blog/yara-x-is-stable/ YARAの概要 YARAは、（必ずしも限定ではありませんが）マルウェア研究者がマルウェアサンプルを識別・分類するための支援を目的としたツールです。YARAを使うと、テキストパターンやバイナリパターンに基づいて、マルウェアファミリー（あるいは記述したい任意のもの）の説明を作成できます。各説明（ルールと呼びます）は、一連の文字列とその論理を決定するブール式から構成されます。例を見てみましょう： rule...

privaxy

Privaxy Next generation tracker and advertisement blocker About Privaxy is a MITM HTTPs proxy that sits in between HTTPs talking applications, such as a web browser and HTTP servers, such as those serving websites. By establishing a two-way tunnel between both ends, Privaxy is able to block netwo...

ForensiX

⬡ ForensiX — デジタルフォレンジックインテリジェンスフレームワーク 作者: Ameer Rasim | バージョン 2.0.0 ███████╗ ██████╗ ██████╗ ███████╗███╗ ██╗███████╗██╗██╗ ██╗ ██╔════╝██╔═══██╗██╔══██╗██╔════╝████╗ ██║██╔════╝██║╚██╗██╔╝ █████╗ ██║ ██║██████╔╝█████╗ ██╔██╗ ██║███████╗██║ ╚███╔╝ ██╔══╝ ██║ ██║██╔══██╗██╔══╝...