chepy

Chepy Chepy is a python library with a handy cli that is aimed to mirror some of the capabilities of CyberChef. A reasonable amount of effort was put behind Chepy to make it compatible to the various functionalities that CyberChef offers, all in a pure Pythonic manner. There are some key advantag...

modelscan

ModelScan: Protection Against Model Serialization Attacks Machine Learning ML models are shared publicly over the internet, within teams and across teams. The rise of Foundation Models have resulted in public ML models being increasingly consumed for further training/fine tuning. ML Models are...

confused

Confused A tool for checking for lingering free namespaces for private package names referenced in dependency configuration for Python pypi requirements.txt, JavaScript npm package.json, PHP composer composer.json or MVN maven pom.xml. What is this all about? On 9th of February 2021, a security...

pip-audit

pip-audit pip-audit is a tool for scanning Python environments for packages with known vulnerabilities. It uses the Python Packaging Advisory Database https://github.com/pypa/advisory-database via the PyPI JSON API as a source of vulnerability reports. This project is maintained in part by Trail ...

HiddenEyeReborn

Introduction The HiddenEye: Reborn tool is a project aimed at exploiting human error. As my second attempt at creating a comprehensive tool for this purpose, it presently has numerous phishing features. We intend to add more functionality soon. Keep up with our progress by checking out our roadma...

stumpy

|PyPI Version| |Conda Forge Version| |PyPI Downloads| |License| |Test Status| |Code Coverage| |RTD Status| |Binder| |JOSS| |NumFOCUS| .. |PyPI Version| image:: https://img.shields.io/pypi/v/stumpy.svg :target: https://pypi.org/project/stumpy/ :alt: PyPI Version .. |Conda Forge Version| image::...

osinteye

This will not receive any further updates. Instagram is deprecated, so I decided to just archive it. Username enumeration & reconnaisance suite Supported sites PyPI Github TestPypi About.me Instagram DockerHub Installation Clone project: $ git clone https://github.com/rly0nheart/osinteye.git $ cd...

Guardrails

NVIDIA NeMo Guardrails Library LATEST RELEASE / DEVELOPMENT VERSION : The develop branch tracks the latest top of tree development. The latest released version is 0.24.1. ✨✨✨ 📌 The official NeMo Guardrails library documentation is available atdocs.nvidia.com/nemo/guardrails. ✨✨✨ NVIDIA NeMo...

InstaLooter

InstaLooter |starme| .. |starme| image:: https://img.shields.io/github/stars/althonos/InstaLooter.svg?style=social&label=Star :target: https://github.com/althonos/InstaLooter Not all treasure's silver and gold, mate. |build| |repo| |versions| |format| |coverage| |doc| |grade| |license|...

harpoon

Harpoon OSINT / Threat Intel CLI tool. Install Requirements As a pre-requesite for Harpoon, you need to install lxml requirements, on Debian/Ubuntu : sudo apt-get install libxml2-dev libxslt-dev python3-dev. On Fedora: sudo dnf install sqlite-devel automake bzip2 bzip2-devel bzip2-lib cython g++...

hijagger

hijagger - check package registries for hijackable packages This tool checks every maintainer from every package in the NPM and Python Pypi registry for unregistered domains or unregistered MX records on those domains. If a domain is unregistered you can grab the domain and initiate a password...

theo

Theo Obsolete, not maintained anymore, don't install it, don't use it, you were warned! Theo aims to be an exploitation framework and a blockchain recon and interaction tool. Features: Automatic smart contract scanning which generates a list of possible exploits. Sending transactions to exploit a...

Malicious code in marocolor (PyPI)

Source: kam193 38b0fa2ee77af46ad9daf78c024a0f599fd0798eef7605cb3eed50d8db65fa22 Package is intended for stealing files to a hardcoded location and performing a DoS on the victim's machine. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

pwntools

pwntools - CTF toolkit Pwntools is a CTF framework and exploit development library. Written in Python, it is designed for rapid prototyping and development, and intended to make exploit writing as simple as possible. from pwn import contextarch = 'i386', os = 'linux' r =...

bscan

:mag: an asynchronous target enumeration tool :magright: Synopsis bscan is a command-line utility to perform active information gathering and service enumeration. At its core, bscan asynchronously spawns processes of well-known scanning utilities, repurposing scan results into highlighted console...

tartufo

!WARNING This project is not actively maintained anymore. tartufo searches through git repositories for secrets, digging deep into commit history and branches. This is effective at finding secrets accidentally committed. tartufo also can be used by git pre-commit scripts to screen changes for...

Malicious code in marocolor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8206a6d3278ef99ffe6f33a695ca3dd6b4ed9856912d79f3066a375d95bcd509 On import of marocolor, a daemon thread recursively walks the user's home directory and uploads every file matching...

faraday-cli

Faraday on the terminal Use faraday directly from your favorite terminal faraday-cli is the official client that make automating your security workflows, easier. Before installing, we recommend creating and activating a Python virtual environment to avoid affecting your system Python packages. Fo...

deepsecrets

DeepSecrets - a better tool for secret scanning !WARNING Active development was switched to the creator's fork at https://github.com/ntoskernel/deepsecrets. This repository will not receive any updates...

Veritensor

🛡️ Veritensor: AI Data & Artifact Security Veritensor is the Anti-Virus for AI Artifacts and the ultimate Firewall for RAG pipelines. It secures the entire AI Supply Chain by scanning the artifacts that traditional SAST tools miss: Models, Datasets, RAG Documents, and Notebooks. Veritensor shift...