Sealighter

Sealighter - Easy ETW Tracing for Security Research I created this project to help non-developers dive into researching Event Tracing for Windows ETW and Windows PreProcessor Tracing WPP. Features Subscribe to multiple ETW and WPP Providers at once Automatically parse events into JSON without...

frida-scripts

frida-scripts A collection of my Frida.re instrumentation scripts to facilitate reverse engineering of mobile apps and more. !NOTE My iOS and Android scripts might require some tweakings. For a well-maintained project that includes some of my Frida scripts, refer to Brida. Article...

firmware-analysis-toolkit

FAT — Firmware Analysis Toolkit Download the latest release · Changelog · Installation Firmware Analysis Toolkit is a security research toolkit for investigating firmware security for IoT, Physical AI, Mobile Devices & Robotics. It is primarily built for the "Offensive IoT Exploitation" training...

feroxbuster

!WARNING Security Notice – Domain Impersonation The domain feroxbuster.com is NOT affiliated with this project, its maintainers, or any official feroxbuster releases. Official feroxbuster downloads are distributed ONLY through: https://github.com/epi052/feroxbuster open source...

CVE-2026-31431-Analysis

CVE-2026-31431-Analysis Technical Analysis Report: Exploitation of Isolation Failure in the Linux Kernel CVE-2026-31431...

Multi-VLAN-Enterprise-Network-Security-Infrastructure

This repository does not have a README...

crowdsec

CrowdSec is an open-source and participative security solution offering crowdsourced server detection and protection against malicious IPs. Detect and block with our Security Engine, contribute to the network, and enjoy our real-time community blocklist. Features & Advantages Versatile Security...

sudowp-clickfunnels-zurich

SudoWP Zurich for ClickFunnels Contributors: SudoWP, WP Republic Original Authors: Etison, LLC Tags: clickfunnels, security-patch, legacy, landing pages, funnels, sudowp Requires at least: 4.3 Tested up to: 6.7 Stable tag: 0.1.1 License: GPLv2 or later Security Notice This is a community-maintain...

CVE-2017-0213

CVE-2017-0213 for command line...

promptmap

O O o.-. Humans, Do Not Resist! |/ ,-'-. / /, / /|.-.| / --O-- .--""" /\ /\ | o.o / Utku Sen's /|\ -'--' / /| | - | / | | | \ /| | | ' \ '/ \ ' | ' \ | ' / | ' \ | / | | | ./| /||| ./|||,| .// / / |-----| || || || || promptmap2 is a an automated prompt injection scanner for custom LLM...

snallygaster

snallygaster Finds file leaks and other security problems on HTTP servers. what? snallygaster is a tool that looks for files accessible on web servers that shouldn't be public and can pose a security risk. Typical examples include publicly accessible git repositories, backup files potentially...

cloudfox

🦊 CloudFox 🦊 CloudFox helps you gain situational awareness in unfamiliar cloud environments. It’s an open source command line tool created to help penetration testers and other offensive security professionals find exploitable attack paths in cloud infrastructure. CLOUDFOX UPDATE REQUIRED: 12/202...

semgrep

Code scanning at ludicrous speed. Semgrep is a fast, open-source, static analysis tool that searches code, finds bugs, and enforces secure guardrails and coding standards. Semgrep supports 30+ languages and can run in an IDE, as a pre-commit check, and as part of CI/CD workflows. Semgrep is...

threat-modeling-playbook

Intro We aim to improve product and software security with our new threat modeling playbook. We consider threat modeling as a foundational activity to improve your software assurance. We are convinced that a good threat modeling practice will measurably decrease security issues of delivered...

gh-workflow-auditor

GitHub Workflow Auditor Workflow auditing tools to identify security issues in GitHub workflows Usage usage: main.py -h --type repo,org,user --log-level debug,info,warning,error,critical input Identify vulnerabilities in GitHub Actions workflow positional arguments: input User/Org Name or Repo na...

CredsLeaker

CredsLeaker v4.x A big shoutout to @ApSecDev who took this project to the next level! Kudos! This script used to display a powershell credentials box asked the user for credentials. However, That was highly noticeable. Now it's time to utilize Windows Security popup! Features AD domain...

allsafe-android

Allsafe - Android An Intentionally Vulnerable Android Application for Security Education Features • Screenshots • Installation • Challenges • Contributing • Support 📱 About Allsafe is an intentionally vulnerable Android application designed for security enthusiasts, pentesters, and developers to...

EmailXpose

EmailXpose Specification AI-Powered Email Clarity HTML Mirror: https://roxanneardary.com/emailxpose-specification/ Specification Overview EmailXpose is an open source, modular AI email security and intelligence system designed to analyze email content, sender identity, links, attachments, images,...

Nettacker

OWASP Nettacker DISCLAIMER THIS SOFTWARE WAS CREATED FOR AUTOMATED PENETRATION TESTING AND INFORMATION GATHERING. YOU MUST USE THIS SOFTWARE IN A RESPONSIBLE AND ETHICAL MANNER. DO NOT TARGET SYSTEMS OR APPLICATIONS WITHOUT OBTAINING PERMISSIONS OR CONSENT FROM THE SYSTEM OWNERS OR ADMINISTRATORS...

DbDat

DbDat Db Database Assessment Tool DbDat performs numerous checks on a database to evaluate security. The categories of checks performed are configuration, privileges, users, and information. Checks are performed by running queries or reading database configuration files. The goal of this tool is ...