Vulnvault

VulnVault 🔐 VulnVault is a practical, developer‑first knowledge base of common and critical application security vulnerabilities, covering the full lifecycle from code to build , infrastructure , and deployment. It provides clear explanations , realistic insecure vs secure code examples , and...

pared

Pared Pared is a secure, high-performance Linux host security control plane and real-time administrative web console written in Crystal. Built on Kemal and Blueprint server-rendered components with SQLite3, a small vanilla-JS/WebSocket layer, and native libsystemd journal streaming, it unifies...

peniot

PENIOT: Penetration Testing Tool for IoT Table of Contents Project Description What is PENIOT? Why is PENIOT required? What does PENIOT provide? Build Instructions Documentation Testing Contributors Developer's Note Project Poster Project Description What is PENIOT? PENIOT is a penetration testin...

TTPForge

TTPForge TTPForge is a cyber attack simulation platform designed and built by Sam Manzer @d3sch41n, Alek Straumann @CrimsonK1ng, and Geoff Pamerleau @Sy14r, and including subsequent contributions from many good folks in Meta’s Red, Blue, and Purple security teams. Jayson Grace @l50 migrated the...

process_overwriting

Process Overwriting Process Overwriting is a PE injection technique, closely related to Process Hollowing and Module Overloading. With its help, you can replace the main executable not a DLL of the target process. It works only for a newly created process - injection to existing processes is not...

Awesome-GPT-Agents

😎 Awesome GPTs Agents for Cybersecurity The "Awesome GPTs Agents Repo" represents an initial effort to compile a comprehensive list of GPT agents focused on cybersecurity offensive and defensive, created by the community. Please note, this repository is a community-driven project and may not list...

RMS-Runtime-Mobile-Security

Runtime Mobile Security RMS 📱🔥 by @mobilesecurity Runtime Mobile Security RMS , powered by FRIDA, is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime. With RMS you can easily dump all loaded classes and relative methods, hook everything on the fly, trace metho...

CVE-2021-21985

CVE-2021-21985...

drozer

drozer drozer is a security testing framework for Android. drozer allows you to search for security vulnerabilities in apps and devices by assuming the role of an app and interacting with the Android Runtime, other apps' IPC endpoints and the underlying OS. drozer provides tools to help you use,...

pwntools

pwntools - CTF toolkit Pwntools is a CTF framework and exploit development library. Written in Python, it is designed for rapid prototyping and development, and intended to make exploit writing as simple as possible. from pwn import contextarch = 'i386', os = 'linux' r =...

KNX-Bus-Dump

KNX Bus Dump KNX is a popular building automation protocol and is used to interconnect sensors, actuators and other components of a smart building together. Our KNX Bus Dump tool uses the Calimero java library, which we contributed to for the sake of this tool, to record the telegrams sent over a...

awesome-incident-response

Awesome Incident Response A curated list of tools and resources for security incident response, aimed to help security analysts and DFIR teams. Digital Forensics and Incident Response DFIR teams are groups of people in an organization responsible for managing the response to a security incident,...

Aurea

Aurea Specification Golden Standards for IaC Security HTML Mirror: https://roxanneardary.com/aurea-specification/ Specification Overview Aurea is a fully open-source, AI-powered Infrastructure-as-Code security specification designed to provide continuous security analysis throughout the software...

guac

GUAC: Graph for Understanding Artifact Composition Note: GUAC is under active development - if you are interested in contributing, please look at contributor guide. GUAC is an OpenSSF incubating project under the Supply Chain Integrity WG. Graph for Understanding Artifact Composition GUAC...

0

Open-source security workflows in your browser or coding agent. Backed by Y Combinator · The Swiss Applied AI & Cybersecurity Research Lab 0.security · Documentation · FoxGuard Latest release Get started Install on Apple Silicon macOS or x64/ARM64 Linux: curl -fsSL...

Java-Compressed-file-security

Java-Compressed-file-security java web Compressed File Security Vulnerability Test environment: Windows For Apache Tomcat/8.5.16 0x01 Crafting a Directory Traversal Malicious Compressed File Code: coding=utf-8 import zipfile import sys if name == "main": try: with open"404.jsp", "r" as f: binary ...

pentesting_scripts

Introduction This repository contains a random variety of penetration testing tools that consultants may find useful on their engagements. Feel free to make any changes, suggest features, or provide comments. Contact information Facebook: https://www.facebook.com/vonahisec Twitter:...

sysmon-config

sysmon-config | A Sysmon configuration file for everybody to fork This is a Microsoft Sysinternals Sysmon configuration file template with default high-quality event tracing. The file should function as a great starting point for system change monitoring in a self-contained and accessible package...

PMAT-labs

PMAT-labs 🔬 Welcome to the labs for Practical Malware Analysis & Triage. !Release Versionimg-version-badgerelease !Course Linkcoursecourse-link !EULAimg-license-badgeeula 🔴 WARNING 🔴 Read this carefully before proceeding. This repository contains live malware samples for use in the Practical...

pwneye

pwneye is a focused and portable offensive security tool for working with IP cameras that expose ONVIF and RTSP services, aiming to give security researchers and hackers an easy way to handle discovery, authentication testing, metadata collection, stream validation, recording, and follow-up actio...