SentinelNav

SentinelNav SentinelNav is a zero-dependency, pure Python binary visualization and forensics tool. It transforms binary data into an interactive spectral map, allowing analysts to visually identify file structures, entropy anomalies, code sections, and potential cryptographic blobs. It combines a...

007-TheBond

007-TheBond 🕵️‍♂️ A powerful Python-based OSINT Open Source Intelligence tool for gathering information across multiple platforms and services. 007-TheBond helps security researchers, investigators, and ethical hackers collect publicly available information from various sources including social...

k8scout

k8scout Beta — A single-binary Kubernetes attack path engine for authorized security assessments. Drop it into a compromised pod, run it, and get a map of every realistic escalation path, from your current foothold to cluster-admin, node access, secret theft, and cloud IAM roles. The idea You hav...

WELA

WELA Windows Event Log Analyzer ゑ羅 A tool for auditing Windows event log settings. Created by Yamato Security — make sure you are actually recording the events that matter for DFIR. 📖 Read the Documentation → Available in 15 languages — English · 日本語 · 繁體中文 · 한국어 · Deutsch · Türkçe · Français ·...

MasterParser

MasterParser v2.5 Stop wasting time, let MasterParser do the work! Created & Maintained by: Eilay Yosfan What is MasterParser ? MasterParser stands as a robust Digital Forensics and Incident Response tool meticulously crafted for the analysis of Linux logs within the var/log directory. Specifical...

CVE-2021-3156-Exp

CVE-2021-3156-Exp The exploit of CVE-2021-3156. After an overnight researching, finally, I got it! Thanks https://www.qualys.com/2021/01/26/cve-2021-3156/baron-samedit-heap-based-overflow-sudo.txt...

vuln-list-update

vuln-list-update Collect vulnerability information and save it in parsable format automatically Data https://github.com/aquasecurity/vuln-list/ Usage $ vuln-list-update -h Usage of vuln-list-update: -target string update target nvd, alpine, alpine-unfixed, redhat, redhat-oval, debian, ubuntu,...

tookie-osint

Tookie-OSINT V4 is here! Tookie-OSINT has been re-written 100% from scratch for ultimate performance! Translations are still not ready yet. The wiki and readme are going through some changes. 🌐 Language Select your language / 言語を選択してください / 选择你的语言 / Sélectionnez votre langue / Seleccione su idioma...

cve-2024-42327

cve-2024-42327 usage: cve-2024-42327.py -h -u URL -n USERNAME -p PASSWORD --example cve-2024-42327.py: error: the following arguments are required: -u/--url, -n/--username, -p/--password...

policy_sentry

Policy Sentry IAM Least Privilege Policy Generator. Tutorial Installation Package managers Shell completion Step 1: Create the Template Step 2: Copy/paste ARNs Step 3: Write-policy command Cheat sheets Policy Writing cheat sheet IAM Database Query Cheat Sheet Local Initialization Optional Other...

Ghostwriter

Ghostwriter Ghostwriter is an open-source platform designed to enhance offensive security operations by simplifying report writing, asset tracking, and assessment management. It offers tools for managing clients, creating a reusable findings library, and organizing the infrastructure and domains...

rawsec-cybersecurity-inventory

Rawsec's Cybersecurity Inventory Name| Link ---|--- Website| link Documentation| link Git repository| link Git repository mirror| link Merge Requests| link Issues| link Wiki| link Chat| link For contribution, development, usage or questions check the documentation. Sponsors Please contact me or...

RAT-via-Telegram

This is not maintained by me any more. For the latest maintained version, check out https://github.com/mvrozanti/RAT-via-Telegram. Disclaimer: This tool and any of its forks are for education/research purposes only. The authors take NO responsibility and/or liability for how you choose to use any...

guasap-whatsapp-foresincs-tool

Guasap Forensic The Guasap Forensic implemented in Python under the GNU General Public License, for the extraction and analysis of files, data bases and logs for forensic WhatsApp. What it does? 1. Check root in device 2. Extract DB and multimedia files no root 3. Extract and analyze deleted...

Findomain

Findomain The complete solution for domain recognition. Supports screenshotting, port scanning, importing data from other tools, subdomain monitoring, and more. Be alerted on your findings through services such as Discord, Slack, and Telegram. Multiple API Keys for sources and much more. Chat wit...

HoneypotBuster

Microsoft PowerShell module designed for red teams that can be used to find honeypots and honeytokens in the network or at the host. CodeExecution Execute code on a target machine using Import-Module. Invoke-HoneypotBuster HoneypotBuster is a tool designed to spot Honey Tokens, Honey Bread Crumbs...

SOC-Multitool

SOC Multi-tool Introducing SOC Multi-tool, a free and open-source browser extension that makes investigations faster and more efficient. Now available on the Chrome Web Store and compatible with all Chromium-based browsers such as Microsoft Edge, Chrome, Brave, and Opera. Available on Chrome Web...

fortiscan

Fortiscan CVE-2018-13379 FG-IR-18-384 Exploitation Tool, You can use this tool to check the vulnerability in your FortiGate SSL-VPN. This vulnerability affects the following versions: • FortiOS 6.0 - 6.0.0 to 6.0.4 • FortiOS 5.6 - 5.6.3 to 5.6.7 • FortiOS 5.4 - 5.4.6 to 5.4.12...

Logsensor

Logsensor A Powerful Sensor Tool to discover login panels, and POST Form SQLi Scanning Features login panel Scanning for multiple hosts Proxy compatibility http, https Login panel scanning are done in multiprocessing so the script is super fast at scanning many urls quick tutorial & screenshots a...

Invoke-CradleCrafter

Invoke-CradleCrafter v1.1 Introduction Invoke-CradleCrafter is a PowerShell v2.0+ compatible PowerShell remote download cradle generator and obfuscator. Background In the Fall of 2016 after releasing Invoke-Obfuscation, I continued updating my spreadsheet of PowerShell remote download cradles...