Stars
FakeNet-NG - Next Generation Dynamic Network Analysis Tool
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
Six Degrees of Domain Admin
The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
Gnuradio blocks and tools for receiving GSM transmissions
Slack Enumeration and Extraction Tool - extract sensitive information from a Slack Workspace
OnionScan is a free and open source tool for investigating the Dark Web.
A curated list of awesome infosec courses and training resources.
Patch PE, ELF, Mach-O binaries with shellcode new version in development, available only to sponsors
Web shells for PHP/ASP/ASP.NET using the least number of characters
Performs DNS zone dumps by walking DNSSEC NSEC(3) records.
A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.
Leverage certificate transparency live feed to monitor for newly issued subdomain certificates (last 90 days, configurable), for domains participating in bug bounty programs.
Active Directory ACL exploitation with BloodHound
SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket
Example code how to play a stream with VLC
WordPress Plugin Security Testing Cheat Sheet
Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"
Software-defined radio application written in Python
Codex Gigas malware DNA profiling search engine discovers malware patterns and characteristics assisting individuals who are attracted in malware hunting.
Orc is a post-exploitation framework for Linux written in Bash
Loader, dropper generator with multiple features for bypassing client-side and network-side countermeasures.
Open Source Office Malware Generation & Polymorphic Engine for Red Teams and QA testing
A command line tool to detect shared passwords