Hide, encode, and decode encrypted files, messages, and alternate audio streams in music hosted on popular streaming platforms (Spotify, Tidal, Bandcamp, etc).

CyberGym is a large-scale, high-quality cybersecurity evaluation framework designed to rigorously assess the capabilities of AI agents on real-world vulnerability analysis tasks.

scan and possibly exploit w/permission

Malware repository component for samples & static configuration with REST API interface.

Extract URLs, paths, secrets, and other interesting bits from JavaScript

Pandora is an analysis framework to discover if a file is suspicious and conveniently show the results

Analysis and detection engineering for the BlueHammer Windows Defender local privilege escalation vulnerability. This repo includes bug fixes, 7 Sigma rules, 4 YARA rules, and MITRE ATT&CK-mapped t…

Starkiller is a Frontend for PowerShell Empire.

This is a guide to help ppl better use LLMs with context.md files

A scalable file analysis and data generation platform that allows users to easily orchestrate arbitrary docker/vm/shell tools at scale.

The Network Execution Tool

Find, verify, and analyze leaked credentials

🤖 The Modern Port Scanner 🤖

FAME Automates Malware Evaluation

All-in-one OSINT tool for analyzing any website

Web browser forensics for Google Chrome/Chromium

🦆 Malduck is your ducky companion in malware analysis journeys

Vulnerability-Lookup facilitates quick correlation of vulnerabilities from various sources, independent of vulnerability IDs, and streamlines the management of Coordinated Vulnerability Disclosure …

Windows kernel and user mode emulation.

Dark Web OSINT Tool

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

Quickly deploy CAPEv2 Sandbox service in Docker | Now with Podman support!