Search awesome repositories

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.

A Linux packet crafting tool.

A low to medium interaction honeypot.

FireEye Publicly Shared Indicators of Compromise (IOCs)

🔥 A fully open source audit logs service and embeddable UI easily deployed to your own Kubernetes cluster. Brought to you by replicated.com and boxyhq.com 🚀

A Vault CLI

Keyscope is a key and secret workflow (validation, invalidation, etc.) tool built in Rust

Substation is a toolkit for routing, normalizing, and enriching security event and audit logs.

Discover internet-wide misconfigurations while drinking coffee

HonSSH is designed to log all SSH communications between a client and server.

Mirror of Apache Spot

Automated client-side template injection (sandbox escape/bypass) detection for AngularJS v1.x.

Universal web application security sensor intended for real-time monitoring and defense.

Aggregates security advisories from 10 international CERTs daily and provides an AI skill that cross-references alerts against your project's tech stack.

Incident Response - Fast suspicious file finder

DEPRECATED - USE v3 (bearded-avenger)

Secure shell history commands by finding sensitive data

Open Source SIEM (Security Information and Event Management system).

🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.

Hadoop library to read packet capture (PCAP) files

SQL Firewall Extension for PostgreSQL

A secure and easy-to-use store for your production secrets

CLI utility and Python module for analyzing log files and other data.

:shower: Sanitising your documents, one threat at a time. — Content Disarm & Reconstruction Software

preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.

Scalable Binary Data Extraction in Hadoop

Cyclops 是一款具有 XSS 检测功能的浏览器

A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation

Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.