cmc

sectemplates

Open source templates you can use to bootstrap your security programs

Docker-OSX

Run macOS VM in a Docker! Run near native OSX-KVM in Docker! X11 Forwarding! CI/CD for OS X Security Research! Docker mac Containers.

FindMy

Query Apple's Find My network

orb-hardware

Hardware specifications and schematics for the Worldcoin Orb.

smart-contract-vulnerabilities

A collection of smart contract vulnerabilities along with prevention methods

Malware

macOS Malware Collection

Chaos-Rootkit

Now You See Me, Now You Don't

wireproxy

Wireguard client that exposes itself as a socks5 proxy

text-generation-webui

A Gradio web UI for Large Language Models.

dalai

The simplest way to run LLaMA on your local machine

age

A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.

og-equity-compensation

Stock options, RSUs, taxes — a guide for humans

DeepFaceLive

Real-time face swap for PC streaming or video calls

wholeaked

a file-sharing tool that allows you to find the responsible person in case of a leakage

opensea-scraper

Scrapes nft floor prices and additional information from opensea. Used for https://nftfloorprice.info

OpenSea-Apis-NFT-Bulk-Make-Offer-Bot

OpenSea NFT Bidding Bot

hot-clone

Progressively image a mounted disk correctly without corruption

vehicle-nft

rustica-agent

The agent for Rustica responsible for holding certs and doing Yubikey signing.

phishcatch

A browser extension and API server for detecting corporate password use on external websites

SprayingToolkit

Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient

solarflare

SolarWinds Orion Account Audit / Password Dumping Utility

SafetyKatz

SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader

wraith

Uncover forgotten secrets and bring them back to life, haunting security and operations teams.

automactc

AutoMacTC: Automated Mac Forensic Triage Collector

Cortex

Cortex: a Powerful Observable Analysis and Active Response Engine

BoomBox

Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant

hvmi

Hypervisor Memory Introspection Core Library

DeimosC2

DeimosC2 is a Golang command and control framework for post-exploitation.

streamingphish

Python-based utility that uses supervised machine learning to detect phishing domains from the Certificate Transparency log network.