gebl

hardcidr

hardCIDR is a Linux Bash script, but also functions under macOS. Your mileage may vary on other distros. The script with no specified options will query ARIN and a pool of BGP route servers. The route server is selected at random at runtime.

margaritashotgun

Remote Memory Acquisition Tool

ctf-training

ProcDump-for-Linux

A Linux version of the ProcDump Sysinternals tool

Invoke-SocksProxy

Socks proxy, and reverse socks server using powershell.

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

Reflowduino

Arduino-compatible wireless reflow oven controller ecosystem of open-source hardware

owasp-cloud-security

OWASP Cloud Security - Enabling conversations through threat and control stories

cracklord

Queue and resource system for cracking passwords

hashview-old

A web front-end for password cracking and analytics

server

Hashtopolis - distributed password cracking with Hashcat

UACME

Defeating Windows User Account Control

iam-docker

Use different IAM roles for each Docker container on an EC2 instance

Intelli-Genes

Counting intelligence genes in your 23andMe genome data

ZFSin

OpenZFS on Windows port

dnsutils

VHostScan

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

xss_payloads

Exploitation for XSS

SimplePELoader

In-Memory PE Loader

fauxmo

Emulated Belkin WeMo devices that work with the Amazon Echo

pyhashcat

Python bindings for hashcat

o365recon

retrieve information via O365 and AzureAD with a valid cred

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

PasteHunter

Scanning pastebin with yara rules

wpscan

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com

openalpr

Automatic License Plate Recognition library

python-paddingoracle

A portable, padding oracle exploit API

streamalert

StreamAlert is a serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using datasources and alerting logic you define.

binaryalert

BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.

Java-Deserialization-Cheat-Sheet

The cheat sheet about Java Deserialization vulnerabilities