hackwith

aws-mfa-enforce

Serverless function to automate enforcement of Multi-Factor Authentication (MFA) to all AWS IAM users with access to AWS Management Console.

IoTSecurity101

A Curated list of IoT Security Resources

PacketWhisper

PacketWhisper: Stealthily exfiltrate data and defeat attribution using DNS queries and text-based steganography. Avoid the problems associated with typical DNS exfiltration methods. Transfer data between systems without the communicating devices directly connecting to each other or to a common endpoint. No need to control a DNS Name Server.

mail-security-tester

A testing framework for mail security and filtering solutions.

kubeaudit

kubeaudit helps you audit your Kubernetes clusters against common security controls

bodhi

Bodhi - Client-side Vulnerability Playground

bugcrowd_university

Open source education content for the researcher community

byob

An open-source post-exploitation framework for students, researchers and developers.

Raccoon

A high performance offensive security tool for reconnaissance and vulnerability scanning

cloudgoat

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

gosec

Go security checker

pathbrute

Pathbrute

house

A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.

ICU

An Extended, Modulair, Host Discovery Framework

BeRoot

Privilege Escalation Project - Windows / Linux / Mac

replicator

Burp extension to help developers replicate findings from pen tests

trommel

TROMMEL: Sift Through Embedded Device Files to Identify Potential Vulnerable Indicators

machine_learning_security

Source code about machine learning and security.

bta

Open source Active Directory security audit framework.

ada

Android Automation Tool

GRFICS

Graphical Realism Framework for Industrial Control Simulations

snake

snake - a malware storage zoo

Dejavu

DejaVU - Open Source Deception Framework

chiron-elk

anwi

ANWI - All New Wireless IDS

mallet

Mallet is an intercepting proxy for arbitrary protocols

Chiron

Chiron - An IPv6 Security Assessment framework with advanced IPv6 Extension Headers manipulation capabilities.

armory

Armory is a tool meant to take in a lot of external and discovery data from a lot of tools, add it to a database and correlate all of related information.

malice

VirusTotal Wanna Be - Now with 100% more Hipster

fwaudit

Platform Firmware Auditing Tool