maveas

linux

Linux kernel source tree

legacy-homebrew

💀 The former home of Homebrew/homebrew (deprecated)

osquery

SQL powered operating system instrumentation, monitoring, and analytics.

infer

A static analyzer for Java, C, C++, and Objective-C

lynis

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

freebsd-src

The FreeBSD src tree publish-only repository. Experimenting with 'simple' pull requests....

cppcheck

static analysis of C/C++ code

grr

GRR Rapid Response: remote live forensics for incident response

MITMf

Framework for Man-In-The-Middle attacks

OSXAuditor

OS X Auditor is a free Mac OS X computer forensics tool

ColorSense-for-Xcode

Plugin for Xcode to make working with colors more visual

XcodeColors

XcodeColors allows you to use colors in the Xcode debugging console. It's designed to aid in the debugging process.

cipherscan

A very simple way to find out which SSL ciphersuites are supported by a target.

exploitdb-bin-sploits

The legacy Exploit Database repository - New repo located at https://gitlab.com/exploit-database/exploitdb-bin-sploits

KeeFarce

Extracts passwords from a KeePass 2.x database, directly from memory.

tripwire-open-source

Open Source Tripwire®

zgrab

**DEPRECATED** This project has been replaced by https://github.com/zmap/zgrab2

bbqsql

SQL Injection Exploitation Tool

zzuf

🌪️ Application fuzzer

mallory

Mallory - MiTM TCP and UDP Proxy

https

The HTTPS-Only Standard for federal domains (M-15-13), and implementation guidance.

Publications

A list of published research documents

ikeforce

rdp-sec-check

rdp-sec-check is a Perl script to enumerate security settings of an RDP Service (AKA Terminal Services)

TARDIS

Threat Analysis, Reconnaissance, and Data Intelligence System

scvs

Secure Coding Validation Suite

core-macos

RCS Agent for Mac

driver-macos

Support driver for Mac Agent

OpenSSL-CCS-Inject-Test

This script is designed for detection of vulnerable servers (CVE-2014-0224.) in a wide range of configurations. It attempts to negotiate using each affected protocol version (SSLv3, TLSv1, TLSv1.1, and TLSv1.2) advertising a comprehensive set of ciphers.

bashbug-shellshock-test

This offline tool is not supported and is provided for informational purposes only.