skim-milk

unredacter

Never ever ever use pixelation as a redaction technique

dlinject

Inject a shared library (i.e. arbitrary code) into a live linux process, without ptrace

stratus-red-team

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud

go-enry

A faster file programming language detector

GTRS

GTRS - Google Translator Reverse Shell

Artemis

APK Infrastructure Investigator

callander

Simple syscall sandboxing for Linux

LL-RASP

Low-level RASP: Protecting Applications Implemented in High-level Programming Languages

KubeHound

Kubernetes Attack Graph

asminject

Heavily-modified fork of David Buchanan's dlinject project. Injects arbitrary assembly (or precompiled binary) payloads directly into x86-64, x86, and ARM32 Linux processes without the use of ptrace by accessing /proc/<pid>/mem. Useful for certain post-exploitation scenarios, recovering content from process memory, etc..

DyldDeNeuralyzer

sncscan

Tool for analyzing SAP Secure Network Communications (SNC).

adversary_emulation_library

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

3snake

Tool for extracting information from newly spawned processes

Delegate

Tool to perform GCP Domain Wide Delegation abuse and access Gmail and Drive data

ELFEN

ELFEN: Automated Linux Malware Analysis Sandbox

grpc-pentest-suite

gRPC-Web Pentesting Suite + Burp Suite Extension

AlphaGolang

IDApython Scripts for Analyzing Golang Binaries

android-security-awesome

A collection of android security related resources

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

qark

Tool to look for several security related Android application vulnerabilities

LinikatzV2

linikatz is a tool to attack AD on UNIX

redirect.rules

Quick and dirty dynamic redirect.rules generator

nanodump

The swiss army knife of LSASS dumping

Chameleon

Chameleon: A tool for evading Proxy categorisation

LeakLooker-X

LeakLooker GUI - Discover, browse and monitor database/source code leaks

Social-media-c2

Script is a proof of concept how to control your machine by using social media sites.

0x00sec_code

Code for my 0x00sec.org posts

EVIL_RABBIT

-x-x-x- DO NOT RUN ON PRODUCTION MACHINE -x-x-x- LD_PRELOAD based user-land rootkit for Linux platform.

linux-malware

Tracking interesting Linux (and UNIX) malware. Send PRs