ziel

preeny

Some helpful preload libraries for pwning stuff.

awesome-secure-defaults

Awesome secure by default libraries to help you eliminate bug classes!

theHarvester

E-mails, subdomains and names Harvester - OSINT

rules_snyk

bazel (starlark) rules to test and monitor targets for vulnerabilities in external open source dependencies

cloudfox

Automating situational awareness for cloud penetration tests.

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

Back7co-Raspberry_Pi_Recovery_Kit

Back7.co 3D Files for the Raspberry Pi Recovery Kit

esofiles

The Esoteric File Archive

batchql

GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations

jc

CLI tool and python library that converts the output of popular command-line tools, file-types, and common strings to JSON, YAML, or Dictionaries. This allows piping of output to tools like jq and simplifying automation scripts.

malicious-pdf

💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh

magic-wormhole

get things from one computer to another, safely

age

A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.

xsleaks

A collection of browser-based side channel attack vectors.

ebpfkit-monitor

ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits

ebpfkit

ebpfkit is a rootkit powered by eBPF

black-hat-usa-2021_supporting-materials

Scripts and tools used in our Black Hat USA 2021 talk, "Come to The Dark Side, We Have Apples: Turning macOS Management Evil".

timeless-timing-attacks

A Python implementation that facilitates finding timeless timing attack vulnerabilities.

nexfil

OSINT tool for finding profiles by username

param-miner

Responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

zgrab2

Fast Go Application Scanner

Sublist3r

Fast subdomains enumeration tool for penetration testers

gef

GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux

DOMPurify

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

modern-unix

A collection of modern/faster/saner alternatives to common unix commands.

dust

A more intuitive version of du in rust

delta

A syntax-highlighting pager for git, diff, grep, and blame output

attestation

in-toto Attestation Framework

wg-supply-chain-integrity

Our objective is to enable open source maintainers, contributors and end-users to understand and make decisions on the provenance of the code they maintain, produce and use.