Cybersecurity Libraries - Page 4

FAT filesystems explore, extract, repair, and forensic tool

C++ 263Updated: 2 y ago License: Permissive (MIT)

Cobalt Strike BOF that spawns a sacrificial process, injects it with shellcode, and executes payload. Built to evade EDR/UserLand hooks by spawning sacrificial process with Arbitrary Code Guard (ACG), BlockDll, and PPID spoofing.

C 263Updated: 3 y ago License: No License (No License)

Exploiting DLL Hijacking by DLL Proxying Super Easily

C 261Updated: 2 y ago License: No License (No License)

Extract WhatsApp private key from any non-rooted Android device (Android 7+ supported)

Python 253Updated: 2 y ago License: Weak Copyleft (LGPL-3.0)

TRAM is an open-source platform designed to advance research into automating the mapping of cyber threat intelligence reports to MITRE ATT&CK®.

HTML 252Updated: 2 y ago License: Permissive (Apache-2.0)

The Simplistic Information Gathering Engine | Find Advanced Information on a Username, Website, Phone Number, etc.

Python 247Updated: 3 y ago License: Permissive (MIT)

A proof-of-concept Android application to detect and defeat some of the Cellebrite UFED forensic toolkit extraction techniques.

Java 246Updated: 3 y ago License: Permissive (CC0-1.0)

PE loader with various shellcode injection techniques

C++ 246Updated: 2 y ago License: No License (No License)

The OWASP ZAP Heads Up Display (HUD)

Java 243Updated: 2 y ago License: Permissive (Apache-2.0)

cut version of rensenware

C# 242Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

Amplify network visibility from multiple POV of other hosts

Python 242Updated: 2 y ago License: Permissive (Apache-2.0)

MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR

PowerShell 241Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

Simple pytorch implementation of FGSM and I-FGSM

Python 240Updated: 1 y ago License: No License (No License)

BOF and Shellcode for full DLL unhooking using dynamic syscalls

C 235Updated: 2 y ago License: No License (No License)

C++ application that uses memory and code hooks to detect packers

C++ 234Updated: 4 y ago License: Strong Copyleft (GPL-2.0)

airpwn-ng

Python 233Updated: 4 y ago License: Strong Copyleft (GPL-2.0)

virus collection source code

C++ 233Updated: 3 y ago License: No License (No License)

An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations.

PowerShell 231Updated: 2 y ago License: Permissive (MIT)

Some DLL Injection techniques in C++ implemented for both x86 and x64 windows OS processes

C++ 229Updated: 1 y ago License: No License (No License)

Simple C++ DLL Manual Map Injector For x86 and x64

C++ 225Updated: 2 y ago License: Permissive (MIT)

DFF (Digital Forensics Framework) is a Forensics Framework coming with command line and graphical interfaces. DFF can be used to investigate hard drives and volatile memory and create reports about user and system activities.

Python 221Updated: 2 y ago License: Strong Copyleft (GPL-2.0)

Active Directory forensic framework

Python 220Updated: 4 y ago License: Strong Copyleft (GPL-3.0)

Imago is a python tool that extract digital evidences from images.

Python 218Updated: 1 y ago License: Permissive (MIT)

AWS Inventory and Compliance Framework

Python 218Updated: 2 y ago License: Permissive (Apache-2.0)

Automated Tactics Techniques & Procedures

Python 217Updated: 4 y ago License: No License (No License)

A collection of tools for forensic analysis

Python 215Updated: 3 y ago License: Permissive (MIT)

User guide of MISP

Shell 215Updated: 1 y ago License: No License (No License)

Raw Packet Injection tool

Python 212Updated: 4 y ago License: Permissive (MIT)

Shellcode runner in GO that incorporates shellcode encryption, remote process injection, block dlls, and spoofed parent process

Go 212Updated: 2 y ago License: Permissive (BSD-3-Clause)

Java-Web-Security - Sichere Webanwendungen mit Java entwickeln

Java 211Updated: 2 y ago License: Permissive (Apache-2.0)

ChimeraPE (a PE injector type - alternative to: RunPE, ReflectiveLoader, etc) - a template for manual loading of EXE, loading imports payload-side

C 208Updated: 1 y ago License: No License (No License)

汇总了目前可以找到的所有的进程注入的方式，完成了x86/x64下的测试，不断更新中

C++ 208Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

A portable OSINT Swiss Army Knife for DFIR/OSINT professionals 🕵️ 🕵️ 🕵️

Python 205Updated: 4 y ago License: Permissive (MIT)

The Secure Coding Dojo is a platform for delivering secure coding training.

PHP 205Updated: 4 y ago License: Proprietary (Proprietary)

Hide Process From Task Manager using Usermode API Hooking

C 204Updated: 2 y ago License: No License (No License)

A .NET Core middleware for injecting the Owasp recommended HTTP Headers for increased security

C# 203Updated: 1 y ago License: Permissive (MIT)

Chrome/Chromium Forensic Tool : Parses History, Visited Links, Downloaded Files and Cache

Python 202Updated: 3 y ago License: Proprietary (Proprietary)

A collection of injection via vc++ in ring3

C++ 201Updated: 2 y ago License: No License (No License)

Using DInvoke to patch AMSI.dll in order to bypass AMSI detections triggered when loading .NET tradecraft via Assembly.Load().

C# 200Updated: 2 y ago License: No License (No License)

Python toolkit for injecting DLL files into running processes on Windows

Python 199Updated: 3 y ago License: No License (No License)

a set of free software to protect you from Internet hijacking

C 194Updated: 3 y ago License: Strong Copyleft (GPL-3.0)

Pseudo-malicious usermode memory artifact generator kit designed to easily mimic the footprints left by real malware on an infected Windows OS.

C++ 192Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

Graph Visualization for windows event logs

Python 192Updated: 2 y ago License: No License (No License)

Run Capture the Flags and Security Trainings with OWASP Juice Shop

JavaScript 189Updated: 2 y ago License: Permissive (Apache-2.0)

A :zap: lightweight Go package to parse, analyze and extract metadata from Portable Executable (PE) binaries. Designed for malware analysis tasks and robust against PE malformations.

Go 188Updated: 2 y ago License: Permissive (MIT)

Crusader Kings II double byte patch /production : 3.3.4 /dev : 3.3.4

C++ 187Updated: 3 y ago License: Permissive (MIT)

A dashboard for a real-time overview of threat intelligence from MISP instances

JavaScript 184Updated: 2 y ago License: Strong Copyleft (AGPL-3.0)

Command line utility to inject and eject DLLs

C++ 182Updated: 3 y ago License: No License (No License)

RdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps.

C++ 182Updated: 2 y ago License: No License (No License)

A set of tools made to assist in penetration testing GWT applications. Additional details about these tools can be found on my OWASP Appsec DC slides available here: http://www.owasp.org/images/7/77/Attacking_Google_Web_Toolkit.ppt

Python 181Updated: 4 y ago License: No License (No License)