YARA-X is a re-incarnation of YARA, a pattern matching tool designed with malware researchers in mind.
Read more
Category: Security
Kanha – web-app pentesting suite
With kanha you can do Fuzzing, Reverse dns lookup, common http response, subdomain takeover detection and many more.
Read more
PRS – web security scanner
PRS is a CLI-based scanner focused on safe assessment of web targets.
Read more
rsecure – AES-GCM file encryption and decryption tool
rsecure is a command-line tool for AES-GCM file encryption and decryption. Aimed at protecting sensitive files, backups, and personal data.
Read more
Envy – manage secrets
Envy is a single binary that gives you both a slick TUI for browsing secrets and a CLI for automation.
Read more
Chamber – secrets manager
Chamber is a secure, local-first secrets manager, featuring encrypted storage, intuitive terminal UI, and import/export capabilities.
Read more
Rooks – steganographic tool
Rook Stego is a steganographic tool that implements some of the most advanced hiding methods.
Read more
ConfigServer Security & Firewall – front-end to iptables or nftables
ConfigServer Security & Firewall (CSF) is a Stateful Packet Inspection (SPI) firewall and Login/Intrusion Detection and Security application.
Read more
sif – pentesting (recon/exploitation) suite
sif is designed to be fast, concurrent, and extensible. Run multiple scan types against targets with a single command.
Read more
KeyStore Explorer – GUI replacement for keytool and jarsigner
KeyStore Explorer is an open source GUI replacement for the Java command-line utilities keytool and jarsigner.
Read more
ruri – calculates the CRC-32 of a file
ruri calculates the CRC-32 of a file and checks it against the filename.
Read more
snitch – friendlier ss / netstat tool
snitch is a friendlier ss / netstat for humans. It lets you inspect network connections with a clean TUI or styled tables.
Read more
Kyanos – networking analysis tool using eBPF
Kyanos is an eBPF-based network issue analysis tool that enables you to capture network requests, such as HTTP, Redis, and MySQL requests.
Read more
why2 – easy to use encryption system
why2 is billed as a lightweight, fast, secure, and easy to use encryption system.
Read more
letmein – authenticated port/firewall knocking
Letmein is a port knocker with a simple and secure authentication mechanism. It can be used to harden against pre-authentication attacks.
Read more
AutoTimeliner – extract forensic timeline from volatile memory dump
AutoTimeliner lets you automagically extract forensic timeline from volatile memory dumps
Read more
yarp – yet another registry parser
yarp is yet another registry parser written in the Python programming language.
Read more
Volshell – CLI tool for working with memory
Volshell is a utility to access the volatility framework interactively with a specific memory image.
Read more
fnox – encrypted/remote secret manager
fnox lets you manage secrets with encryption or cloud providers—or both.
Read more
pypykatz – Python implementation of Mimikatz
pypykatz is a cross-platform implementation of Mimikatz written in Python.
Read more