The default package source of the Zeek Package Manager. Wrote a package? See the README for how to get it included.

密码生成 flexible and scriptable password dictionary generator which can support brute-force、combination、complex rule mode etc...

CeWL is a Custom Word List Generator

Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat…

John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs

Python rewrite of passive OS fingerprinting tool

Zerofox Alert Feeder for TheHive, an Open Source and Free Security Incident Response Platform

DigitalShadows Alert Feeder for TheHive, an Open Source and Free Security Incident Response Platform

Cortex: a Powerful Observable Analysis and Active Response Engine

TheHive is a Collaborative Case Management Platform, now distributed as a commercial version

OpenCTI Connectors

E-mails, subdomains and names Harvester - OSINT

SQL powered operating system instrumentation, monitoring, and analytics.

Sysmon configuration file template with default high-quality event tracing

Windows Events Attack Samples

User guide of MISP

Test tool for CVE-2020-1472

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

Burp request/response timer

Fast web fuzzer written in Go

Fast subdomains enumeration tool for penetration testers

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com

Directory/File, DNS and VHost busting tool written in Go

Open Database Hunting - Finding potential breaches.

Parses IE's Automatic Crash Recovery Files

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

Browser forensics tool for Google Chrome (and other Chromium-based browsers)

Chrome/Chromium Forensic Tool : Parses History, Visited Links, Downloaded Files and Cache

Leveldb Dumper/Viewer

JavaScript program to dump contents of HTML5 Web Storage on Google Chrome directly from the file system