
patriot
In-memory stealth detection tool that identifies process hollowing, module stomping, unbacked executable regions, and anomalous CONTEXT structures…

In-memory stealth detection tool that identifies process hollowing, module stomping, unbacked executable regions, and anomalous CONTEXT structures…

A browser extension that encrypts your communications with many websites that offer HTTPS but still allow unencrypted connections.

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security…

Project that brings together several pentest tools

OWASP Incubator project: detects credentials exposed in browser-delivered content (JavaScript, config responses, live traffic).

Curated catalog of Remote Monitoring and Management tools abused by threat actors, with YAML profiles, Sigma detection rules, and API access for…

Linux Kernel Runtime Integrity with eBPF

To fight against Windows security breach PrintNightmare! (CVE-2021-34527, CVE-2021-1675)

Find the version that the project you currently develop or audit uses and quickly check which are the known smart contract security vulnerabilities…

Windows honeypot using ProjFS to project decoy files that trigger Event Log and desktop alerts when accessed, with SMB remote session logging for…

Tool for embedding payloads into JPG/PNG format images, allowing to perform certain actions when opening them.

Research code and experiments for defending tool-integrated LLM agents against adversarial attacks, extending Agent Security Bench with new defense…

A macOS app to scan Xcode project files for possible security issues.

An information security preparedness tool to do adversarial simulation.

A collection of tools to enumerate and analyse Windows DACLs

A Feature Rich Modular Malware Configuration Extraction Utility for MalDuck

Lightweight security state inspector for Linux — bridging the gap between pretty fetch tools and heavy-duty audit frameworks.

Unsupervised deep autoencoder that flags anomalous mobile traffic: 25,000+ HTTP/HTTPS flows intercepted from a live iOS device with mitmproxy,…