wifiphisher
wifiphisher/wifiphisherRogue Access Point framework for red team engagements and Wi-Fi security testing. Performs Evil Twin, KARMA, and Known Beacons attacks to achieve…
impersonation-toolsmalware-analysisphishing+6
14.9k
wifiphisher/wifiphisherRogue Access Point framework for red team engagements and Wi-Fi security testing. Performs Evil Twin, KARMA, and Known Beacons attacks to achieve…
a-poc/blueteam-toolsTools and Techniques for Blue Team / Incident Response
professorquantumuniverse/vetoOpen-source Android client for VirusTotal. Scan files, URLs, and installed apps against 70+ antivirus engines. View detailed reports with hashes,…
garethmsheldon/fortinet-fortiweb-fabric-connector-cve-2025-25257-detectionThis repository provides production-ready detection engineering content for **CVE-2025-25257**, a pre-authentication SQL Injection vulnerability in…
amorath/threatscraperPython tool that queries the VirusTotal API to check file hashes against 70+ antivirus engines, schedules recurring scans, and exports detection…
echowei/deeptrafficDeep Learning models for network traffic classification
nirvanaon/antive-behaviorwatchEmbedded GRU neural network for real-time human behavior verification via mouse movement analysis, detecting automated analysis systems, sandboxes,…
mandiant/speakeasyWindows malware emulation framework that executes binaries, drivers, and shellcode in a modeled runtime, emulating APIs, process/thread behavior,…
insane-forensics/drovorub-huntA tool to assist with network-based hunting for GRU's Drovorub malware c2
tomchop/malcomMalcom - Malware Communications Analyzer
sensepost/snoopySnoopy: A distributed tracking and data interception framework
withsecurelabs/doublepulsar-detection-scriptA python2 script for sweeping a network to find windows systems compromised with the DOUBLEPULSAR implant.
mandiant/flare-fakenet-ngFakeNet-NG - Next Generation Dynamic Network Analysis Tool
pjlantz/droidboxDynamic analysis sandbox for Android apps that monitors network traffic, file operations, cryptographic API usage, permission circumvention, and…
dinotools/dionaeaLow-interaction honeypot that emulates vulnerable network services to capture malware, shellcode, and exploit attempts, with IPv6 and TLS support.
mindcrypt/stegowiperA powerful and flexible tool to apply active attacks for disrupting stegomalware
haxrob/bpfdoor-controller-sourceSource code for a BPFDoor backdoor controller supporting TCP, UDP, ICMP, and HTTPS covert communication channels with magic packet activation,…
corelight/pingbackA Zeek package to detect the Pingback malware ICMP tunnel command and control (C2) network traffic.