alibi
owasp-noir/alibiCross-check the views of your attack surface and find the endpoints that cannot corroborate each other.
api-securitycode-analysisconfiguration-auditing+7
1014 days ago
owasp-noir/alibiCross-check the views of your attack surface and find the endpoints that cannot corroborate each other.
blakebratcher/wcw-cyberring-pav-decryptorCryptanalysis of a proprietary 1999 video DRM system. Recovers 61 encrypted wrestling videos from the WCW Internet Powerdisk CD-ROM through static…
promptfoo/modelauditSecurity scanner for AI/ML model files. Detects malicious code, backdoors, and vulnerabilities before deployment
protectai/modelscanProtection against Model Serialization Attacks
davidholiday/cve-2007-4559Educational demonstration of CVE-2007-4559 Python tarfile symlink attack with a script showing why os.path.realpath() fails to prevent extraction…
owasp-noir/noirHunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.
oalabs/hashdbAssortment of hashing algorithms used in malware
kaandemir993/malwareforge---advanced-static-malware-analyzerAdvanced Static malware analyzer that reveals 8 injection techniques, critical API calls, hidden strings, exports PE sections (.text, .rdata) as…
abusech/yaraifyOpen YARA scan- and search engine
struppigel/portexJava library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
praetorian-inc/trajanA multi-platform CI/CD vulnerability detection and attack automation tool for identifying security weaknesses in pipeline configurations.
pan-unit42/dotnetfilePython library for parsing CLR/PE metadata in .NET assemblies, exposing streams and hash fingerprints to support malware analysis and threat hunting.
occamsec/log4j-checkerBash and PowerShell scripts to scan a local filesystem for Log4j .jar files which could be vulnerable to CVE-2021-44228 aka Log4Shell.
afine-com/glassworm-hunterDetects GlassWorm supply chain attack payloads by scanning VS Code extensions, npm/PyPI packages, and git repos for invisible Unicode payloads,…
wspr-ncsu/mininodeStatic analysis CLI tool that reduces Node.js application attack surface by constructing dependency graphs and removing unused modules and functions…
c3rb3ru5d3d53c/binlexA Binary Genetic Traits Lexer Framework
aniketkarne/aco-prompt-shieldStop prompt injection attacks before they reach your LLM — zero API costs, runs entirely locally, integrates in 2 minutes. Prompt injection is the…
ishaklaz/hash-eye**HashEye** is a powerful Python CLI tool for instantly detecting and analyzing hash types. It provides detailed information about hash formats,…