Short editorial updates from published cybersecurity tools.
elastic/detection-rulesDevelop, validate, and publish SIEM detection rules for Elastic Security, with Python CLI tooling, KQL parsing, Kibana integration, and packaged…
kraxel/virt-firmwareToolkit for decoding, inspecting, and modifying UEFI firmware volumes and variable stores. Supports secure boot certificate enrollment, PE binary…
h3x0v3rl0rd/php_reverse_shellSimple PHP reverse shell script for establishing remote command execution on target systems. Ideal for penetration testing and security assessments.
h3x0v3rl0rd/lin_enumShell script for automated enumeration of Linux systems to identify privilege escalation vectors and configuration weaknesses.
h3x0v3rl0rd/linenumLinux enumeration script for automated system information gathering to identify potential privilege escalation vectors during penetration testing.
h3x0v3rl0rd/linux-exploit-suggester-2Post-exploitation utility that scans kernel/OS version and configuration to suggest applicable local privilege escalation exploits.
grepular/foxcageRun Firefox in a rootless Podman container with dropped capabilities, isolated networking, and ephemeral storage to contain sandbox escapes and…
whispergate/infraguardInfraGuard is a Command & Control Redirection Proxy and Manager which protects your Red Team Infrastructure against threat attribution
jamesmcm/voponoRun applications through VPN tunnels with temporary network namespaces
nccgroup/winauthlibA Windows domain authentication library for testing credentials
jas502n/cs_sleepmaskObfuscation module for Cobalt Strike Beacon sleep states, enabling evasion of memory-based detection and endpoint security controls.
extv/podroidA rootless Android app that boots Alpine Linux: run containers (Podman/Docker/LXC) and GUI desktop apps.
