セキュリティ · GitHub

A curated list of Awesome Threat Intelligence Blogs

Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps.

• Small Executable: Get started quickly with a curl fetch to your target machine.
• Fast: Performs all session commands including logging, trace clearing, and filesystem operations in under 5 milliseconds.

A multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks.

• Prepared verifier hot path: Password attempts reuse a prepared security envelope instead of rebuilding general PDF parsing state on every try.
• Exact progress accounting: Progress is based on verified password attempts, not merely queued work.

A powerful, cross-platform Open Source Intelligence tool featuring AI-driven entity correlation, advanced graph analytics, breach intelligence, and professional reporting. Built with Python & PyQt6

Detonate files & URLs in cloud malware sandboxes (Hybrid Analysis, tria.ge, ANY.RUN) and enrich IOCs across MalwareBazaar, ThreatFox, URLhaus, Feodo, URLScan & VirusTotal — straight from Claude. BYOK, async, MITRE ATT&CK.

An open source tool focused on software supply chain security. 墨菲安全专注于软件供应链安全，具备专业的软件成分分析（SCA）、漏洞检测、专业漏洞库。

• Analyze dependencies being used by your project, including direct and indirect dependencies
• Detect known vulnerabilities in project dependencies

A set of tools to enhance Mendix app development workflows. They are mainly designed for professionals but should be usable for everybody.

• Export Mendix model to Yaml
• Lint Mendix Yaml files for common mistakes and enforces best practices

My Privacy DNS #Matrix lists for blacklisting

A privacy-focused iOS app that raises awareness about what native apps can see

A FREE comprehensive online Rust hacking tutorial utilizing the x64, ARM64 and ARM32 architectures going step-by-step into the world of reverse engineering Rust from scratch.

Use your phone as a dashcam and save the last 30 minutes when you need them.

Zehef is an osint tool to track emails

• Check if the email is in a paste (Pastebin)
• Find leaks with HudsonRock

Lightweight open-core SIEM in Rust — S3-compatible for logs, Postgres for state.

A kernel designed to run one and only one application in a virtualized environment

A simple command line tool using which you can skip phone number based SMS verification by using a temporary phone number that acts like a proxy.

• Written in Go-1.15 (with modules support enabled)
• Provides an interactive CLI, which is easier to use.

Android URL cleaner: strips tracking, rewrites social links for better previews, no permissions, no network. GPL-3.0-or-later.

• Stop carrying tracking tags into the next chat. Remove known tracking parameters before copying, sharing, or opening a link. For example, example.org/read?article=42&utm_source=chat becomes example.org/read?article=42: the article selector stays. Browser Mode can do this for links Android sends to FixupXer, then open your usual browser.
• Notice an email address or sign-in token before passing it on. Private Link Guard flags certain sensitive values still present in a URL. Review them, remove a parameter, or go back. It runs offline, but cannot detect every private value or tell whether one was included intentionally.