Eldar Marcussen

unblob. Extract files from any kind of container formats

ogp-ctf-2024. A web CTF for training developers in bug hunting and secure coding!

OFFAT. The OWASP OFFAT tool autonomously assesses your API for prevalent vulnerabilities, though full compatibility with OAS v3 is pending. The project remains a work in progress, continuously evolving towards completion.

emba. EMBA - The firmware security analyzer

secure-code-review-checklist. A starter secure code review checklist

gerrit. Gerrit Code Review - (mirror of https://gerrit.googlesource.com/gerrit)

git-appraise. Distributed code review system for Git repos

USBArmyKnife. USB Army Knife – the ultimate close access tool for penetration testers and red teamers.

autok-extension. AI-powered bug hunter - vscode plugin.

vscode-weaudit. Create code bookmarks and code highlights with a click.

graudit. grep rough audit - source code auditing tool

traversty. Directory traversal tool

research-threats. Collection of legal threats against good faith Security Researchers; vulnerability disclosure gone wrong. A continuation of work started by @attritionorg

subzuf. a smart DNS response-guided subdomain fuzzer

one_gadget. The best tool for finding one gadget RCE in libc.so.6

smbscan. SMBScan is a tool to enumerate file shares on an internal network.

python-log4rce. An All-In-One Pure Python PoC for CVE-2021-44228

Guides_Linux-Programming-Electronics-Aeronautics. All my little guides in one place. Linux, Programming, Embedded, Electronics, Aeronautics and Guitar.

hackers-dont-give-a-shit. Hackers Don't Give A Shit

php-omelette. Code fragmentation technique for scripting languages

coccinelle-linux-allocator-overflow. Script for generating Coccinelle scripts for fixing Linux kernel allocator overflows

coccigrep. Semantic grep for the C language based on coccinelle

coccinellery.

coccinellery. SmPL

coccinelle. Source code of the Coccinelle project (mirror of the main Coccinelle repository located at Inria)

coccinelle. Source code of the Coccinelle project (mirror of the main Coccinelle repository located at Inria)

semgrep. Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

semgrep-rules. Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.

semgrep. Fast and syntax-aware semantic code pattern search for many languages: like grep but for code

semgrep-rules. semgrep rules registry

CVSS-Calculator. Windows desktop CVSS calculator for easier report writing

ret-sync. ret-sync is a set of plugins that helps to synchronize a debugging session (WinDbg/GDB/LLDB/OllyDbg2/x64dbg) with IDA/Ghidra/Binary Ninja disassemblers.

xrop. Tool to generate ROP gadgets for ARM, AARCH64, x86, MIPS, PPC, RISCV, SH4 and SPARC

rp. rp++ is a fast C++ ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries.

RPISEC-Courses.

Responder. Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

windbgtool. Windbg Utility Tools based upon PyKD

restincode. A memorial site for Hackers and Infosec people who have passed

HardeningAuditor. Scripts for comparing Microsoft Windows compliance with the ASD 1709 & Office 2016 Hardening Guides

LOLBAS. Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

Sherlock. PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.

SecLists. SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

WinObjEx64. Windows Object Explorer 64-bit

cutter. Free and Open Source Reverse Engineering Platform powered by rizin

mimiDbg. PowerShell oneliner to retrieve wdigest passwords from the memory

Exploits. Windows Exploits

samples. DARPA Cyber Grand Challenge Sample Challenges

pics. File formats dissections and more...

manticore. Symbolic execution tool

oleviewdotnet. A .net OLE/COM viewer and inspector to merge functionality of OleView and Test Container

klee. KLEE Symbolic Execution Engine

Reflective-Driver-Loader. C++

sqlite-lab. This code is vulnerable to SQL Injection and having SQLite database. For SQLite database, SQL Injection payloads are different so it is for fun. Just enjoy it \m/

hackingtogether. #HackingTogether

big-list-of-naughty-strings. The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

radare2gui_dotnet. Another radare2 gui for windows

DerbyCon2016. Samples & presentation slides from my fuzzing talk at DerbyCon 2016

Mirai-Source-Code. Leaked Mirai Source Code for Research/IoC Development Purposes

Windows-Secure-Host-Baseline. Configuration guidance for implementing the Windows 10 and Windows Server 2016 DoD Secure Host Baseline settings. #nsacyber

BugId. Detect, analyze and uniquely identify crashes in Windows applications

mimikittenz. A post-exploitation powershell tool for extracting juicy info from memory.

panopticon. A libre cross-platform disassembler.

ssh-badkeys. A collection of static SSH keys (public and private) that have made their way into software and hardware products.

redos-detector. A tool for detecting regular expression denial-of-service vulnerabilities in Android apps.

EhTrace. ATrace is a tool for tracing execution of binaries on Windows.

libheap. python library to examine ptmalloc (the glibc userland heap implementation)

voltron-web. Web interface for Voltron

EasyHook. EasyHook - The reinvention of Windows API Hooking

pin. Collection of pin tools

wadi. Wadi Fuzzing Harness

exploitable. The 'exploitable' GDB plugin

KeeFarce. Extracts passwords from a KeePass 2.x database, directly from memory.

afl-trivia. Short, unrelated helper scripts for users of AFL (the fuzzer)

binception. Binception: Generate hash values for functions within an ELF binary.

NetRipper. NetRipper - Smart traffic sniffing for penetration testers

binnavi. BinNavi is a binary analysis IDE that allows to inspect, navigate, edit and annotate control flow graphs and call graphs of disassembled code.

perl-capstone. Perl wrapper for the capstone library

peda. PEDA - Python Exploit Development Assistance for GDB

abusing-silent-mitigations. Understanding weaknesses within Internet Explorer's Isolated Heap and MemoryProtection

Cartero. Cartero - Social Engineering Framework

infer. A static analyzer for Java, C, C++, and Objective-C

visulator. A machine emulator that visualizes how each instruction is processed

snowman. Snowman decompiler

status-list. A list of your various social statii.

x64dbg. An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

unix-privesc-check. Shell script that runs on UNIX systems (tested on Solaris 9, HPUX 11, various Linux distributions, FreeBSD 6.2). It detects misconfigurations that could allow local unprivileged user to escalate to other users (e.g. root) or to access local apps (e.g. databases). This is a collaborative rework of version 1.0

panda. Platform for Architecture-Neutral Dynamic Analysis

BDFProxy. Patch Binaries via MITM: BackdoorFactory + mitmProxy.

doona. Network based protocol fuzzer

community_bash_style_guide. Community Bash Style Guide: writing useful and modern bash scripts, seriously.

winappdbg. WinAppDbg Debugger

sdb-explorer. Tool to view and create Microsoft shim database files (SDB).

DefCon_RESTing. Repository to hold materials for DefCon_RESTing presentation by Dinis, Abe and Alvaro

clusterd. application server attack toolkit

masscan. TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

MCIR. The Magical Code Injection Rainbow! MCIR is a framework for building configurable vulnerability testbeds. MCIR is also a collection of configurable vulnerability testbeds.

xpdbg. PHP runtime analysis toolset based on Xdebug

AbsoluteZero. Anti-AV compilation

Kvasir. Kvasir: Penetration Test Data Management

sshuttle. Wrong project! You should head over to http://github.com/sshuttle/sshuttle

minion. Minion

sulley. A pure-python fully automated and unattended fuzzing framework.

p. Peer-to-peer networking with browsers

radare2. UNIX-like reverse engineering framework and command-line toolset

treetop. A top-like log or text file monitor

Gdbinit. Gdbinit for OS X, iOS and others - x86, x86_64 and ARM

wpscan. WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com

lbmap. Advanced HTTP fingerprinting PoC

metasploit-framework. Metasploit Framework

dotdotpwn. DotDotPwn - The Directory Traversal Fuzzer

DB--Color. Syntax highlighting the Perl debugger

DVCS-Pillage. Pillage web accessible GIT, HG and BZR repositories

Wapiti-Parser. Perl module for parsing wapiti reports

wargame-builder. Constructs and deploys a VM network for a wargame including the login gateway and target VMs with pluggable vulnerabilities.

Web-application-security-lab. Collection of files from my article on building a web application security lab

Hidden-Blog. Setting up a Blog as Tor Hidden Service

DSSS. Damn Small SQLi Scanner

DVCS-Pillage. Pillage web accessible GIT, HG and BZR repositories

oysttyer-extensions. A centralized suite of extensions for the TTYtter Twitter client. These extensions add features such as sound notifications, text to speech, and more.

PadBuster. Automated script for performing Padding Oracle attacks

htshells. Self contained htaccess shells and attacks

BurpMachineKeyUtils. Java

icmpsh. Simple reverse ICMP shell

PadBuster. Automated script for performing Padding Oracle attacks

SWFREtools. SWF file reverse engineering tools

htracr. HTTP sniffing and low-level visualisation

http-test. Tests for HTTP implementations

Ruxmon_training. Ruxmon training

phar-util. PharUtil - Security-oriented utilities for Phar archives

mod_perlite. A lightweight Apache module for Perl scripts