Head of Security Lab at @AmnestyTech | Hunting spyware and unlawful surveillance targeting civil society
shadowbrokers-exploits. Mirror of Shadowbrokers release from https://steemit.com/shadowbrokers/@theshadowbrokers/lost-in-translation
534onionbalance. OnionBalance provides load-balancing and redundancy for Tor hidden services
274cia-hacking-tool-archive. Curated archive of tools from the Wikileaks CIA hacking tool leak, pull requests welcome https://wikileaks.org/ciav7p1/
128ubuntu-apport-exploitation. This project contains a PoC and exploit generator for a code execution bug in Ubuntu's Apport crash reporter
95cloudflare-tor-whitelister. Whitelist Tor exit relays to allowing Tor users access your CloudFlare-protected site without CAPTCHA's
62oniontip. OnionTip is a web app which parses Tor relay data to allow users to tip volunteers for running relay in a fair and open way.
53coldboot-attacks. Archive of the original "cold boot" attack tools from CITP at Princeton. The original links are broken.
53oniongateway. End-to-End encrypted Tor2Web gateway
37pyTenna. Exploring and reversing the goTenna Mesh
21tor-hsdir-research. Modified version of Tor and associated tools for investigating the Hidden Service DHT. This research is old. Lots of work is being done to help fix these problems in Tor. Help out! https://blog.torproject.org/blog/hidden-services-need-some-love
12onionsprout. OnionSprout is a tool to run publicaly-accessible web services, for example from Raspberry Pi in your home, without a public IP.
11desktop-file-social-engineering. Desktop shortcuts (.desktop) create a risk for code execution via social engineering
10tor-hs-descriptor-fetcher. Simple tool to regularly pool Tor HSDirs for hidden service descriptors
10sphinx. Python implementation of the Sphinx mix format. - Paper: http://www.cypherpunks.ca/~iang/pubs/Sphinx_Oakland09.pdf
6sybilwatch. Detecting Sybil activity in the Tor network
5coinbase-haxs. Proof-of-concept scripts for bugs reported to Coinbase.com
5exploits. A repo with exploits for course problems and CTF challenges
5stalkerware-indicators. Indicators of stalkerware apps
5libgen. Module for interacting with and adding papers to LibGen.org
3mvt. MVT (Mobile Verification Toolkit) helps conducting forensics of mobile devices in order to find signs of a potential compromise.
2Piratebot. Python
2tls-onion-service. Run an onion service and make it available over TLS for non-Tor users via LetsEncrypt and the OnionGateway proxy
2chemistry-fyp. Report for my undergraduate chemistry research project.
2bwscanner. Bandwidth authority scanner
2exitmap. Performs a task over (a subset of) all Tor exit relays.
2oniongate-web. A web service and API for managing OnionGateway proxies and DNS records
2pdfparanoia. pdf watermark removal library for academic papers
1Shallot. Shallot allows you to create customized .onion addresses for your hidden service. (p.s. I didn't write Shallot!)
1strengthify. :lock::mag: Combine jQuery and zxcvbn to create a password strength meter
1node-pkg-extractor. Python
1metasploit-framework. Metasploit Framework
1oh-my-zsh. A delightful community-driven (with 1,000+ contributors) framework for managing your zsh configuration. Includes 200+ optional plugins (rails, git, OSX, hub, capistrano, brew, ant, php, python, etc), over 140 themes to spice up your morning, and an auto-update tool so that makes it easy to keep up with the latest updates from the community.
1rsa-wiener-attack. A Python implementation of the Wiener attack on RSA public-key encryption scheme.
1GitPython. GitPython is a python library used to interact with Git repositories.
1torflow. Pesonal fork of torflow - Python tools for measuring a Tor network
1tor. Personal fork
1data. APTnotes data
1fw-daemon. Subgraph Application Firewall
1torspec. Python
1eschalot. Generate custom Tor hidden service addresses
1onionvpn. onion service IPv6 VPN
1bitaddress.org. JavaScript Client-Side Bitcoin Wallet Generator
1gidevice. communicate with iOS devices implemented with Golang
1facebook-events-widget. Wordpress plugin for displaying upcoming events from Facebook on Pirates.ie
1scramlkb. Passphrase entry utility that aims to defeat hardware keyloggers and low-resolution spy cameras
1