Discover WithSecureLabs/Jandroid Open Source project

1

drozer

The Leading Security Assessment Framework for Android.

Python

3,894

2

chainsaw

Rapidly Search and Hunt through Windows Forensic Artefacts

Rust

2,713

3

C3

Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.

C++

1,498

4

needle

The iOS Security Testing Framework

Python

1,331

5

doublepulsar-detection-script

A python2 script for sweeping a network to find windows systems compromised with the DOUBLEPULSAR implant.

Python

1,008

6

awspx

A graph-based tool for visualizing effective access and resource relationships in AWS environments.

Python

913

7

python-exe-unpacker

A helper script for unpacking and decompiling EXEs compiled from python code.

Python

751

8

leonidas

Automated Attack Simulation in the Cloud, complete with detection use cases.

Jupyter Notebook

446

9

android-keystore-audit

JavaScript

385

10

physmem2profit

Physmem2profit can be used to create a minidump of a target hosts' LSASS process by analysing physical memory remotely

C#

364

11

CallStackSpoofer

A PoC implementation for spoofing arbitrary call stacks when making sys calls (e.g. grabbing a handle via NtOpenProcess)

C++

294

12

bitlocker-spi-toolkit

Tools for decoding TPM SPI transaction and extracting the BitLocker key from them.

Python

271

13

captcha22

CAPTCHA22 is a toolset for building, and training, CAPTCHA cracking models using neural networks.

Python

243

14

doublepulsar-c2-traffic-decryptor

A python2 script for processing a PCAP file to decrypt C2 traffic sent to DOUBLEPULSAR implant

Python

224

15

snake

snake - a malware storage zoo

Shell

205

16

Jamf-Attack-Toolkit

Suite of tools to facilitate attacks against the Jamf macOS management platform.

Python

172

17

IAMSpy

Python

169

18

damn-vulnerable-llm-agent

Python

169

19

LinuxCatScale

Incident Response collection and processing scripts with automated reporting scripts

Shell

165

20

IceKube

Python

161

21

peas

PEAS is a Python 2 library and command line application for running commands on an ActiveSync server e.g. Microsoft Exchange.

Python

152

22

ppid-spoofing

Scripts for performing and detecting parent PID spoofing

PowerShell

127

23

detectree

Data visualization for blue teams

Svelte

123

24

GarbageMan

GarbageMan is a set of tools for analyzing .NET binaries through heap analysis.

C++

113

25

drozer-agent

The Android Agent for the Mercury Security Assessment Framework.

Java

111

26

doublepulsar-usermode-injector

A utility to use the usermode shellcode from the DOUBLEPULSAR payload to reflectively load an arbitrary DLL into another process, for use in testing detection techniques or other security research.

C

104

27

TickTock

C++

102

28

ModuleStomping

https://blog.f-secure.com/hiding-malicious-code-with-module-stomping/

C++

87

29

dotnet-gargoyle

A spiritual .NET equivalent to the Gargoyle memory scanning evasion technique

C#

50

30

cloud-wiki

A public cloud security knowledgebase - https://www.secwiki.cloud/

CSS

48

31

AMSIDetection

AMSI detection PoC

C#

29

32

tau-engine

A document tagging library

Rust

29

33

radare2-scripts

A collection of useful radare2 scripts!

Python

25

34

CVE-2021-25374_Samsung-Account-Access

This script can be used to gain access to a victim's Samsung Account if they have a specific version of Samsung Members installed on their Samsung Device, and if the victim's device is from the US or Korea region.

Python

22

35

ESFang

ESF modular ingestion tool for development and research.

Objective-C

18

36

macOSTriageCollectionScript

A triage data collection script for macOS

Shell

17

37

lazarus-sigma-rules

17

38

RemotePSpy

RemotePSpy provides live monitoring of remote PowerShell sessions, which is particularly useful for older (pre-5.0) versions of PowerShell which do not have comprehensive logging facilities built in.

Python

17

39

FLAIR

F-Secure Lightweight Acqusition for Incident Response (FLAIR)

Batchfile

16

40

mongo-rs

A higher-level wrapper on top of the official bson & mongodb crates.

Rust

15

41

llm-vulnerable-recruitment-app

An example vulnerable app that integrates an LLM

Python

12

42

volatility-plugins

Python

11

43

FixerUpper

A Burp extension to enable modification of FIX messages when relayed from MitM_Relay

Python

11

44

snake-core

snake-core - the real snake

Python

11

45

jdiesel

jdiesel fuels the drozer

Java

10

46

deject

Memory dump and Sample analysis tool

Python

8

47

memory-carving-scripts

Scripts for extracting useful information from infected memory dumps

PowerShell

7

48

shadowhammer

Tools related to 'shadowhammer' attack, https://securelist.com/operation-shadowhammer/89992

Python

7

49

keywe-tooling

Tools that can be used to interact with the KeyWe Smart Lock device.

Python

6

50

datamate

Python

6

51

usb-ninja-detection-poc

USB Ninja Detection PoC

C++

5

52

iocs

YARA

5

53

snake-scales

snake-scales - the default repository of snake scales

Python

4

54

dreamer

Easier cloud infrastructure with Terraform and Ansible

Python

4

55

snake-skin

snake-skin - the web ui for snake

Svelte

2

56

boops-boops-android-agent

Java

1

57

snake-tail

snake-tail - the command line ui for snake

Python

1

58

slide-decks

1

WithSecureLabs/Jandroid

WithSecureLabs

Reviews

Repository Details

jandroid

More Repositories