/~https://github.com/actions/virtual-environments
security and data integrity tool for monitoring and alerting on file & directory changes.
/~https://github.com/Tripwire/tripwire-open-source
An extensively configurable tool providing a summary of the changes between two files or directories
/~https://github.com/airbus-seclab/diffware
In-depth comparison of files, archives, and directories
https://diffoscope.org/
Net2PCAP is a simple network-to-pcap capture file for Linux
/~https://github.com/nbareil/net2pcap
Hetty is an HTTP toolkit for security research
/~https://github.com/dstotijn/hetty
the Python-based interactive packet manipulation program & library. Supports Python 2 & Python 3
/~https://github.com/secdev/scapy
Toolbox for HPE iLO4 & iLO5 analysis
/~https://github.com/airbus-seclab/ilo4_toolbox
NAT-aware multipath tracerouting tool
/~https://github.com/insomniacslk/dublin-traceroute
Burp Suite Community Edition,manual tools for exploring web security. Proxy your HTTPS traffic, edit and repeat requests, decode data
https://portswigger.net/burp/communitydownload
Ruby command-line interface to Burp Suite's REST API
/~https://github.com/pentestgeek/burpcommander
Burp Commander written in Go
/~https://github.com/joanbono/Gurp
Burp Automator - A Burp Suite Automation Tool.Dynamic Application Security Testing (DAST)
/~https://github.com/tristanlatr/burpa
A collection of scripts used to interact with the Burp Rest API
/~https://github.com/laconicwolf/Burp-API-Scripts
obfuscated meterpreter shells
/~https://github.com/smokeme/payloadGenerator
Binary code static analyser, with IDA integration
/~https://github.com/airbus-seclab/bincat
cpu_rec is a tool that recognizes cpu instructions in an arbitrary binary file. It can be used as a standalone tool, or as a plugin for binwalk
/~https://github.com/airbus-seclab/cpu_rec
Firmware Analysis Tool
/~https://github.com/ReFirmLabs/binwalk
Firmware Analysis and Comparison Tool
/~https://github.com/fkie-cad/FACT_core
vulnerabilities in hypervisors
American fuzzy lop is a security-oriented fuzzer that employs a novel type of compile-time instrumentation and genetic algorithms to automatically discover clean, interesting test cases that trigger new internal states in the targeted binary.
https://lcamtuf.coredump.cx/afl/
GUSTAVE is a fuzzing platform for embedded OS kernels. It is based on QEMU and AFL (and all of its forkserver siblings). It allows to fuzz OS kernels like simple applications
/~https://github.com/airbus-seclab/gustave
a bare metal (type 1) VMM (hypervisor) with a python remote control API
/~https://github.com/airbus-seclab/ramooflax
/~https://github.com/airbus-seclab/ramooflax_scripts
/~https://github.com/airbus-seclab/AppVsWild
A tool dedicated to the research of vulnerabilities in hypervisors by creating unusual system configurations.
/~https://github.com/airbus-seclab/crashos
CollabFuzz: A Framework for Collaborative Fuzzing
/~https://github.com/vusec/collabfuzz
a free and open source tool for investigating the Dark Web
/~https://github.com/s-rah/onionscan
Extract accounts info from personal pages on various sites for OSINT purpose
/~https://github.com/soxoj/socid-extractor
GitHub Recon
/~https://github.com/TheBinitGhimire/GitHub-Recon
C2/post-exploitation framework
/~https://github.com/loseys/BlackMamba
secures secrets used by privileged users and machine identities
/~https://github.com/cyberark/conjur
The Secure Production Identity Framework For Everyone (SPIFFE) Project defines a framework and set of standards for identifying and securing communications between application services
/~https://github.com/spiffe/spiffe
Simple and flexible tool for managing secrets
/~https://github.com/mozilla/sops
KSOPS - A Flexible Kustomize Plugin for SOPS Encrypted Resources
/~https://github.com/viaduct-ai/kustomize-sops
GitHub’s official command line tool
/~https://github.com/cli/cli
Docker
HTTP Desync Attack
/~https://github.com/o-o-overflow/dc2020q-uploooadit
A production ready example Django app that's using Docker and Docker Compose
/~https://github.com/nickjj/docker-django-example
k8s
/~https://github.com/vfarcic/skaffold-demo
CVE
Proof of Concept Exploit for vCenter CVE-2021-21972
/~https://github.com/horizon3ai/CVE-2021-21972
AI
PyTorch package for the discrete VAE used for DALL·E
/~https://github.com/openai/DALL-E
DALL·E: Creating Images from Text
https://openai.com/blog/dall-e/
OpenAI Baselines: high-quality implementations of reinforcement learning algorithms
/~https://github.com/openai/baselines
A Deep Learning based project for colorizing and restoring old images (and video!)
/~https://github.com/jantic/DeOldify
Perceptual Similarity Metric and Dataset
/~https://github.com/richzhang/PerceptualSimilarity
Storage
The Ceph File System, or CephFS
/~https://github.com/CCI-MOC/cephfs-provisioner-example
Network Automation
Network Source of Truth & Network Automation Platform
/~https://github.com/nautobot/nautobot
Nornir plugin to enable other Nautobot network automation plugins
/~https://github.com/nautobot/nautobot-plugin-nornir
Pluggable multi-threaded framework with inventory management to help operate collections of devices
/~https://github.com/nornir-automation/nornir
Android
Mobile application testing toolkit
/~https://github.com/nettitude/scrounger
AWS/Azure/GCP/Cloud
Serverless honeytoken
/~https://github.com/3CORESec/Trapdoor
Cloud Pentesting
/~https://github.com/TROUBLE-1/Cloud-Pentesting
log analytics,SIEM
ship data to ELK, Graylog, Loggly or some other SIEM
supports TCP and TLS based network transport and message buffering
common data sources such as the Windows Eventlog, flat files and syslog
parse and generate CSV, W3C, GELF, JSON, XML and KVP formats
https://nxlog.co/products/nxlog-community-edition
Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent dedicated for containerized environments written in Golang
/~https://github.com/cyberark/kubesploit
Merlin is a cross-platform post-exploitation Command & Control server and agent written in Go.
/~https://github.com/Ne0nd0g/merlin
Cobalt Strike Python API
/~https://github.com/dcsync/pycobalt
Python tool to explore PDF files
/~https://github.com/jesparza/peepdf
cuckoo
/~https://github.com/cuckoosandbox/cuckoo
https://cuckoosandbox.org/
Volatility 3: The volatile memory extraction framework
/~https://github.com/volatilityfoundation/volatility3