withsecurelabs Goto Github PK

amsidetection

AMSI detection PoC

android-keystore-audit

awspx

A graph-based tool for visualizing effective access and resource relationships in AWS environments.

azure-service-tag-abuse

Scripts and other content to go with Aled Mehta's talk "Tag You're Exposed" at DEF CON Cloud Village 2023

bitlocker-spi-toolkit

Tools for decoding TPM SPI transaction and extracting the BitLocker key from them.

boops-boops-android-agent

boops-boops-docker-container

c3

Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.

callstackspoofer

A PoC implementation for spoofing arbitrary call stacks when making sys calls (e.g. grabbing a handle via NtOpenProcess)

captcha22

CAPTCHA22 is a toolset for building, and training, CAPTCHA cracking models using neural networks.

chainsaw

Rapidly Search and Hunt through Windows Forensic Artefacts

cloud-wiki

A public cloud security knowledgebase - https://www.secwiki.cloud/

cue-covid-test_research-files

cve-2021-25374_samsung-account-access

This script can be used to gain access to a victim's Samsung Account if they have a specific version of Samsung Members installed on their Samsung Device, and if the victim's device is from the US or Korea region.

damn-vulnerable-llm-agent

datamate

deject

detectree

Data visualization for blue teams

dotnet-gargoyle

A spiritual .NET equivalent to the Gargoyle memory scanning evasion technique

doublepulsar-c2-traffic-decryptor

A python2 script for processing a PCAP file to decrypt C2 traffic sent to DOUBLEPULSAR implant

doublepulsar-detection-script

A python2 script for sweeping a network to find windows systems compromised with the DOUBLEPULSAR implant.

doublepulsar-usermode-injector

A utility to use the usermode shellcode from the DOUBLEPULSAR payload to reflectively load an arbitrary DLL into another process, for use in testing detection techniques or other security research.

dreamer

Easier cloud infrastructure with Terraform and Ansible

drozer

The Leading Security Assessment Framework for Android.

drozer-agent

The Android Agent for the Drozer Security Assessment Framework.

drozer-modules

esfang

ESF modular ingestion tool for development and research.

fixerupper

A Burp extension to enable modification of FIX messages when relayed from MitM_Relay

flair

F-Secure Lightweight Acqusition for Incident Response (FLAIR)

freezer

Rust implementation of IceKube download functionality