Bashfuscator – The Art of Concealing Bash Scripts
Documentation What Is Bashfuscator? Bashfuscator is a modular and extendable Bash obfuscation framework written in Python 3. It provides numerous different ways of making Bash one-liners or scripts much more difficult to understand. It accomplishes this by generating convoluted, randomized Bash code that at runtime evaluates to the original input and executes it. Bashfuscator makes generating highly obfuscated Bash commands and...
Hacker’s SAT – A Collection of Resources for Budding SAT Hackers
A collection of Resources for budding SAT hackers (Satellites, not the test). Note: This is an evolving resource, so please contribute with a pull request Jump To: Web sites | Articles and Op-Eds | Tools and Projects | Videos | Books and White Papers | 2020 Write-Ups | Programming Libraries | Miscellaneous | Contacts Background The democratization of space has opened up a new frontier for exploration and innovation. But with this opportunity, new cybersecurity vulnerabilities are also being created. One human...
MapsDumper – A Guide To Extracting Google Maps Details
In today's data-driven world, extracting specific details from vast platforms like Google Maps can be crucial. MapsDumper is a powerful tool designed for this very purpose, enabling users to easily retrieve place details such as phone numbers, websites, and reviews. Dive into this guide to understand how MapsDumper works and how you can leverage it for your data-gathering needs. Demo • Installation • Feature • CreditsA...
GuardDuty Runbook Automator – Streamlined Security Responses
Create a runbook for all available GuardDuty finding types found on the GuardDuty docs website using the information documented for each finding. This project is a kick-start to generate a base set of runbooks when GuardDuty is enabled in an organization. Runbooks will need to be customized to fit organizational incident response procedures and add contextual information. Generating Runbooks This tool can be installed...
ProtINTelligence: Python-based ProtonMail OSINT Analyzer
In the vast landscape of cyber tools, "PROTINTELLIGENCE" stands out as a specialized Python script designed for the OSINT and Cyber Community. This powerful tool, tailored for domain analysis, aims to unveil the intricate relationship between custom domains and Protonmail, a widely acknowledged encrypted email service. From detecting Protonmail usage to diving deep into PGP key intricacies, PROTINTELLIGENCE serves...
DEEPCE – Docker’s Ultimate Security Toolkit
Tailored for professionals who seek to elevate their Docker container security game, this powerful suite offers advanced enumeration, privilege escalation, and container escape functionalities. Designed with utmost compatibility in mind, DEEPCE operates in pure sh, ensuring it seamlessly integrates into any container environment. ...
MQTT Security: Securing IoT Communications
MQTT stands for Message Queuing Telemetry Transport. It is a machine-to-machine (M2M) connectivity protocol designed specifically for the Internet of Things (IoT). It enables the efficient and reliable transmission of data between devices, even in environments with limited network capabilities. MQTT uses a publisher-subscriber model, which is different from the traditional client-server model. In this model, devices (publishers) send...
DorXNG – Advanced OSINT via Meta-Search & Tor
DorXNG is a modern solution for harvesting OSINT data using advanced search engine operators through multiple upstream search providers. On the backend, it leverages a purpose-built containerized image of SearXNG, a self-hosted, hackable, privacy-focused meta-search engine. Our SearXNG implementation routes all search queries over the Tor network while refreshing circuits every ten seconds with Tor's MaxCircuitDirtiness configuration directive. Researchers have also disabled all of SearXNG's client-side timeout...
ICMPWatch – Advanced Sniffing & Analysis of ICMP Packets
ICMP Packet Sniffer is a Python program that allows you to capture and analyze ICMP (Internet Control Message Protocol) packets on a network interface. It provides detailed information about the captured packets, including source and destination IP addresses, MAC addresses, ICMP type, payload data, and more. The program can also store the captured packets in a SQLite database and save them...
PowerToys Run’s Quick Lookup Plugin
This plugin for PowerToys Run allows you to quickly search for an IP address, domain name, hash, or any other data point in a list of Cyber Security tools. It's perfect for security analysts, penetration testers, or anyone else who needs to quickly look up information when investigating artifacts or alerts. Installation To install the plugin: Navigate to your Powertoys Run Plugin folder For a...