A list of awesome security tools
Tool: freq - tool to detect DGA hostnames used by malware
Repo: https://github.com/MarkBaggett/freq
Tool: streamingphish - uses supervised machine learning to detect phishing domains from the certificate transparency log
Repo: https://github.com/wesleyraptor/streamingphish
Tool: DoNotDisturb - Notifies on "evil maid" physical attacks, by Objective-See
URL: https://objective-see.com/products/dnd.html
Repo: https://github.com/objective-see/DoNotDisturb
See DoNotDisturb under "Intrusion detection"
Tool: GreyNoise Visualizer - online IP reputation lookup
URL: https://viz.greynoise.io/ip
Tool: List of PHP static code analysis tools, by exacat
Repo: https://github.com/exakat/php-static-analysis-tools
Tool: Stop. Think. Connect. Toolkit - material for a wide range of audiences by US DHS
URL: https://www.dhs.gov/stopthinkconnect-toolkit
Tool: Deadpool - Repository of various public white-box cryptographic implementations and their practical attacks.
Repo: https://github.com/SideChannelMarvels/Deadpool
Tool: EvilAbigail - Automated Linux "evil maid" attack by @GDSSecurity
Repo: https://github.com/GDSSecurity/EvilAbigail
Tool: P4wnP1 - USB attack platform based on Pi Zero or Pi Zero W, Windows targets
URL: http://p4wnp1.readthedocs.io/en/latest/
Repo: https://github.com/mame82/P4wnP1
Tool: censys - Public search engine for results of ZMAP scans across the public Internet
URL: https://censys.io
Ref: https://www.censys.io/overview
Tool: OSINT Toolkit - collection of tools for searching public data stores/social media
URL: https://osinttoolkit.github.io
Repo: https://github.com/OSINTToolkit/OSINTToolkit.github.io
Tool: Shodan URL: https://www.shodan.io/dashboard Ref: https://help.shodan.io/
Tool: HORSEPILL - PoC Linux initrd infector that containerises the OS, by Michael Leibowitz (@r00tkillah)
URL: http://www.pill.horse/
Repo: https://github.com/r00tkillah/HORSEPILL
Ref: https://www.blackhat.com/docs/us-16/materials/us-16-Leibowitz-Horse-Pill-A-New-Type-Of-Linux-Rootkit.pdf
Site: https://apwg.org - Anti Phishing Working Group, lots of anti phishing information and resources
Site: https://bazaar.abuse.ch - Malware Bazaar by SpamHaus. Search by hash or tag
Site: https://app.any.run - Malware Sandbox, use the "Reports" area to find malware by hash or tag
Site: https://vx-underground.org/Samples - Malware samples provided by vx-underground