Open-source alternatives to OSXAuditor

Get the mac address of the current machine you are on via Node.js

Fast Incident Response

WIP Crappy iOS app analyzer

Traceroute improved wrapper for CSIRT and CERT operators

Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.

HELK is a containerized security information and event management environment and threat hunting platform. It provides a security-focused deployment of the ELK stack, combining Elasticsearch, Logstash, and Kibana into a specialized platform for investigating logs and discovering hidden patterns in network and system security data. The project functions as a security data science suite, integrating interactive computational notebooks and distributed processing tools to run machine learning and graph analytics on security logs. This allows for the identification of hidden attack patterns and an

快捷运维，代号kjyw，项目基于shell、python，运维脚本工具库，收集各类运维常用工具脚本，实现快速安装nginx、mysql、php、redis、nagios、运维经常使用的脚本等等...

Easy SSL pinning validation and reporting for iOS, macOS, tvOS and watchOS.

A Powershell incident response framework

Steal Net-NTLM Hash using Bad-PDF

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

This project is a comprehensive security hardening and privacy management guide for macOS. It provides a set of instructions and checklists for reducing the system attack surface through manual configuration, policy enforcement, and a layered defense strategy. The guide emphasizes a system auditing framework, using binary analysis, system logs, and packet inspection to verify that security controls and application sandboxing are functioning as intended. It offers tool-agnostic recommendations, defining security goals while allowing users to select their own third-party software for implementa

A cross-platform java application for decoding, monitoring, recording and streaming trunked mobile and related radio protocols using Software Defined Radios (SDR). Website:

Fishhook is a binary instrumentation library for iOS and iOS simulators. It functions as a Mach-O symbol rebinder and instrumenter, allowing for the replacement of system library implementations with custom logic at runtime. The project redirects function calls by updating lazy and non-lazy symbol pointers within Mach-O binary data segments. This approach enables the interception and modification of existing function behavior without altering the original binary on disk. The toolset covers binary instrumentation and dynamic hooking for iOS applications, facilitating the monitoring and altera

idb is a suite of tools for controlling and automating iOS simulators and physical devices. It consists of a command line interface, a simulator controller, and a bridge that provides access to internal system interfaces for automating features normally restricted to the graphical user interface. The project includes a remote target manager that enables the control of iOS devices and simulators across different machines or data centers using a companion host process. This system separates the command line interface from the process managing the actual device connection. The toolset provides

Osquery is an operating system instrumentation tool that treats system state as a relational database. It maps operating system telemetry and kernel data into virtual tables, allowing users to explore processes, hardware events, and performance data using standard SQL queries. The project provides a plugin and extensions API that enables the implementation of custom telemetry tables to monitor specific system concepts. It also includes a remote communication interface to exchange telemetry data and query results with external applications. The system supports scheduled monitoring to track op

Easily spoof your MAC address in macOS, Windows, & Linux!

FLEX is an in-app debugging tool and runtime exploration environment for iOS applications. It provides an integrated suite for inspecting and modifying the internal state of a running process without the use of an external debugger. The project includes a runtime inspector for browsing the memory heap and calling methods dynamically, alongside a view hierarchy debugger for visualizing and adjusting layout structures in real time. It features a network traffic monitor to log and analyze HTTP request history, headers, and responses, as well as a sandbox manager for viewing and editing files and

ios-webkit-debug-proxy is a command-line proxy that bridges Chrome DevTools to Safari Web Inspector on iOS devices, enabling remote debugging of web content over USB. It translates WebKit remote debugging protocol messages into Chrome DevTools Protocol over persistent WebSocket connections, allowing developers to use Chrome DevTools, Safari Web Inspector, or Firefox DevTools to inspect and debug web content in MobileSafari and UIWebViews on real and simulated iOS devices. The proxy discovers and communicates with iOS devices over USB using the libimobiledevice library without requiring iTunes

Stenographer is a packet capture solution which aims to quickly spool all packets to disk, then provide simple, fast access to subsets of those packets. Discussion/announcements at stenographer@googlegroups.com

Easily configure macOS security settings from the terminal.