Security Framework

Metasploit FrameworkRuby

An open-source penetration testing framework for developing and executing exploit code against remote targets.

Metasploit JavaScript ObfuscatorRuby

An open-source penetration testing framework for developing and executing exploit code against remote targets.

beefJavaScript

A penetration testing framework that exploits web browsers as beachheads for client-side attacks.

PowerShellEmpirePowerShell

A post-exploitation framework with PowerShell and Python agents for security testing and red team operations.

empirePowerShell

A post-exploitation framework with PowerShell and Python agents for cryptographically secure communications and flexible modules.

CalderaPython

An automated cyber security platform for adversary emulation, red teaming, and incident response built on the MITRE ATT&CK framework.

OWASP MASVSPython

The OWASP Mobile Application Security Verification Standard (MASVS) is the industry standard for mobile app security.

KansaPowerShell

A modular PowerShell framework for enterprise incident response and breach hunting using remote data collection.

Common Threat Matrix for CI/CD Pipeline

An ATT&CK-like threat matrix mapping adversary tactics and techniques specific to CI/CD pipeline security.

Software Assurance Maturity ModelJavaScript

A framework to help organizations formulate and implement a strategy for software security tailored to their specific risks.

HeimdallSwift

A Swift wrapper around iOS Security framework for RSA/AES encryption, decryption, signing, and keychain key-pair management.

in-totoGo

A Go implementation of the in-toto framework for protecting software supply chain integrity through cryptographic verification.