Open Source Frameworks

A free/libre toolchain for easing several low-level tasks like forensics, software reverse engineering, exploiting, and debugging. It is composed by a bunch of libraries (which are extended with plugins) and programs that can be automated with almost any programming language. It is recommended to install it from git, alternatively, you can pick the last release (every 6 weeks) from Github. Batch, Commandline, visual, and panels interactive modes. Embedded webserver with js scripting and WebUI. Assemble and disassemble a large list of CPUs. Runs on Windows and any other UNIX flavor out there. Analyze and emulate code with ESIL. Native debugger and GDB, WINDBG, QNX, and FRIDA. Navigate ASCII-art control flow graphs. Ability to patch binaries, and modify code or data. Search for patterns, magic headers, and function signatures. Easy to extend and modify. Commandline, C API, script with r2pipe in any language.

Pty is a Go package for using unix pseudo-terminals. Note that the examples are for demonstration purpose only, to showcase how to use the library. They are not meant to be used in any kind of production environment. Start assigns a pseudo-terminal tty os.File to c.Stdin, c.Stdout, and c.Stderr, calls c.Start, and returns the File of the tty's corresponding pty. InheritSize applies the terminal size of pty to tty. This should be run in a signal handler for syscall.SIGWINCH to automatically resize the tty when the pty receives a window size change notification.

Teller is a productivity secret manager for developers supporting cloud-native apps and multiple cloud providers. Mix and match all vaults and other key stores and safely use secrets as you code, test, and build applications. It's quick, easy, and safe. Never leave your command line for secrets. Create a simple configuration for mixing any number of vaults and key stores using your cloud-native clusters or traditional cloud providers. Teller is open source and secure by-design. It also helps maintain great secrets hygiene and prevents secret sprawl. Avoid custom scripts and unapproved 3rd parties. Use your CISO/infosec-approved vaults, and help keep company policies. Using Teller helps keep a healthy posture. When you have an easy way to use secrets, you don’t stick’em in code or in various funny configs. Teller is completely open source and transparent at what it does. You can also add your own providers.

Picocli is a one-file framework for creating Java command-line applications with almost zero code. It supports a variety of command-line syntax styles including POSIX, GNU, MS-DOS and more. It generates highly customizable usage help messages that use ANSI colors and styles to contrast important elements and reduce the cognitive load on the user. Picocli-based applications can have command line TAB completion showing available options, option parameters, and subcommands, for any level of nested subcommands. Picocli-based applications can be ahead-of-time compiled to a GraalVM native image, with extremely fast startup time and lower memory requirements, which can be distributed as a single executable file. Picocli generates beautiful documentation for your application (HTML, PDF and Unix man pages). Another distinguishing feature of picocli is how it aims to let users run picocli-based applications without requiring picocli as an external dependency.

The JWA library aims to provide a conversion from C to Delphi of as many headers as possible from the PSDK etc. The JWSCL (security library) is an advanced object-oriented framework for programming with the Windows security features (ACL, Tokens, etc.)

WidgetTerm is a terminal Dashboard Widget for Mac OS X 10.4 or above. This widget implements the terminal function through the Web Kit Plug-in in Objective-C powered by iTerm's open source terminal implementation.

Ubuntu Server 16.10 LTS 32bit. Image for virtual machines (file format -VHD). Image should run in VirtualBox or VMware. The image was made especially for web developers. Fast start for any web project, and different frameworks or CMS. It was installed include: - xorg and Window Maker; - PHP7 and libraries; - PhpMyAdmin and MySQL 5.7 (server and client); - Nginx (no Apache); - Composer (global); - Exim4; - Mozilla Firefox; - xterm; - OpenSSH Server. Login: user Password: user

RMX is a modular automation system supporting system events and human interface events.

A full-featured framework for building command-line applications (CLI) with node.js, including help generation, colored output, verbosity control, custom logger, coercion and casting, typos suggestions, and auto-complete for bash/zsh/fish.

IFP (ISPF for Python) is a console based full screen text user interface and API based on IBM's ISFP.

Intronet is a light weighted framework which allows user to work with remote Linux system and to do some administration tasks using web browser. It's fully usable in browsers at mobile devices such pda, modern cell phones, etc.

A high-performance, fully extensible, RFC 854 Telnet client library and framework. Use it as a stand-alone end user client (making use of the JTerminal Swing component), or use the event-based API to automate host interactions. Supports VT100 TN3270

NimpSmartCard is a framework to interact with smart cards through PC/SC readers as well as test/production readers such as Micropross and Smartware. The framework comes with sample tasks and a sample terminal manager which supports scripts and logs

SharPyShell is a tiny and obfuscated ASP.NET web shell that executes commands received by an encrypted channel compiling them in memory at runtime. SharPyShell supports only C# web applications that run on .NET Framework >= 2.0. SharPyShell is a post-exploitation framework written in Python. The main aim of this framework is to provide the penetration tester with a series of tools to ease the post-exploitation phase once exploitation has been successful against an IIS webserver. This tool is not intended as a replacement for the frameworks for C2 Server (i.e. Meterpreter, Empire, etc..) but this should be used when you land on a fully restricted server where inbound and outbound connections are very limited. In this framework, you will have all the tools needed to privesc, net discovery, and lateral movement as you are typing behind the cmd of the target server.

C library which allows to easily setup a VT52/VT100/ANSI/ECMA048/AVATAR telnet server. Can handle multiple clients with a simple API, main features: minimal bandwidth consumption, optimized network architecture, console color support.

javautilcmdline /javautil is a reusable Java library for common programming tasks, such as String, File, RegEx (Regular Expressions), Array manipulation, etc. The package also contains command line tools that mimic many Unix commands.

oclif is an open-source framework for building a command-line interface (CLI) in Node.js. Create CLIs with a few flags or advanced CLIs that have subcommands. oclif makes it easy for you to build CLIs for your company, service, or your own development needs. Scaffold a fully functional CLI to get started quickly. oclif packages our years of experience into out-of-the-box functionality for argument parsing, command testing, and auto-documentation of CLI features. oclif is open source and free to use or modify. We think you’ll love it too and you can also help make it better. You or your users can easily extend your CLI functionality to meet customer needs using plugins. Plugins are modular and shareable, encouraging reuse. oclif is actively used to build the Heroku and Salesforce CLIs, powering millions of interactions for developers every day. With oclif you can build command-line tools for your business, open-source project, or your own development workflow.