Repository Index

Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.

• yubikey
• gpg
• gnupg
• ssh

Free cross-platform password manager compatible with KeePass

• keeweb
• keepass
• security
• password-manager

Database documentation built easy

• schemaspy
• java
• documentation
• database

CAUTION: END OF SUPPORT ON 14 AUG 2026. The 'jsrsasign' (RSA-Sign JavaScript Library) is an opensource free cryptography library supporting RSA/RSAPSS/ECDSA/DSA signing/validation, ASN.1, PKCS#1/5/8 private/public key, X.509 certificate, CRL, OCSP, CMS SignedData, TimeStamp, CAdES and JSON Web Signature/Token in pure JavaScript.

• asn1
• x509
• certificate
• crl

Windows Events Attack Samples

• threat-hunting
• evtx
• windows-security
• mitre-attack

The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.

• nodejs
• owasp-top-ten
• javascript
• docker

Malware samples, analysis exercises and other interesting resources.

• malware-samples
• trickbot
• pcaps
• lokibot

🛡️ Free open-source AI-powered security terminal & vulnerability scanner (CVE, SBOM). Supports SSH, SFTP, RDP, VNC, Serial, and 12+ autonomous AI agents (DeepSeek, OpenAI) for automated security workflows, CTF & DevSecOps. Cross-platform & Web UI.

• cve-scanner
• mcp-server
• mcp-tools
• osv

libsodium compiled to Webassembly and pure JavaScript, with convenient wrappers.

• libsodium
• javascript
• cryptography
• crypto

Tools and packages that are used for countering forensic activities, including encryption, steganography, and anything that modify attributes. This all includes tools to work with anything in general that makes changes to a system for the purposes of hiding information.

• awesome-list
• awesome
• anti-forensic
• anti-forensics

A collection of android Exploits and Hacks

• android
• android-architecture
• hacking
• exploit

Rails integration for Rodauth authentication framework

• rodauth
• authentication
• rails
• multifactor-authentication

🔪Browser logic vulnerabilities :skull_and_crossbones:

• security
• browser
• xss
• vulnerability

Documenting the unofficial and internal Steam Web API

• documentation
• docs
• wiki
• api-documentation

Django web application to store and manage vouchers, coupons, loyalty and gift cards digitally. Supports PWA, offline caching, expiry notifications, transaction histories, file uploads and OIDC SSO.

• coupons
• vouchers
• conventional-commits
• apprise

Drltrace is a library calls tracer for Windows and Linux applications.

• dbi
• malware-analysis
• malware-detection
• api-trace

The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups

• active-directory
• cheatsheet
• ctf
• cybersecurity

Cryptographic library for Embarcadero Delphi and potentially for FPC as well

• delphi
• key-deviation-algorithms
• cryptographic-checksums
• kdf1

OAuth 2.0 and OpenID Connect debugging tool

WebAppSec Content Security Policy

Apache Logfile Security Analyzer

Bot18 is a high-frequency cryptocurrency trading bot developed by Zenbot creator @carlos8f

• bitcoin
• btc
• ltc
• litecoin

Supply Chain Security Research - Living Off The Pipeline tools

• lotp
• supply-chain-security
• living-off-the-pipeline

A Python library and command line tools to provide interactive log visualization.

• cybersecurity
• investigation
• malware-analysis
• malware-research