47,133 repositories indexed
1–24 of 34 · Most stars
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Incredibly fast crawler designed for OSINT.
Expose your FastAPI endpoints as Model Context Protocol (MCP) tools, with Auth!
Main Sigma Rule Repository
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
The repository host gives no description.
Repository for BLESS, an SSH Certificate Authority that runs as a AWS Lambda function
Automated Security Testing For REST API's
IAM Least Privilege Policy Generator
Tool to scan for secret files on HTTP servers
Kippo - SSH Honeypot
Automated Red Team Infrastructure deployement using Docker
Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).
30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)
The last Micro Web Server for IoTs (MicroPython) or large servers (CPython), that supports WebSockets, routes, template engine and with really optimized architecture (mem allocations, async I/Os). Ready for ESP32, STM32 on Pyboard, Pycom's chipsets (WiPy, LoPy, ...). Robust, efficient and documented!
Web Application Honeypot
We took PersistenceSniper, merged it with Python, and misspelled it on purpose. Meet PyrsistenceSniper.
An easy, fast lib to correctly password-protect your data
Collecting & Hunting for IOCs with gusto and style
🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️
Django application that performs SAST and Malware Analysis for Android APKs
HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy + Exploit Timing Attacks
High-Fidelity AI-Assisted Deterministic Reverse Engineering FastMCP Server
Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.