Customizable Linux Persistence Tool for Security Research and Detection Engineering.
Repository Index
47,133 repositories indexed
217–240 of 489 · Most stars
A framework for layer 2 attacks
StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
- bugbounty
- security
- security-tools
- mobile-security
ebpfkit is a rootkit powered by eBPF
PHP package built for Laravel to easily handle a user email verification and validate the email
- laravel
- user-verification
- email-verification
- user-validation
Small package to allow adding security headers to ASP.NET Core websites
- hacktoberfest
Dynamic unpacker based on PE-sieve
- libpeconv
- pe-sieve
- memory-forensics
- malware-unpacker
The AI Agent for Cyber Security.
- ai-agent
- ai-security
- appsec
- bug-bounty
Automatic and platform-independent unpacker for Windows binaries based on emulation
- reverse-engineering
- unpacker
- pefile
- windows
Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteur réseau temps réel + pare-feu sortant, agent de flotte Rust, exports SIEM. 100 % local.
Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
- pentesting
- security
- chrome-extension
- api-keys
🚀 Useful README.md, LICENSE, CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, GitHub Issues, Pull Requests and Actions templates to jumpstart your projects.
- readme
- documentation
- docs
- docs-generator
Security Auditor Utility for GraphQL APIs
eXtended Keccak Code Package
List DTDs and generate XXE payloads using those local DTDs.
- xxe
- dtd
- security
- hacktoberfest
A mostly-serverless distributed hash cracking platform
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
Documenting the unofficial and internal Steam Web API
GUI frontend to John the Ripper password cracker
Tiny hashing module that uses the native crypto API in Node.js and the browser
An opinionated production-ready SQL-/Swagger-first RESTful JSON API written in Go, highly integrated with VSCode DevContainers by allaboutapps.
- golang-development
- vscode-devcontainers
- golang
- go
Automated Attack Simulation in the Cloud, complete with detection use cases.
🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️