Repository Index

Defensomania is a security monitoring and incident response card game.

• incident-response
• self-assessment
• incident-response-readiness
• educational-game

Control Flow Graph Scanning for Android

Find which of your direct GitHub dependencies is susceptible to RepoJacking attacks

• golang
• go
• supply-chain
• security

Mimicry is a dynamic deception tool that actively deceives an attacker during exploitation and post-exploitation.

• backdoor
• honeypot
• incident-response
• security

Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies on file access, network operations, and process execution.

• bpf
• ebpf
• kernel
• linux

A low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability.

• security
• security-tools
• vulnerability
• honeypot

A CakePHP plugin which allows you to authenticate using social providers like Facebook/Google/Twitter.

• cakephp-plugin
• social-providers
• middleware
• php

Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.

• bpf
• ebpf
• forensics
• golang

:ghost: :flashlight: Invisible JS code execution & social engineering.

Example repository for GitHub Actions Time of Check to Time of Use (TOCTOU vulnerabilities)

• actions
• bugbounty
• cicd

Micropython package for doing fast rsa and elliptic curve cryptography, specifically digital signatures

• cryptography
• elliptic-curves
• micropython
• rsa

HElib is an open-source software library that implements homomorphic encryption. It supports the BGV scheme with bootstrapping and the Approximate Number CKKS scheme. HElib also includes optimizations for efficient homomorphic evaluation, focusing on effective use of ciphertext packing techniques and on the Gentry-Halevi-Smart optimizations.

Fast incident overview

Android Malware Behavior Deleter

• android
• malware
• antivirus
• editor

stacked authentication policies for pyramid

Traceroute improved wrapper for CSIRT and CERT operators

PowerSponse is a PowerShell module focused on targeted containment and remediation during incident response.

• powershell
• powershell-modules
• incident-response
• containment

Convert MacOS plist password file to hash file for password crackers

• hashcat
• plist
• osx
• mac

Real-time secret-leak guardrails for AI coding agents (Claude Code, Codex), Git hooks, and CI.

• ai-agents
• claude-code
• claude-code-plugin
• codex

Coherence is cryptographic server for modern web apps

• crytography
• tcp-server
• json
• hash

Simple Docker Honeypot server emulating small snippets of the Docker HTTP API

Client-side AES-256-GCM zero-knowledge encryption library. Browser-native Web Crypto API, no dependencies. Powers FileShot.io.

• aes-256
• aes-256-gcm
• browser-encryption
• client-side-encryption

Ciao is an easy-to-use Common Lisp OAuth 2.0 client library. It is a port of the Racket OAuth 2.0 Client (package: webapi) to Common Lisp.

• common-lisp
• oauth2-client
• oauth2

A simple many-rules to many-files YARA scanner for incident response or malware zoos.

• yara
• yara-scanner
• incident-response
• dfir