Repository Index

ThePhish: an automated phishing email analysis tool

• email
• detection
• malware
• phishing

A utility to safely generate malicious network traffic patterns and evaluate controls.

• security
• testing-tools
• monitoring
• intrusion-detection

cwe_checker finds vulnerable patterns in binary executables

• cwe
• binary-analysis
• static-analyzer
• vulnerability-scanner

Advanced Honeypot framework.

• honeypot
• framework
• security

RSA public/private key encryption in Swift

• swift
• ios
• encryption
• rsa

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.

• github-actions
• actions
• supply-chain-security
• hardening

Some public notes

• nodejs
• security
• npm
• travis-ci

A modular vulnerability scanner with automatic report generation capabilities.

• artemis
• pentesting
• security
• security-scanner

🍯 Unobtrusive and flexible spam protection for Rails apps

• honeypot
• rails
• anti-spam
• captcha

A collection of practical security-focused guides and checklists for smart contract development

• crypto
• security
• security-tools
• smart-contracts

npm package for OpenID Connect, OAuth Code Flow with PKCE, Refresh tokens, Implicit Flow

• openid
• angular
• implicit-flow
• npm

Software Supply Chain Transparency Log

• supply-chain
• provenance
• security
• transparency-log

Custom & better AppArmor profile generator for Docker containers.

• docker
• apparmor-profile
• apparmor
• containers

:rocket: An open source alternative to searx which provides a modern-looking :sparkles:, lightning-fast :zap:, privacy respecting :disguised_face:, secure :lock: meta search engine

• meta-search-engine
• rust
• search-engine
• fast

Package gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services 🔒

• csrf-protection
• gorilla
• middleware
• golang

PE Tools - Portable executable (PE) manipulation toolkit

• pefile
• hex-editor
• disassembler
• entropy

Lightweight Certificate Transparency Log Monitor

• certificate-transparency
• pki
• x509
• security

Program to reverse Docker images into Dockerfiles

• security-tools
• security
• docker-security
• reverse-engineering

Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.

• digital-security
• forensics
• incident-response
• ioc

PHP library for Two Factor Authentication (TFA / 2FA)

• qrcode
• php
• two-factor
• twofactorauth

A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis

• mobile-security
• android
• malware-analyzer
• penetration-testing

A pure Python HTML5 parser that just works. No C extensions to compile. No system dependencies to install. No complex API to learn.

• html5
• parser
• python
• html

A static analyzer for PE executables.

• malware
• static
• analysis
• pe

An information security preparedness tool to do adversarial simulation.

• uber
• vagrant
• yaml
• celery