Repository Index

A .NET implementation of TOTP and HOTP for things like two-factor authentication codes.

• otp
• totp
• two-factor-authentication
• 2fa

Noriben - Portable, Simple, Malware Analysis Sandbox

The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.

• csrf
• crawler
• csrf-attacks
• token-generation

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.

• github-actions
• actions
• supply-chain-security
• hardening

Automated Red Team Infrastructure deployement using Docker

• offensive
• pentest
• bugbounty
• hacking

A collection of practical security-focused guides and checklists for smart contract development

• crypto
• security
• security-tools
• smart-contracts

Collection of android malware samples

npm package for OpenID Connect, OAuth Code Flow with PKCE, Refresh tokens, Implicit Flow

• openid
• angular
• implicit-flow
• npm

Software Supply Chain Transparency Log

• supply-chain
• provenance
• security
• transparency-log

Package gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services 🔒

• csrf-protection
• gorilla
• middleware
• golang

Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.

• digital-security
• forensics
• incident-response
• ioc

A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis

• mobile-security
• android
• malware-analyzer
• penetration-testing

A Laravel 5.8 API Boilerplate to create a ready-to-use REST API in seconds.

• laravel
• api
• rest
• jwt

HellPot is a cross-platform portal to endless suffering meant to punish unruly HTTP bots.

• honeypot
• http
• web
• deception

A pure Python HTML5 parser that just works. No C extensions to compile. No system dependencies to install. No complex API to learn.

• html5
• parser
• python
• html

TranslatedA lightweight DDD forward/reverse business modeling framework that supports the architectural evolution of complex business systems!

• ddd
• extension
• ddd-architecture
• clean-architecture

An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction

• crypto
• cryptography
• encryption
• security

Laravel Ban simplify blocking and banning Eloquent models.

• laravel
• eloquent
• cog
• trait

Protect against malicious open source packages 🤖

• devsecops
• security
• supply-chain-security
• policy-as-code

A Rust implementation of the Noise Protocol Framework

• cryptography
• crypto
• noise-protocol-framework
• noise-protocol

SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.

• sip
• voip
• password-cracker
• svwar

Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.

A simple, semantic and developer-friendly crypto package for golang

• aes
• rsa
• des
• 3des

Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.

• cve-scanning
• pentesting-tools
• rust
• vulnerability-scanners