Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
- anti-bot
- behavioral-analysis
- bot-detection
- captcha
Django application that performs SAST and Malware Analysis for Android APKs
A framework for the JOSE standards JWS, JWE, and JWK written in Swift.
🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.
The fastest communications possible. Delphi rulez.
- delphi
- object-pascal
- tcp-ip
- fast-networking
Merge multiple pcap files together, gracefully.
- pcap
- merge
- tcpdump-capture
- packet-processing
A Java library that implements a ByteChannel interface over SSLEngine, enabling easy-to-use (socket-like) TLS for Java applications.
Chiron - An IPv6 Security Assessment framework with advanced IPv6 Extension Headers manipulation capabilities.
Android Framework for Exploitation, is a framework for exploiting android based devices
gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that you can join on Google Groups: https://groups.google.com/forum/#!topic/gonids/
A Highly Accessible and Automated Virtualization Platform for Security Education
A malware/botnet analysis framework written in Ruby.
PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE
Delphi debug framework
- debug
- stacktrace
- disassembler
- portable-executable
Watchtower | Self-hosted AI security assessment, asset intelligence, and evidence workflows.
Suricata rules for network anomaly detection
- suricata-rule
- suricata
- ids
- nsm
:mailbox: The Phishing Intelligence Engine - An Active Defense PowerShell Framework for Phishing Defense with Office 365
Routopsy - Hacking Routers with Routers
🔍A cutting edge context aware GraphQL API fuzzing tool!
The Redexer binary instrumentation framework for Dalvik bytecode
- dex
- dynamic-analysis
- bytecode-manipulation
- dalvik
Deploy a Cloudflare Worker to sanely score users' new passwords with zxcvbn AND check for matches against haveibeenpwned's 10+ billion breached accounts
quick and dirty canbus h4xing framework
- automotive-security
- canbus
- car-hacking
A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.
Harden Your Security Headers For Vapor