Repository Index

Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS

• aws
• cloud
• security
• big-data

The best way to build Electron apps with security in mind.

• electron
• security
• template
• react

🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥

• hash
• infosec
• cyber
• security

Interactive CTF Exploration Tool

• security
• reverse-engineering
• windows
• windows-internals

One rule to crack all passwords. or atleast we hope so.

ICS/SCADA honeypot

• honeypot
• scada
• ics
• python

GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.

• digital-human-rights
• anonymity
• security
• python

Elastic Security detection content for Endpoint

UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.

• incident-response
• forensics
• computer-forensics
• triage

Secure Vault for Customer PII/PHI/PCI/KYC Records

• gdpr
• pii
• piidata
• security

Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.

• encryption-server
• encryption
• crypto
• cryptography

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

• tokenization
• web-security
• compliance
• security

Security Tool to Look For Interesting Files in S3 Buckets

• s3-bucket
• penetration-testing
• bugbounty
• enumeration

BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.

• security
• yara
• serverless
• terraform

A multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks.

• rust
• security
• security-tools
• pdf

ThePhish: an automated phishing email analysis tool

• email
• detection
• malware
• phishing

A utility to safely generate malicious network traffic patterns and evaluate controls.

• security
• testing-tools
• monitoring
• intrusion-detection

cwe_checker finds vulnerable patterns in binary executables

• cwe
• binary-analysis
• static-analyzer
• vulnerability-scanner

Bloodhound Reporting for Blue and Purple Teams

• active
• directory
• blueteam
• purpleteam

Advanced Honeypot framework.

• honeypot
• framework
• security

RSA public/private key encryption in Swift

• swift
• ios
• encryption
• rsa

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.

• github-actions
• actions
• supply-chain-security
• hardening

Some public notes

• nodejs
• security
• npm
• travis-ci

A modular vulnerability scanner with automatic report generation capabilities.

• artemis
• pentesting
• security
• security-scanner