PHP library for Two Factor Authentication (TFA / 2FA)
- qrcode
- php
- two-factor
- twofactorauth
Repository Index
47,133 repositories indexed
217–240 of 543 · Most stars
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
- mobile-security
- android
- malware-analyzer
- penetration-testing
A pure Python HTML5 parser that just works. No C extensions to compile. No system dependencies to install. No complex API to learn.
An information security preparedness tool to do adversarial simulation.
- uber
- vagrant
- yaml
- celery
IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
- cybersecurity
- threat
- ioc
- malware
An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction
A Game of Hackers (CTF Scoreboard & Game Manager)
AVML - Acquire Volatile Memory for Linux
- rust
- memory-forensics
- linux-security
Encrypt/Decrypt: AES. Hash: MD5, SHA(SHA1, SHA224, SHA256, SHA384, SHA512). Encode/Decode: Base64, Hex.
Laravel Ban simplify blocking and banning Eloquent models.
- laravel
- eloquent
- cog
- trait
Protect against malicious open source packages 🤖
A Rust implementation of the Noise Protocol Framework
- cryptography
- crypto
- noise-protocol-framework
- noise-protocol
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
- sip
- voip
- password-cracker
- svwar
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
- cve-scanning
- pentesting-tools
- rust
- vulnerability-scanners
Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).
Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.
TranslatedDeepSeek Harness integrated armor-breaking security analysis plugin: aggregating all domains of Android · Web · Native · Protocol · Malware · AI-Security (9 bundles + 1 preset)
in-toto is a framework to protect supply chain integrity.
- supply-chain
- security
- new-york-university
- secure-systems-lab
PagerDuty's Incident Response Documentation.
- pagerduty
- incident-response
- documentation
- oncall
Python low-interaction honeyclient
- honeyclient
- client-honeypot
- python
- security-tools
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
Find exploit tool
- exploit-database
- python
- pentest-tool
- exploits
Android Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents an on-device app to test for recent device vulnerabilities.
RockYou2021.txt is a MASSIVE WORDLIST compiled of various other wordlists. RockYou2021.txt DOES NOT CONTAIN USER:PASS logins!
- wordlist
- rockyou
- rockyou2021
- wordlists