Repository Index

The opposite of Ruler, provides blue teams with the ability to detect Ruler usage against Exchange.

• blue-team
• security-tools
• security-audit

Library for working with OpenID Connect and implementing clients.

• oauth2
• openid-connect

Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.

Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.

Compatible with LessPass. RustedLessPass is a standalone password manager written in Rust. Powered by Rust / Wasm.

• anonymous
• lesspass
• password
• password-manager

AI-powered platform for OSINT intelligence analysis. Features archive discovery with hypothesis-driven investigation, GLiNER entity extraction, Mapbox geospatial visualization, network analysis, and document processing. Built with FastAPI, Next.js, Weaviate, and DSPy.

• ai-agents
• document-processing
• dspy
• entity-extraction

Next.js boilerplate for passwordless authentication with Prisma and next-auth with apollo graphql api with style from tailwindcss

🚀 Production-ready AI-friendly Go REST API boilerplate with Clean Architecture, JWT auth, RBAC, PostgreSQL migrations, and highly tested. AI-optimized with built-in guidelines for most used IDEs. Docker hot-reload, Swagger docs, one-command setup. Build production APIs in minutes, not weeks.

• api
• api-documentation
• authentication
• backend

Bundle allows you to create doctrine entities with fields that will be protected by encryption algorithms such as AES

A full-featured Swift library for JOSE standards with first-class support for CryptoKit keys, providing JWS, JWT, SD-JWT, and JWE with signing, encryption, and JWK key management.

• jsonwebtoken
• jws
• jwt
• json-web-key

Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise

• detection
• splunk
• bpfdoor
• vulnerability

A PE (Portable Executable) packer with Huffman Compression and Xor encryption.

• huffman-compression
• huffman-algorithm
• pe-header
• packer

🌊 Elixir RSS/ATOM feed builder with a focus on standards compliance, security and extensibility

• elixir
• rss
• atom

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

An ICAP Server with yara scanner for URL and content.

• python
• icap-server
• yara
• malware-analysis

Golang Authentication API with Fiber MongoDB and JWT

A CakePHP plugin which allows you to authenticate using social providers like Facebook/Google/Twitter.

• cakephp-plugin
• social-providers
• middleware
• php

Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.

• bpf
• ebpf
• forensics
• golang

PocketBase + SvelteKit (Static): minimalistic template with configured authorization featuring a single binary or Docker image for deploying.

• pocketbase
• sveltekit
• authorization

This script takes a file or directory as input, uses GPG AES256 symmetric encryption with the password you provide and adds it to IPFS and returns the IPFS hash.

• ipfs
• cli
• encryption
• ipfs-add

Cloverleaf is a free, open source app to replace your password manager without storing your passwords anywhere.

• password-manager
• password-generator
• security
• password-vault

Open-source crypto library with a similar API for multiple languages.

POMjs is a random password generator in HTML and pure Javascript with no cookies and no trackers. It has been translated into several languages.

• password
• password-generator
• random-password-generator
• security

Troje is a honeypot built around lxc containers. It will run each connection with the service within a seperate lxc container.