Repository Index

NTP, DNS, SSDP, Chargen and generic UDP-based amplification DDoS honeypot

Markov-chains for linguistically-correct password cracking

Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies on file access, network operations, and process execution.

• bpf
• ebpf
• kernel
• linux

A probably paranoid Golang utility library for securely hashing and encrypting passwords based on the Dropbox method. This implementation uses Blake2b, Scrypt and XSalsa20-Poly1305 (via NaCl SecretBox) to create secure password hashes that are also encrypted using a master passphrase.

• golang
• golang-library
• scrypt
• password-hash

Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.

• bpf
• ebpf
• forensics
• golang

HoneyHTTPD is a Python-based web server honeypot/service imitation builder. Great for honeypots or faking HTTP services.

• python
• honeypot
• honeypot-http
• python-web

Foremost is a console program to recover files based on their headers, footers, and internal data structures. c.f., http://foremost.sourceforge.net/

Text-based logic question captcha's for Rails 🚫🤖

• spam-protection
• ruby
• captcha
• rails

Phraser is a phrase generator using n-grams and Markov chains to generate phrases for passphrase cracking. The generated phraselists can be used as wordlists in your favourite password cracking application.

A tool to assist IoT developers in securing MQTT-based IoT deployments

• mqtt
• security

This plugin implements Telegram WebApp Auth and Telegram Login Widget for the pocketbase

• pocketbase
• telegram
• telegram-bot
• pocketbase-plugins

PocketBase + SvelteKit (Static): minimalistic template with configured authorization featuring a single binary or Docker image for deploying.

• pocketbase
• sveltekit
• authorization

Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to find badness.

hashgen - the blazingly fast hash generator

• cyclone
• generator
• hash
• md5

Cryptographic Dataset Generation & Modelling Framework

• cryptography
• deep-learning
• deep-neural-networks
• machine-learning

XSSMaze is a web service designed to test and improve the performance of security testing tools by providing various cases of XSS vulnerabilities.

• crystal-lang
• hacking
• security
• vulnapp

Kojoney2 is a low interaction SSH honeypot written in Python. Based on Kojoney by Jose Antonio Coret

Create dataset for suricata with indicators of MISP instances and add sightings in MISP if an indicator of dataset generates an alert

Crypto Puzzles is a tool and library to provide a bunch of functions for encryption or pseudo encryption as puzzles or brain teasers. Awesome for kids but some puzzles are also a challenge for adults.

• crypto
• puzzle
• puzzle-game
• puzzle-generator

Create n-grams of wordlists based on words, characters, or charsets to use in offline password attacks and data analysis

• hashcat
• jtr
• mdxfind
• ngram

A malware dataset curation tool which helps identify packed samples.

• malware
• packer
• security
• peid

Session based authentication and role based security for a Pyramid web application.

Collection of danish base wordlists for cracking danish passwords (Hashcat, John the Ripper etc.)

• password-cracking
• wordlists
• hashcat-lists
• hashcat

Simple key/secret based authentication for APIs