PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡
Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
- anti-bot
- behavioral-analysis
- bot-detection
- captcha
HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy + Exploit Timing Attacks
- http2
- race-condition
- race-conditions
- scapy
Secure shell history commands by finding sensitive data
Open Source SIEM (Security Information and Event Management system).
- siem
- risk-management
- risk-assessment
- vulnerability-management
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.
Protect your SIP Servers from bad actors at https://sentrypeer.org
Wraps around various tools and provides some additional checks/information to produce a centralized report of a PE file.
A Java library that implements a ByteChannel interface over SSLEngine, enabling easy-to-use (socket-like) TLS for Java applications.
A SDK for the creation of analysis tools without obtaining app source code in order to profile runtime performance, examine code coverage, and track high-risk behaviors of a given app on Android 5.0 and above.
gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that you can join on Google Groups: https://groups.google.com/forum/#!topic/gonids/
Sockets with pure VB6 impl of TLS encryption
Simple role-based authorization library for Ruby on Rails
Open-source OSINT intelligence dashboard tracking the Iran conflict in real time — live DeckGL/MapLibre conflict map, 30 bias-labeled feeds, actor dossiers, and daily briefs. Live at conflicts.app.
- deckgl
- geopolitics
- intelligence
- maplibre
Open-source cross-platform defensive spyware, stalkerware and surveillance software detector
Threat Intelligence Quotient Test - Dataviz and Statistical Analysis of TI feeds
Deep memory analysis for Windows processes — the tool that saves you hours of debugging
- analyzer
- binary-analysis
- delphi
- dissassembler
hackers-grep is a utility to search for strings in PE executables including imports, exports, and debug symbols
Follow stolen crypto hop by hop across Bitcoin, Ethereum, TRON, BNB Chain and Solana. Labels where the money landed, keeps proof for every clue, writes the report.
Utility that exposes the expiry of TLS certificates as Prometheus metrics
Elixir Plug to easily add HTTP basic authentication to an app
🗄EOS Tracker: Real time block explorer for EOS Blockchain
Plug-n-Play login system for iOS written in Swift
Supply Chain Security Research - Living Off The Pipeline tools
- lotp
- supply-chain-security
- living-off-the-pipeline