Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js
- malware-samples
- wscript
- deobfuscation
- angler
Repository Index
59,621 visible repositories in the index
265–288 of 395 · Most stars
MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.
- python
- mqtt
- mqtt-broker
- mqtt-client
Forensics artefact collection tool for systems running Microsoft Windows
- dfir
- incident-response
- collection
A starter project for next js with authentication - Contains React 17 + Typescript + Tailwind CSS 2 + React Query 3 + GitHub Auth + LinkedIn Auth + Password-less Auth + Fauna DB + ESLint + Prettier + Husky
- vercel
- nextjs
- nextjs-starter
- nextjs-boilerplate
🔥 A fully open source audit logs service and embeddable UI easily deployed to your own Kubernetes cluster. Brought to you by replicated.com and boxyhq.com 🚀
- enterprise-software
- kubernetes
- audit-logs
- enterprise-ready
OpenDJ is an open-source LDAP directory server written in Java. It provides robust, scalable, and secure directory services for identity management, access control, and authentication in enterprise environments. OpenDJ supports LDAPv3 standard, replication, REST APIs, and high-performance
- ldap-server
- ldap
- opendj
- rest
An automated Themida / Code Virtualizer / WinLicense (v3.0-v4) unpacker and dump fixer tool
Investigate suspicious activity by visualizing Sysmon's event log
- security
- kibana
- elasticsearch
- sysmon
teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.
- ids
- teler
- waf
- teler-ids
Boomerang Decompiler - Fighting the code-rot :)
- c-plus-plus
- qt5
- reverse-engineering
- decompiler
Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools
large hashcat rulesets generated from real-world compromised passwords
- hashcat
- hashcat-rules
- password-cracking
- security-research
Queue and resource system for cracking passwords
Free OSINT app for Discord IDs: paste a user, server or invite and see when it was made and who it copies.
A framework for orchestrating forensic collection, processing and data export
Kraken: A multi-platform distributed brute-force password cracking system
- kraken
- kraken-client
- security-tools
- security
🔐 Library for developing secure, decentralized, anonymous and quantum-resistant networks in Go language
- network
- anonymity
- golang
- library
Following googlecode project crypto-js, provide standard and secure cryptographic algorithms for NodeJS. Support MD5, SHA-1, SHA-256, RC4, Rabbit, AES, DES, PBKDF2, HMAC, OFB, CFB, CTR, CBC, Base64
The universe in numbers. Free, open-source calculators for everything countable.
Slider captcha support mobile
inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques
- forensics
- hypervisor
- memory-dump
- reverse-engineering
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
- cve-2026-109618
- cve-2026-109619
- exploit
- mod-php
Cryptographic library for Embarcadero Delphi and potentially for FPC as well
- delphi
- key-deviation-algorithms
- cryptographic-checksums
- kdf1
Inspektor is a protocol-aware proxy that is used to enforce access policies👮
- security
- openpolicyagent
- acl
- rust