Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️
- devsecops
- entropy
- gdpr
- golang
Repository Index
47,133 repositories indexed
265–288 of 422 · Most stars
The tool is used to analyze the content of the android application in local storage.
Hascat Rules Collection – Probably the largest collection of hashcat rule-files anywhere.
- hashcat
- hashcat-rules
- hashcat-rule
- password-cracking
hackers-grep is a utility to search for strings in PE executables including imports, exports, and debug symbols
A secure and easy-to-use store for your production secrets
Generate graphs and charts based on password cracking result
- cracking
- hashcat
- matplotlib
- password
Public repository for improvements to the EXTRABACON exploit
Supply Chain Security Research - Living Off The Pipeline tools
- lotp
- supply-chain-security
- living-off-the-pipeline
preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.
🔑 Paseto.NET, a Paseto (Platform-Agnostic Security Tokens) implementation for .NET
- paseto
- dotnet
- netstandard
- dotnet-core
Deploy a Cloudflare Worker to sanely score users' new passwords with zxcvbn AND check for matches against haveibeenpwned's 10+ billion breached accounts
- haveibeenpwned
- cloudflare
- zxcvbn
- serverless
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
NeuraVision — AI content generation platform (PHP backend engine: auth, credits, generation, analytics)
- ab-testing
- ai-platform
- analytics
- backend-api
Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.
- networking
- udp
- ipv6
- ipv4
Sym is a command line utility and a Ruby API that makes it trivial to encrypt and decrypt sensitive data. Unlike many other existing encryption tools, sym focuses on usability and streamlined interface (CLI), with the goal of making encryption easy and transparent. The result? There is no excuse for keeping your application secrets unencrypted :)
Content discovery and fuzzing with HTTP/3 support (100k requests per second)
A warehouse for your malware
The fastest 128-bit and 256-bit hash, passes all tests, and under 140 source lines of code. API library and CLI tool in C++ and NodeJS/Wasm
- call-for-papers
- cryptanalysis
- cryptanalysis-tasks
- cryptography
The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.
- ai-agents
- bug-bounty
- electron
- offensive-security
php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.
- cve
- hestiacp
- opencart
- php
Ziti SDK for Golang
- golang
- networking
- sdk
- zero-trust
Randomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.
A simple capture the flag framework.
A blade runner for your network. Detects shadow AI agents before they go rogue.