A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
Repository Index
61,121 visible repositories in the index
289–312 of 721 · Most stars
The most complete open-source tool for Twitter intelligence analysis
Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms.
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
- cve-2026-109618
- cve-2026-109619
- detection-rules
- exploit
Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation
Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.
- php
- access-control
- audit
- browser-extension
A tool for automating cracking methodologies through Hashcat from the TrustedSec team.
NIST Certified SCAP 1.2 toolkit
- scap
- xccdf
- oval
- cpe
Phishing catcher using Certstream
- phishing
- threat-intelligence
- certificate-transparency
- osint
yarGen is a generator for YARA rules
- python
- yara
- malware
- malware-research
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
- graphql
- security-scanner
- graphql-security
- api-documentation-tool
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity
The best way to build Electron apps with security in mind.
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥
One rule to crack all passwords. or atleast we hope so.
📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.
Fake Protocol Server
Open source, self-hostable watched list for all your content (movies, tv series, anime, games) with user authentication, modern and clean UI and a very simple setup.
Authentication built for Nuxt! Easily add authentication via OAuth providers, credentials or Email Magic URLs!
- authentication
- nuxt
- users
- session
GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.
- digital-human-rights
- anonymity
- security
- python
A fast & densely stored hashmap and hashset
- c-plus-plus
- cpp17
- cpp
- hash
Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.
- encryption-server
- encryption
- crypto
- cryptography