Repository Index

Automatic and platform-independent unpacker for Windows binaries based on emulation

• reverse-engineering
• unpacker
• pefile
• windows

Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteur réseau temps réel + pare-feu sortant, agent de flotte Rust, exports SIEM. 100 % local.

• cybersecurity
• d3js
• electron
• fastapi

Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.

• ruby
• hacking
• infosec
• ctf-tools

A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.

• application-security
• appsec
• bug-bounty
• burp-alternative

HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.

• malware-analysis
• dynamic-analysis
• security
• linux

Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.

• codereview
• cybersecurity
• ruby
• sinatra

Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.

• pentesting
• security
• chrome-extension
• api-keys

ObjectivePGP is an open-source library for iOS and macOS that provides developers with tools for implementing OpenPGP encryption and decryption, digital signing, and signature verification in their applications, thereby enhancing security and data integrity.

• openpgp
• objective-c
• encryption
• pgp

phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code

• php
• php-codesniffer
• phpcs
• static-code-analysis

🚀 Useful README.md, LICENSE, CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, GitHub Issues, Pull Requests and Actions templates to jumpstart your projects.

• readme
• documentation
• docs
• docs-generator

Best Current Practices regarding secure online communication and configuration of services using cryptography.

• cryptography
• applied-cryptography
• documentation
• best-practices

Security Auditor Utility for GraphQL APIs

• security
• penetration-testing
• auditing
• graphql

Scirius is a web application for Suricata ruleset management and threat hunting.

• python
• security
• management
• interface

ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.

• clamscan
• file-scanner
• virus-scan
• docker-compose

Translated全链哨兵 (Quanlian Shaobing, "full-chain sentinel") is a cybersecurity Agent that integrates Web penetration testing, Android App security testing, iOS APP security toilet, batch targeting for attack and defense, automated emergency response, and open-source vulnerability monitoring. It is used to assist with automating security service delivery. Use for illegal purposes is prohibited.

• agent
• blue-team
• cybersecurity
• cybersecurity-tools

Galah: An LLM-powered web honeypot.

• golang
• honeypot
• llm
• openai

MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

• beacons
• blue-team
• c2
• command-and-control

List DTDs and generate XXE payloads using those local DTDs.

• xxe
• dtd
• security
• hacktoberfest

A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)

• dns
• dns-rebinding
• hacking
• malicious-domains

OpenID Connect Library for Rust

• oauth2-client
• oauth2-authentication
• openid-connect
• openid-client

:no_entry: (DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.

• security
• dfir
• forensics

PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

• security-tools
• security
• attestation
• verification