Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
- anti-bot
- behavioral-analysis
- bot-detection
- captcha
He who flays the hide
macOS persistence tool
🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️
ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods.
WebAppSec Content Security Policy
🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.
A .net Core port of BCrypt.net
The fastest communications possible. Delphi rulez.
- delphi
- object-pascal
- tcp-ip
- fast-networking
This script is made to collect the most valiable artifacts for foreniscs or incident reponse investigation rather than imaging the whole har drive.
Protect your SIP Servers from bad actors at https://sentrypeer.org
Wraps around various tools and provides some additional checks/information to produce a centralized report of a PE file.
C++11 header-only message digest library
This is an aspiring project aimed at accumulating knowledge from the world of cybersecurity and presenting it in a cogent way, so it is accessible to as large an audience as possible and so that everyone has a good resource to learn hacking from.
A medium interaction printer honeypot 🍯
Open source Windows x64 PE packer and crypter. Compresses and encrypts executables with a custom virtual machine into a self extracting stub.
- compression
- packer
- pe-packer
- pe-compress
Encrypted Chat. No History. No Logs.
Sockets with pure VB6 impl of TLS encryption
Federated Authentication with OAuth providers
Delphi debug framework
- debug
- stacktrace
- disassembler
- portable-executable
A Simple Elasticsearch Honeypot
A Wordpress Honeypot
Open-source OSINT intelligence dashboard tracking the Iran conflict in real time — live DeckGL/MapLibre conflict map, 30 bias-labeled feeds, actor dossiers, and daily briefs. Live at conflicts.app.
- deckgl
- geopolitics
- intelligence
- maplibre
Port of the xxhash library to C++17.