Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.
- malloc
- security
- memory-allocation
- malloc-library
finds publicly known security vulnerabilities in a website's frontend JavaScript libraries
- security-vulnerabilities
- security
- vulnerabilities
- lighthouse
A helm plugin that help manage secrets with Git workflow and store them anywhere
Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.
- wordlist
- wordlist-generator
- password
- cracking
A One Time Password Authentication package, compatible with Google Authenticator.
- php
- 2fa
- two-factor-authentication
- google2fa
Indicators of Compromises (IOC) of our various investigations
The most complete open-source tool for Twitter intelligence analysis
Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms.
MongoDB session store for Express
OpenID Connect (OIDC) and OAuth2 protocol support for browser-based JavaScript applications
- oidc
- oidc-client
- typescript
Port of TweetNaCl cryptographic library to JavaScript
Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation
An authentication system generator for Rails applications.
A tool for automating cracking methodologies through Hashcat from the TrustedSec team.
NIST Certified SCAP 1.2 toolkit
Hashtopolis - distributed password cracking with Hashcat
yarGen is a generator for YARA rules
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
- graphql
- security-scanner
- graphql-security
- api-documentation-tool
LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines.
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
Automated static analysis tools for binary programs
Remote Desktop Protocol in Twisted Python