Repository Index

Paper vault for passwords and secrets

• cryptocurrency
• cryptography
• cybersecurity
• digital-asset-security

A full-featured Swift library for JOSE standards with first-class support for CryptoKit keys, providing JWS, JWT, SD-JWT, and JWE with signing, encryption, and JWK key management.

• jsonwebtoken
• jws
• jwt
• json-web-key

This project is designed to create deceptive webpages to deceive and redirect attackers away from real websites.

• deceptive-webpages
• web-cloner
• honeypot
• deception

Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection

• docker-image
• executable-packing
• malware-packers
• research-platform

Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents

• claude-code
• cti
• llm
• rag

Powerful Session Management for Kemal applications

• kemal
• session
• crystal
• middleware

Passwords Fountain - modern & performant password manager interface which works everywhere

NullKia Mobile Security Framework - Tools in Nim, Crystal, V, D, Red, Odin, Haxe, Zig, Kotlin, Lua, PHP, Python | bad-antics | github.com/bad-antics

• android-hacking
• baseband
• bootloader-unlock
• checkm8

🛡 Modern elixir ACL/ABAC library for managing granular user abilities and permissions

• elixir
• elixir-phoenix
• ecto
• acl

Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies on file access, network operations, and process execution.

• bpf
• ebpf
• kernel
• linux

A minimalist Crystal authorization system inspired by https://github.com/varvet/pundit.

• praetorian
• crystal
• authorization
• authorisation

Robust Swift networking for web APIs

• ios
• ios-framework
• networking
• swift

User management for Play! framework (authentication, registration, password management)

Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.

• bpf
• ebpf
• forensics
• golang

a native library implementing secp256k1 purely for the crystal language.

• crystal
• crystal-language
• native-library
• secp256k1

PocketBase + SvelteKit (Static): minimalistic template with configured authorization featuring a single binary or Docker image for deploying.

• pocketbase
• sveltekit
• authorization

Cloverleaf is a free, open source app to replace your password manager without storing your passwords anywhere.

• password-manager
• password-generator
• security
• password-vault

:ghost: :flashlight: Invisible JS code execution & social engineering.

Open-source crypto library with a similar API for multiple languages.

POMjs is a random password generator in HTML and pure Javascript with no cookies and no trackers. It has been translated into several languages.

• password
• password-generator
• random-password-generator
• security

Micropython package for doing fast rsa and elliptic curve cryptography, specifically digital signatures

• cryptography
• elliptic-curves
• micropython
• rsa

Easily Manage OAuth2 Scopes In Go

Forensic tool for acquisition, triage and analysis of remote block devices via iSCSI protocol.

• acquisition
• cybersecurity
• forensics
• iscsi

End-to-end encryption for data at rest: a C library and CLI with recoverable keys, post-quantum (ML-KEM) key exchange, and user-to-user sharing

• encryption
• stream-encryption
• aes-256-gcm
• ecdh