47,133 repositories indexed
337–360 of 550 · Most stars
Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.
Merge multiple pcap files together, gracefully.
"Evolving AppCompat/AmCache data analysis beyond grep"
Protect your SIP Servers from bad actors at https://sentrypeer.org
Wraps around various tools and provides some additional checks/information to produce a centralized report of a PE file.
This is an aspiring project aimed at accumulating knowledge from the world of cybersecurity and presenting it in a cogent way, so it is accessible to as large an audience as possible and so that everyone has a good resource to learn hacking from.
A SDK for the creation of analysis tools without obtaining app source code in order to profile runtime performance, examine code coverage, and track high-risk behaviors of a given app on Android 5.0 and above.
Goiabada is an OAuth2 / OpenID Connect server written in Go.
A surprisingly configurable convention-based approach to managing your application's custom configuration settings.
Cryptographic primitives for Scala
Open source Windows x64 PE packer and crypter. Compresses and encrypts executables with a custom virtual machine into a self extracting stub.
A medium interaction printer honeypot 🍯
gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that you can join on Google Groups: https://groups.google.com/forum/#!topic/gonids/
Encrypted Chat. No History. No Logs.
Sockets with pure VB6 impl of TLS encryption
PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE
Federated Authentication with OAuth providers
A Wordpress Honeypot
Nail in the JKS coffin - Cracking passwords of private key entries in a JKS file
collection of C/C++ programs that try to get compilers to exploit undefined behavior
simple YARA-based IOC scanner
Open-source cross-platform defensive spyware, stalkerware and surveillance software detector
Does their story hold up? Paste what a seller, recruiter or landlord told you and check it against public records in thirty seconds, with proof saved for every reason.