Lightweight Certificate Transparency Log Monitor
- certificate-transparency
- pki
- x509
- security
Repository Index
61,121 visible repositories in the index
361–384 of 812 · Most stars
Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part of NCC Group).
- dfir
- dissect
- python
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
- mobile-security
- android
- malware-analyzer
- penetration-testing
Interactive Delphi Reconstructor
Malcom - Malware Communications Analyzer
- malware
- network-traffic
- pcap
- threat-intelligence
A header only library for creating and validating json web tokens in c++
- cpp
- header-only
- jwt
- json-web-token
A pure Python HTML5 parser that just works. No C extensions to compile. No system dependencies to install. No complex API to learn.
TranslatedA lightweight DDD forward/reverse business modeling framework that supports the architectural evolution of complex business systems!
- ddd
- extension
- ddd-architecture
- clean-architecture
IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
- cybersecurity
- threat
- ioc
- malware
AVML - Acquire Volatile Memory for Linux
- rust
- memory-forensics
- linux-security
🕵️ Tool to reverse-engineer Protocol Buffers with unknown definition
- reverse-engineering
- protocol-buffers
- serialization
Protect against malicious open source packages 🤖
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
- sip
- voip
- password-cracker
- svwar
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
- cve-scanning
- pentesting-tools
- rust
- vulnerability-scanners
macOS (& ios) Artifact Parsing Tool
A linux utility for generating 2FA codes for Steam and managing Steam trade, market, and other confirmations.
- steam
- steamguard-cli
- linux-utility
- sda
Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.
Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).
Simple yet powerful authorization / authentication client library for Python web applications.
- python
- authentication
- oauth2-client
- oauth-client
PagerDuty's Incident Response Documentation.
- pagerduty
- incident-response
- documentation
- oncall
Limit access to your Laravel applications by using invite codes
- php
- laravel
- laravel-package
- doorman
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.
ARES - authorized red-team engagement automation with dashboard, campaign scope, module orchestration, OPSEC controls, encrypted vault, and reporting.
- active-directory
- cloud-security
- defensive-validation
- fastapi