Repository Index

drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates

• docker
• security
• audit

Bind/Reverse Shells, SOCKS, etc over Tor in Golang

• tor
• ethical-hacking
• reverse-shell
• bind-shell

(UNMAINTAINED. FEEL FREE TO FORK) 🐍A Pythonic way to provide JWT authentication for Flask-GraphQL

• graphql
• flask-extensions
• flask-graphql
• auth

Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies on file access, network operations, and process execution.

• bpf
• ebpf
• kernel
• linux

Open source tools for realistic-behaving electric grid honeynets

A probably paranoid Golang utility library for securely hashing and encrypting passwords based on the Dropbox method. This implementation uses Blake2b, Scrypt and XSalsa20-Poly1305 (via NaCl SecretBox) to create secure password hashes that are also encrypted using a master passphrase.

• golang
• golang-library
• scrypt
• password-hash

Password generator written in Golang, usable as a CLI or Go library. Provides options for human readable and accessibility friendly passwords.

• golang
• go
• go-library
• golang-library

A simple captcha service

• captcha
• rust

HoneyHTTPD is a Python-based web server honeypot/service imitation builder. Great for honeypots or faking HTTP services.

• python
• honeypot
• honeypot-http
• python-web

A CakePHP plugin which allows you to authenticate using social providers like Facebook/Google/Twitter.

• cakephp-plugin
• social-providers
• middleware
• php

This plugin implements Telegram WebApp Auth and Telegram Login Widget for the pocketbase

• pocketbase
• telegram
• telegram-bot
• pocketbase-plugins

This script takes a file or directory as input, uses GPG AES256 symmetric encryption with the password you provide and adds it to IPFS and returns the IPFS hash.

• ipfs
• cli
• encryption
• ipfs-add

"Hack" like a programmer in movies and games! Inspired by hackertyper.net

• haskell
• joke
• hacking
• typing

iam platform written in golang

:ghost: :flashlight: Invisible JS code execution & social engineering.

Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to find badness.

Troje is a honeypot built around lxc containers. It will run each connection with the service within a seperate lxc container.

HElib is an open-source software library that implements homomorphic encryption. It supports the BGV scheme with bootstrapping and the Approximate Number CKKS scheme. HElib also includes optimizations for efficient homomorphic evaluation, focusing on effective use of ciphertext packing techniques and on the Gentry-Halevi-Smart optimizations.

Forensic tool for acquisition, triage and analysis of remote block devices via iSCSI protocol.

• acquisition
• cybersecurity
• forensics
• iscsi

Native WebAuthn/Passkey support for Electron on macOS using Apple's AuthenticationServices framework

• authenticationservices
• electron
• electron-builder
• fido2

Proof of concept denial of service over TOR stress test tool

Fast incident overview

Cumulus. Threat modeling the Clouds.

• card-game
• cornucopia
• elevation-of-privilege
• eop

Android Malware Behavior Deleter

• android
• malware
• antivirus
• editor