A captcha library that generates audio and image CAPTCHAs.
Repository Index
57,637 visible repositories in the index
385–408 of 973 · Most stars
Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.
Simple yet powerful authorization / authentication client library for Python web applications.
- python
- authentication
- oauth2-client
- oauth-client
PagerDuty's Incident Response Documentation.
- pagerduty
- incident-response
- documentation
- oncall
Limit access to your Laravel applications by using invite codes
- php
- laravel
- laravel-package
- doorman
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
ARES - authorized red-team engagement automation with dashboard, campaign scope, module orchestration, OPSEC controls, encrypted vault, and reporting.
- active-directory
- cloud-security
- defensive-validation
- fastapi
RockYou2021.txt is a MASSIVE WORDLIST compiled of various other wordlists. RockYou2021.txt DOES NOT CONTAIN USER:PASS logins!
- wordlist
- rockyou
- rockyou2021
- wordlists
Ultimate Javascript Object Signing and Encryption (JOSE), JSON Web Token (JWT) and Json Web Keys (JWK) Implementation for .NET and .NET Core
- jose
- jwt
- json
- jwa
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
- golang
- http-server
- https-server
- ctf
High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)
Hacking Toolkit
- network-analysis
- networking
- scapy
- python3
Detect deauthentication frames using an ESP8266
30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)
- pypi
- monitoring-tool
- network-analysis
- malware-analysis
Audit AI chat exports locally before sharing or migration. Find possible secrets, personal-data patterns, broken JSON/JSONL, SQLite issues, and scan gaps—without uploading the archive.
- chat-archive
- python
- secret-scanning
- sqlite
Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)
pure-python ECDSA signature/verification and ECDH key agreement
- python
- elliptic-curves
- cryptography
- digital-signatures
Authenticated Encryption with Associated Data Algorithms: high-level encryption ciphers
A friendly car security exploration tool for the CAN bus
- python
- can-bus
- security-scanner
- security-testing
Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.
🔑 Local-first Secrets Manager
- password
- password-manager
- desktop
- credentials
ScopeWeaver: English and Korean localization of ARTEX, with preserved AGPL-3.0 attribution.
Nintendo Switch library manager, with automated management tasks, serving your library to multiple supported clients on your Switch, with shop customization and multi user authentication.
- tinfoil
- atmosphere
- homebrew
- switch
:camera: PictShare is an open source image, mp4, pastebin hosting service with a simple resizing and upload API that you can host yourself. :rice_scene:
- docker
- images
- selfhosted
- picture