Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
- pentesting
- security
- chrome-extension
- api-keys
Repository Index
61,121 visible repositories in the index
385–408 of 721 · Most stars
Win Application Framework (WAF) is a lightweight Framework that helps you to create well structured XAML Applications.
phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code
- php
- php-codesniffer
- phpcs
- static-code-analysis
Usable, easy and safe pure-Rust crypto
- cryptography
- rust
- crypto
- chacha20-poly1305
🚀 Useful README.md, LICENSE, CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, GitHub Issues, Pull Requests and Actions templates to jumpstart your projects.
- readme
- documentation
- docs
- docs-generator
CLI tool for decompiling Android apps to Java. It does resources! It does Java! Its real easy!
Security Auditor Utility for GraphQL APIs
- security
- penetration-testing
- auditing
- graphql
Scirius is a web application for Suricata ruleset management and threat hunting.
- python
- security
- management
- interface
A tool for studying JavaScript malware.
MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
- beacons
- blue-team
- c2
- command-and-control
A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule
Google OAuth Client Library for Java
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
Documenting the unofficial and internal Steam Web API
Tool to gather Threat Intelligence indicators from publicly available sources
WinDBG Anti-RootKit Extension
- kernel-mode
- c-plus-plus
- malware
- malware-analysis
Easy to use OAuth 2 library for iOS, written in Swift.
- swift
- oauth2
Who do websites think you are? A privacy self-check: every sniffer any site can run, the portrait they paint, and the contradictions that give away a VPN or proxy
- browser-fingerprinting
- cloudflare-workers
- dns-leak
- network-tools
:no_entry: (DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.
An opinionated production-ready SQL-/Swagger-first RESTful JSON API written in Go, highly integrated with VSCode DevContainers by allaboutapps.
- golang-development
- vscode-devcontainers
- golang
- go
Modular file scanning/analysis framework
- python
- analytic-machines
- analysis-framework
- python-script
Go-Guardian is a golang library that provides a simple, clean, and idiomatic way to create powerful modern API and web authentication.
Advanced keyboard-walk generator with configureable basechars, keymap and routes