Fragscapy is a command-line tool to fuzz network protocols by automating the modification of outgoing network packets. It can run multiple successive tests to determine which options can be used to evade firewalls and IDS.
Repository Index
47,133 repositories indexed
385–408 of 514 · Most stars
🚀 Production-ready AI-friendly Go REST API boilerplate with Clean Architecture, JWT auth, RBAC, PostgreSQL migrations, and highly tested. AI-optimized with built-in guidelines for most used IDEs. Docker hot-reload, Swagger docs, one-command setup. Build production APIs in minutes, not weeks.
Framework agnostic set of sqlalchemy classes that make building applications that require permissions an easy task.
- python
- pyramid
- flask
- sqlalchemy
provides a full user authentication experience for an API. Includes login,logout,register,forgot password, forgot username, confirmation email and all that other good stuff. Includes plug for checking for authenticated users and macro for generating the required routes.
A full-featured Swift library for JOSE standards with first-class support for CryptoKit keys, providing JWS, JWT, SD-JWT, and JWE with signing, encryption, and JWK key management.
- jsonwebtoken
- jws
- jwt
- json-web-key
EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
Defensomania is a security monitoring and incident response card game.
- incident-response
- self-assessment
- incident-response-readiness
- educational-game
Powerful Session Management for Kemal applications
- kemal
- session
- crystal
- middleware
Sublime Malware Research Tool
drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates
Control Flow Graph Scanning for Android
Bind/Reverse Shells, SOCKS, etc over Tor in Golang
- tor
- ethical-hacking
- reverse-shell
- bind-shell
Advanced analysis software for APK payloads created by RATs.
- apk
- remoteaccesstrojan
- reverse-engineering
- aapt
NullKia Mobile Security Framework - Tools in Nim, Crystal, V, D, Red, Odin, Haxe, Zig, Kotlin, Lua, PHP, Python | bad-antics | github.com/bad-antics
- android-hacking
- baseband
- bootloader-unlock
- checkm8
(UNMAINTAINED. FEEL FREE TO FORK) 🐍A Pythonic way to provide JWT authentication for Flask-GraphQL
Mimicry is a dynamic deception tool that actively deceives an attacker during exploitation and post-exploitation.
Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies on file access, network operations, and process execution.
Open source tools for realistic-behaving electric grid honeynets
A probably paranoid Golang utility library for securely hashing and encrypting passwords based on the Dropbox method. This implementation uses Blake2b, Scrypt and XSalsa20-Poly1305 (via NaCl SecretBox) to create secure password hashes that are also encrypted using a master passphrase.
- golang
- golang-library
- scrypt
- password-hash
Ultra high-performance secp256k1 ECC engine | Python, Node.js, Rust, Go, C#, Swift, Java bindings | CUDA, Metal, OpenCL GPU | ECDSA, Schnorr, FROST, MuSig2, BIP-352 | 15+ platforms
- cryptography
- cuda
- riscv
- secp256k1
An ICAP Server with yara scanner for URL and content.
- python
- icap-server
- yara
- malware-analysis
Password generator written in Golang, usable as a CLI or Go library. Provides options for human readable and accessibility friendly passwords.
- golang
- go
- go-library
- golang-library
A CakePHP plugin which allows you to authenticate using social providers like Facebook/Google/Twitter.
- cakephp-plugin
- social-providers
- middleware
- php
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.