Local-only browser fingerprint & identity rotation toolkit for authorized security testing. Tor/obfs4, coherent profiles, WebRTC/DNS leak protection.
- browser-privacy
- cli
- fingerprinting
- identity-rotation
Repository Index
47,133 repositories indexed
385–408 of 562 · Most stars
Open-source agentic security operations platform:
- agentic-security
- cyber-security
- cyber-threat-intelligence
- cybersecurity
A library for allowing apps to easily use different auth providers.
Scan your computer for applications that are either susceptible to dylib hijacking or have been hijacked.
[INACTIVE] TLS 1.2 implementation in Rust
A framework for receiving and redistributing abuse feeds
A modular Python application to pull intelligence about malicious files
- malware-analysis
- malware-research
- investigation
- cybersecurity
Automated malware unpacker
The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX account.
Authentication plugin for CakePHP. Can also be used in PSR7 based applications.
Machine-learn password mangling rules
Kustomize generator plugin that generates Secrets from sops-encrypted files
TranslatedFush Vue MCP — Vue frontend reverse engineering + web security testing tool (Chrome extension + MCP server, 91 tools)
Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
- crtsh
- cve
- cve-2026-109618
- cve-2026-109619
Words list generator to crack security tokens
Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.
- cybersecurity
- hacking
- iast
- dast
A honeypot for malware that propagates via USB storage devices
Searches various online resources to try and get as much info about an IP/domain as possible.
High-interaction Honeypot for PLCs and Industrial Control Systems
Integrates Spiffe and Vault to have secretless authentication
- spire
- spiffe
- vault
- hashicorp
The MPT (Mobile Pentest Toolkit) is a must-have solution for your android penetration testing workflow.
The opposite of Ruler, provides blue teams with the ability to detect Ruler usage against Exchange.
Custom password cracking rules for Hashcat and John the Ripper
- password-cracking
- hashcat
- johntheripper
- jtr
Go client for the GeoServer REST API — workspaces, datastores, layers, styles, security, ACL, GeoWebCache, Importer, plus OWS GetCapabilities/Describe. Tested against GeoServer 2.27 LTS and 2.28 stable.
- geoserver
- gis
- mapping
- golang