Repository Index

JWT login microservice with plugable backends such as OAuth2, Google, Github, htpasswd, osiam, ..

• jwt
• htpasswd
• service
• golang

Port of TweetNaCl cryptographic library to JavaScript

• crypto
• javascript
• authentication
• signature

Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation

• oidc
• oauth2
• openidconnect
• server

A library for implementing authentication/authorization in Ember.js applications.

• ember
• auth
• session-management

The new bridge between Burp Suite and Frida!

Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.

• php
• access-control
• audit
• browser-extension

Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection

• ida-plugin
• taint-analysis
• reverse-engineering
• disassembly

The Offensive Manual Web Application Penetration Testing Framework.

• web-penetration-testing
• reconnaissance
• vulnerability-analysis
• scanning-enumeration

No CAPTCHA reCAPTCHA For Laravel.

• captcha
• captcha-recaptcha
• php
• laravel

NIST Certified SCAP 1.2 toolkit

• scap
• xccdf
• oval
• cpe

Hashtopolis - distributed password cracking with Hashcat

• cracking
• distributed
• hashcat
• pentesting

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

• graphql
• security-scanner
• graphql-security
• api-documentation-tool

LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines.

• libtomcrypt
• cryptography
• c
• encryption

Rip web accessible (distributed) version control systems: SVN/GIT/HG...

RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact

• hacktoberfest
• rdp
• pentest
• honeypot

An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity

• ssh
• honeypot
• go
• golang

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

• azure
• defender-for-endpoint
• dfir
• kql

Automated static analysis tools for binary programs

• binary-analysis
• reverse-engineering

The repository host gives no description.

• defcon
• android
• blackhat
• blackbox

A network sniffer that logs all DNS server replies for use in a passive DNS setup

Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS

• aws
• cloud
• security
• big-data

The best way to build Electron apps with security in mind.

• electron
• security
• template
• react

TranslatedBased on an in-depth REA teardown, a high-fidelity recreation of the official Claude desktop UI. Recreates 30 independent React components and 8 hardcore interaction physics algorithms, and comes with a 3000+ line reverse-engineering analysis manual.

• anthropic
• audioworklet
• claude
• design-system

goRBAC provides a lightweight role-based access control (RBAC) implementation in Golang.

• rbac
• go