61,121 visible repositories in the index
409–432 of 812 · Most stars
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
Sandboxed Execution Environment
A concise, directive, specific, flexible, and free incident response plan template
A lightweight, secure, easy-to-use crypto library suitable for constrained environments.
Simple authorization conventions for Phoenix apps
Script to create templates to use with VirtualBox to make vm detection harder
Multi-role and whitelist based authorization gem for Rails (and not only Rails!)
Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.
Enables client-side applications to dance OAuth with GitHub.
OpenID/Connect, OAuth2, WS-Federation and SAML 2.0 server based on Duende IdentityServer and ITFoxtec Identity SAML 2.0 with its admin UI
Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.
CyLR - Live Response Collection Tool
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
Win Application Framework (WAF) is a lightweight Framework that helps you to create well structured XAML Applications.
RSA public/private key generation, RSA, AES encryption/decryption, RSA sign/verify in Swift with CommonCrypto in iOS and OS X
ObjectivePGP is an open-source library for iOS and macOS that provides developers with tools for implementing OpenPGP encryption and decryption, digital signing, and signature verification in their applications, thereby enhancing security and data integrity.
🚀 Useful README.md, LICENSE, CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, GitHub Issues, Pull Requests and Actions templates to jumpstart your projects.
Andromeda - Interactive Reverse Engineering Tool for Android Applications
AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.
OpenXPKI Code
Safe, simple and fast JSON Web Tokens for Go
MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.