Repository Index

A multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks.

• rust
• security
• security-tools
• pdf

ThePhish: an automated phishing email analysis tool

• email
• detection
• malware
• phishing

Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.

• detection-engineering
• splunk
• mitre
• awesome-list

Periodic cyber security newsletters that capture the latest news, summaries of conference talks, research, best practices, tools, events, vulnerabilities, and analysis of trending threats and attacks

• cybersecurity
• newsletter

A utility to safely generate malicious network traffic patterns and evaluate controls.

• security
• testing-tools
• monitoring
• intrusion-detection

cwe_checker finds vulnerable patterns in binary executables

• cwe
• binary-analysis
• static-analyzer
• vulnerability-scanner

Advanced Honeypot framework.

• honeypot
• framework
• security

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

• security-audit
• penetration-testing
• penetration-test
• virtual-hosts

Linting tool for CloudFormation templates

• continuous-testing
• unit-testing
• cloudformation
• aws

RSA public/private key encryption in Swift

• swift
• ios
• encryption
• rsa

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.

• github-actions
• actions
• supply-chain-security
• hardening

Some public notes

• nodejs
• security
• npm
• travis-ci

✨ Awesome - A curated list of amazing Homomorphic Encryption libraries, software and resources

• homomorphic-encryption
• security
• awesome-list
• awesome

A modular vulnerability scanner with automatic report generation capabilities.

• artemis
• pentesting
• security
• security-scanner

🍯 Unobtrusive and flexible spam protection for Rails apps

• honeypot
• rails
• anti-spam
• captcha

A collection of fascinating and bizarre Censys Search Queries

• censys
• dorks
• queries
• search

Transparent proxy through Tor for Kali Linux OS

• tor
• tor-proxy
• transparent-proxy
• kali-linux

A collection of practical security-focused guides and checklists for smart contract development

• crypto
• security
• security-tools
• smart-contracts

npm package for OpenID Connect, OAuth Code Flow with PKCE, Refresh tokens, Implicit Flow

• openid
• angular
• implicit-flow
• npm

Coordinate Claude, Codex and Cursor windows with shared tasks, acknowledgements, prechecks, parallel tests, source-bound proofs and independent review. Built-in skills recall lessons, simplify code and forecast work. Track progress, decisions and evidence in a bilingual local dashboard, with MCP plugins. Browse skills and verified security audits.

• agent-skills
• ai-agents
• claude-code
• code-review

Software Supply Chain Transparency Log

• supply-chain
• provenance
• security
• transparency-log

Custom & better AppArmor profile generator for Docker containers.

• docker
• apparmor-profile
• apparmor
• containers

NFStream: a Flexible Network Data Analysis Framework.

• data-science
• data-analysis
• data-mining
• network-analysis

:coffee: SonarSource Static Analyzer for Java Code Quality and Security

• java
• sonarqube
• static-code-analysis
• static-analyzer