Repository Index

Enables client-side applications to dance OAuth with GitHub.

Rails integration for Rodauth authentication framework

• rodauth
• authentication
• rails
• multifactor-authentication

OpenID/Connect, OAuth2, WS-Federation and SAML 2.0 server based on Duende IdentityServer and ITFoxtec Identity SAML 2.0 with its admin UI

• openid-connect
• admin-ui
• iam
• openid

Laika BOSS: Object Scanning System

HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.

• malware-analysis
• dynamic-analysis
• security
• linux

Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.

• codereview
• cybersecurity
• ruby
• sinatra

Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.

• pentesting
• security
• chrome-extension
• api-keys

Win Application Framework (WAF) is a lightweight Framework that helps you to create well structured XAML Applications.

• waf
• dotnet
• csharp
• wpf

ObjectivePGP is an open-source library for iOS and macOS that provides developers with tools for implementing OpenPGP encryption and decryption, digital signing, and signature verification in their applications, thereby enhancing security and data integrity.

• openpgp
• objective-c
• encryption
• pgp

🚀 Useful README.md, LICENSE, CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, GitHub Issues, Pull Requests and Actions templates to jumpstart your projects.

• readme
• documentation
• docs
• docs-generator

Malicious HTTP traffic explorer

Andromeda - Interactive Reverse Engineering Tool for Android Applications

• android
• reverse-engineering
• binary-analysis
• static-analysis

AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.

• ai
• attack-surface-management
• bbot
• cybersecurity

Nintendo Switch userland code execution using Civilization 7 game cartridge

A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.

• application-security
• appsec
• bug-bounty
• burp-alternative

OpenXPKI Code

• pki
• enterprise-software
• workflow-based
• x509

Best Current Practices regarding secure online communication and configuration of services using cryptography.

• cryptography
• applied-cryptography
• documentation
• best-practices

A simple way of authenticating your RESTful APIs with API keys using Laravel

Scalpel is an open source data carving tool. It is not being actively maintained.

Scirius is a web application for Suricata ruleset management and threat hunting.

• python
• security
• management
• interface

ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.

• clamscan
• file-scanner
• virus-scan
• docker-compose

A tool for studying JavaScript malware.

• malware
• malwareanalysis
• nodejs
• es6

MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

• beacons
• blue-team
• c2
• command-and-control