A probably paranoid Golang utility library for securely hashing and encrypting passwords based on the Dropbox method. This implementation uses Blake2b, Scrypt and XSalsa20-Poly1305 (via NaCl SecretBox) to create secure password hashes that are also encrypted using a master passphrase.
- golang
- golang-library
- scrypt
- password-hash
Drupal Honeypot
Simple Polymorphic x86_64 Runtime Code Segment Cryptor
bap - http Basic Authentication honeyPot
NTP logger/honeypot
A low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability.
HoneyHTTPD is a Python-based web server honeypot/service imitation builder. Great for honeypots or faking HTTP services.
observation camera honeypot
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
A tool to catch spoofed NBNS responses.
This plugin implements Telegram WebApp Auth and Telegram Login Widget for the pocketbase
OpenID Connect implementation in OCaml. Currently only the RP (client) parts are polished.
Collection of hashcat lists and things.
- hashcat
- hashcat-rules
- hashcat-masks
- password-cracking
PocketBase + SvelteKit (Static): minimalistic template with configured authorization featuring a single binary or Docker image for deploying.
Simple DNS honeypot script
- dns
- dns-honeypot
- python
- sinkhole
Simple High Interaction Honeypot Solution for SMB protocol
A nodejs web application honeypot
A honeypot server written in Go.
BLE Edition of the original FistBump (portable WPA handshake grabber)
General purpose OAuth2 component for Yew
This tool analyzes a given Gitlab repository and searches for dangling or force-pushed commits containing potential secret or interesting information.
POMjs is a random password generator in HTML and pure Javascript with no cookies and no trackers. It has been translated into several languages.
Bash and Python Honeyport scripts
Example repository for GitHub Actions Time of Check to Time of Use (TOCTOU vulnerabilities)