Simulates enough of a Telnet connection in order to log failed login attempts.
Repository Index
77,852 visible repositories in the index
25–45 of 45 · Most stars
Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
- anti-bot
- behavioral-analysis
- bot-detection
- captcha
Minimal code to connect to a CEF debugger.
A SDK for the creation of analysis tools without obtaining app source code in order to profile runtime performance, examine code coverage, and track high-risk behaviors of a given app on Android 5.0 and above.
- binary-instrument
- android
- malware-research
- reverse-engineering
collection of C/C++ programs that try to get compilers to exploit undefined behavior
Suricata rules for network anomaly detection
- suricata-rule
- suricata
- ids
- nsm
Threat Intelligence Quotient Test - Dataviz and Statistical Analysis of TI feeds
🔑 Paseto.NET, a Paseto (Platform-Agnostic Security Tokens) implementation for .NET
- paseto
- dotnet
- netstandard
- dotnet-core
BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)
A library of cryptographic primitives (ciphers, hashes, etc) for OCaml
🔑 NaCl.Core, a cryptography library for .NET
- dotnet
- netstandard
- dotnet-core
- chacha20-poly1305
AI-powered platform for OSINT intelligence analysis. Features archive discovery with hypothesis-driven investigation, GLiNER entity extraction, Mapbox geospatial visualization, network analysis, and document processing. Built with FastAPI, Next.js, Weaviate, and DSPy.
- ai-agents
- document-processing
- dspy
- entity-extraction
A full-featured Swift library for JOSE standards with first-class support for CryptoKit keys, providing JWS, JWT, SD-JWT, and JWE with signing, encryption, and JWK key management.
- jsonwebtoken
- jws
- jwt
- json-web-key
Open source tools for realistic-behaving electric grid honeynets
Android Malware Behavior Deleter
AWSDoor is a red team automation tool designed to simulate advanced attacker behavior in AWS environments
Self-hosted AI-assisted CTI-to-detection workbench for ATT&CK mapping, IOC/CVE intelligence, Threat Radar, malware triage, Attack Simulation, and SIEM validation.
A plugin based GraphQL vulnerability assessment tool.
- graphql
- graphql-security
- pentest-tool
- python3
Encrypted .env files with TOTP unsealing for production deploys. Cross-stack (Node + Java). Zero deps. Defends against npm supply-chain attacks.
- 2fa
- aes-gcm
- dotenv
- encryption
coraza middleware for go-fiber
- fiber-framework
- fiber-go
- golang
- security
Browser-less OAuth 2.0 App2App flow involving one or more Brokers