Repository Index

OpenID Certified™ OpenID Connect and FAPI 2 Relying Party module for Apache HTTPd

• apache-httpd
• openid-connect
• openidconnect-client
• openidc

Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).

• fastapi
• flask
• django
• content-security-policy

Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.

• golang
• http-server
• https-server
• ctf

30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)

• pypi
• monitoring-tool
• network-analysis
• malware-analysis

An Elixir OAuth 2.0 Client Library

• elixir
• oauth2
• http

A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.

• application-security
• appsec
• bug-bounty
• burp-alternative

HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.

• malware-analysis
• dynamic-analysis
• security
• linux

Malicious HTTP traffic explorer

🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more

• tls
• ssl
• certificate
• keystore

honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway

• honeytoken
• honeypot
• security
• deception

Fast HTTP enumerator

• http
• fuzz
• fuzzer
• enumerator

⛽️ Integrates Guzzle 6.x, a PHP HTTP Client, into Symfony

• guzzle
• symfony
• php
• bundle

teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.

• ids
• teler
• waf
• teler-ids

JSON Web Token library

• jwt
• jwt-bearer-tokens
• rsa-signature
• hmac

Inject OWASP recommended HTTP Headers for increased security in a single line

• aspnetcore
• middleware
• owasp
• security

🍍Jeff provides the simplest way to manage web sessions in Go.

• golang
• sessions
• http
• session-management

This is quick session for net/http in golang. This package is perhaps the best implementation of the session mechanism, at least it tries to become one.

• go
• golang
• session

This package provides json web token (jwt) middleware for goLang http servers

HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy‌ + Exploit Timing Attacks

• http2
• race-condition
• race-conditions
• scapy

Protect your SIP Servers from bad actors at https://sentrypeer.org

• sip
• voip
• security-tools
• honeypot

gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that you can join on Google Groups: https://groups.google.com/forum/#!topic/gonids/

• suricata
• parse
• security-tools
• network-security

Sockets with pure VB6 impl of TLS encryption

• vb6
• ssl
• tls
• winsock

Elixir Plug to easily add HTTP basic authentication to an app

Content discovery and fuzzing with HTTP/3 support (100k requests per second)