HIBA is a system built on top of regular OpenSSH certificate-based authentication that allows to manage flexible authorization of principals on pools of target hosts without the need to push customized authorized_users files periodically.
Repository Index
47,133 repositories indexed
25–48 of 52 · Most stars
The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups
- active-directory
- cheatsheet
- ctf
- cybersecurity
Automatically exported from code.google.com/p/creddump
Flash Development Tools
THE MOST POWERFUL OFFENSIVE AI AGENT FOR PENTESTING , OSINT , AND ETHICAL HACKING
- ai-bug-bounty
- ai-bug-finder
- ai-bug-reporter
- ai-hacking
PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡
- proxy
- tcp
- tcp-proxy
- penetration-testing
:vertical_traffic_light: Block malicious crawlers with Cloudflare Firewall Rules
- cloudflare
- firewall
- user-agent
- firewall-rules
Threat Intelligence Quotient Test - Dataviz and Statistical Analysis of TI feeds
Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️
- devsecops
- entropy
- gdpr
- golang
Automatically exported from code.google.com/p/jsunpack-n
Open-source agentic security operations platform:
- agentic-security
- cyber-security
- cyber-threat-intelligence
- cybersecurity
Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.
- cybersecurity
- hacking
- iast
- dast
Reverse proxy with automatically obtains TLS certificates from Let's Encrypt
A library designed to generate cryptographically strong random numbers suitable for managing data such as passwords, account authentication, security tokens, and related secrets.
Dynamically generate self-signed certificates and certificate authorities for Go tests
- golang
- certificate-generation
- go
- testing
brute force SSH public-key authentication
- ssh
- penetration-testing
- remote-admin-tool
- ssh-key
AI-powered platform for OSINT intelligence analysis. Features archive discovery with hypothesis-driven investigation, GLiNER entity extraction, Mapbox geospatial visualization, network analysis, and document processing. Built with FastAPI, Next.js, Weaviate, and DSPy.
- ai-agents
- document-processing
- dspy
- entity-extraction
Creates a readable stream producing cryptographically strong pseudo-random data using `crypto.randomBytes()`
- random-bytes
- random
- crypto
- pseudo-random-generator
Bind/Reverse Shells, SOCKS, etc over Tor in Golang
- tor
- ethical-hacking
- reverse-shell
- bind-shell
Markov-chains for linguistically-correct password cracking
Micropython package for doing fast rsa and elliptic curve cryptography, specifically digital signatures
- cryptography
- elliptic-curves
- micropython
- rsa
A vulnerability patch gathering tool
Data policy IN, dynamic view OUT: PACE is the Policy As Code Engine. It helps you to programatically create and apply a data policy to a processing platform like Databricks, Snowflake or BigQuery (or plain 'ol Postgres, even!) with definitions imported from Collibra, Datahub, ODD and the like.
- data-catalog
- data-processing
- policy-enforcement
- bigquery
Practical security policy enforcement for Android apps via bytecode rewriting and in-place reference monitor