Repository Index

Declarative style of authorization and validation in laravel.

• laravel
• laravel-package
• php
• laravel-acl

Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.

• anti-crawling
• cloud-native
• crawler
• deception

Multi-role and whitelist based authorization gem for Rails (and not only Rails!)

• ruby
• cancan
• rails
• access-control

List DTDs and generate XXE payloads using those local DTDs.

• xxe
• dtd
• security
• hacktoberfest

Java cryptographic library that supports Argon2, bcrypt, scrypt and PBKDF2 aimed to protect passwords in databases. Easy to use by design, highly customizable, secure and portable. All the implementations follow the standards and have been reviewed to perform better in the JVM.

• pbkdf2
• bcrypt
• scrypt
• argon2

tool for generating wordlists or extending an existing one using mutations.

• cracking
• hash
• hashcat
• infosec

Various wordlists FR & EN - Cracking French passwords

• wordlists
• hashcat
• french
• cracking-hashes

HAT (Hashcat Automation Tool) - An Automated Hashcat Tool for common wordlists and rules to speed up the process of cracking hashes during engagements. Created for Linux based systems

👤Minimalist Google OAuth Authentication for Elixir Apps. Tested, Documented & Maintained. Setup in 5 mins. 🚀

• elixir
• google
• google-api
• auth

Advanced, but minimalistic Next.js and Apollo starter

• typescript
• react
• apollo
• testing-library

List of Magento extensions with known security issues.

• magento
• extensions
• vulnerability

Hascat Rules Collection – Probably the largest collection of hashcat rule-files anywhere.

• hashcat
• hashcat-rules
• hashcat-rule
• password-cracking

TranslatedPassword generation tool: flexible and scriptable password dictionary generator which can support brute-force, combination, complex rule mode etc...

• password-generator
• password-dictionaries
• wordlist-generator
• brute-force

Modern honeypot supporting multiple services, realistic website cloning, and AI-powered features

• cybersecurity
• honeypot
• python
• ai

Extract the information needed from the Manifest.plist files to convert it to hashes compatible with hashcat

Words list generator to crack security tokens

Custom password cracking rules for Hashcat and John the Ripper

• password-cracking
• hashcat
• johntheripper
• jtr

Simple tool to extract the most common substrings from an input text. Built for password cracking.

• passwords
• cracking
• string-manipulation
• wordlist-generator

Open source tools for realistic-behaving electric grid honeynets

A minimalist Crystal authorization system inspired by https://github.com/varvet/pundit.

• praetorian
• crystal
• authorization
• authorisation

Phraser is a phrase generator using n-grams and Markov chains to generate phrases for passphrase cracking. The generated phraselists can be used as wordlists in your favourite password cracking application.

Collection of hashcat lists and things.

• hashcat
• hashcat-rules
• hashcat-masks
• password-cracking

PocketBase + SvelteKit (Static): minimalistic template with configured authorization featuring a single binary or Docker image for deploying.

• pocketbase
• sveltekit
• authorization

Want to crack passwords faster by using a wordlist that fits your 'target audience'? Use WikiRaider.

• wordlist
• wikipedia
• dictionary
• attack