Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
- security-tools
- security
- attestation
- verification
47,133 repositories indexed
457–480 of 985 · Most stars
Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
Go-Guardian is a golang library that provides a simple, clean, and idiomatic way to create powerful modern API and web authentication.
Nintendo Switch userland code execution using Civilization 7 game cartridge
Advanced keyboard-walk generator with configureable basechars, keymap and routes
CuckooDroid - Automated Android Malware Analysis with Cuckoo Sandbox.
🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️
Linker/Compiler/Tool detector for Windows, Linux and MacOS.
:white_check_mark: .NET crypto done right. Professionally audited.
Defanged Indicator of Compromise (IOC) Extractor.
🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more
bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
OmniAuth strategy for Twitter
Malware exploits
Paaster is a secure and user-friendly pastebin application that prioritizes privacy and simplicity. With end-to-end encryption and paste history, Paaster ensures that your pasted code remains confidential and accessible.
A django OpenID Connect library
The Ultimate Boilerplate for Products.
Security libraries for ASP.NET
An implementation of JOSE standards (JWE, JWS, JWT) in Go
Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
🔒Unified API for password hashing algorithms
Yet another static code analyzer for malicious Android applications
Catch risky npm dependency changes before they merge.
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
Collection of example YARA-L rules for use within Google Security Operations