This tool analyzes a given Gitlab repository and searches for dangling or force-pushed commits containing potential secret or interesting information.
Repository Index
47,133 repositories indexed
457–480 of 562 · Most stars
Example repository for GitHub Actions Time of Check to Time of Use (TOCTOU vulnerabilities)
- actions
- bugbounty
- cicd
HElib is an open-source software library that implements homomorphic encryption. It supports the BGV scheme with bootstrapping and the Approximate Number CKKS scheme. HElib also includes optimizations for efficient homomorphic evaluation, focusing on effective use of ciphertext packing techniques and on the Gentry-Halevi-Smart optimizations.
Want to crack passwords faster by using a wordlist that fits your 'target audience'? Use WikiRaider.
- wordlist
- wikipedia
- dictionary
- attack
Native WebAuthn/Passkey support for Electron on macOS using Apple's AuthenticationServices framework
- authenticationservices
- electron
- electron-builder
- fido2
End-to-end encryption for data at rest: a C library and CLI with recoverable keys, post-quantum (ML-KEM) key exchange, and user-to-user sharing
- encryption
- stream-encryption
- aes-256-gcm
- ecdh
A pluggable framework for validating user credentials in a Swift server using Kitura
Pyramid web framework session factory backed by Redis
Cumulus. Threat modeling the Clouds.
- card-game
- cornucopia
- elevation-of-privilege
- eop
Web app that can hash/hmac, encrypt/decrypt, and sign/verify the data, debug JWT tokens, parse and edit ASN1 structures, compute diffs, and more
Android Malware Behavior Deleter
PowerSponse is a PowerShell module focused on targeted containment and remediation during incident response.
- powershell
- powershell-modules
- incident-response
- containment
Helper functions and socket classes to perform TLS communication by means of WinAPI (SChannel)
- tls
- delphi
- schannel
- winapi
Library for working with RSA keys using Elixir and OpenSSL ports
XSSMaze is a web service designed to test and improve the performance of security testing tools by providing various cases of XSS vulnerabilities.
A SSH Server in Go that logs username/password combos
Local-first policy gateway for coding agents. Allow, review, or block MCP, shell, SQL, GitHub, and HTTP actions with scoped credentials and signed evidence.
- golang
- observability
- opentelemetry
- policy-engine
A simple, secure, and highly configurable Elixir identity [username | email | id | etc.]/password authentication module to use with Ecto.
🕵️♀️ Find, locate, and query files for ops and security experts ⚡️⚡️⚡️
:dizzy: A coroutines-driven Low & Slow traffic sender, written in Rust
A F# Hawk implementation with a strongly typed API that guides your usage and minimises security programming errors.
Create n-grams of wordlists based on words, characters, or charsets to use in offline password attacks and data analysis
- hashcat
- jtr
- mdxfind
- ngram
Port listener / honeypot in Rust with protocol guessing and safe string display
GitHub App authentication for Go: installation tokens, JWTs and PATs as oauth2.TokenSource, plus webhook signature verification and KMS/HSM signing