A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.
- in-toto
- software-supply-chain
- security
Repository Index
47,133 repositories indexed
505–528 of 731 · Most stars
Harden Your Security Headers For Vapor
- brokenhands
- swift
- vapor
- server-side-swift
A platform to develop, run and administer CTF competitions. This is the online echoCTF.RED platform source code
- ctf
- echoctf
- cybersecurity
- hacking
GasPot originally released at Blackhat 2015 - Updated for the same stuff 2026
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
Scalable Binary Data Extraction in Hadoop
Validates passwords against PHP's password_hash function using PASSWORD_DEFAULT. Will rehash when needed, and will upgrade legacy passwords with the Upgrade decorator.
Highly modular & configurable hash & crypto library
- octavo
- crypto-library
- rust
- crypto
SPARK 2014 re-implementation of the TweetNaCl crypto library
Z-Hound — a CSV-first collector that finds public threat reports and extracts structured IoCs without a database, LLM, or API key.
Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.
- networking
- udp
- ipv6
- ipv4
Sym is a command line utility and a Ruby API that makes it trivial to encrypt and decrypt sensitive data. Unlike many other existing encryption tools, sym focuses on usability and streamlined interface (CLI), with the goal of making encryption easy and transparent. The result? There is no excuse for keeping your application secrets unencrypted :)
The VBCorLib framework brings many of the powerful .NET classes to VB6.
- collections
- hashing
- biginteger
- encoding
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
- exploit
- php
- php2shell
- php2shell-cve
Haskell oauth2 binding
- oauth2
- oauth2-client
- haskell
- identity
Scans SPF and DMARC records for issues that could allow email spoofing.
Elixir Plug library to enable SAML 2.0 SP SSO in Phoenix/Plug applications.
- saml2-sp-sso
- saml-assertion
- plug-pipeline
The fastest 128-bit and 256-bit hash, passes all tests, and under 140 source lines of code. API library and CLI tool in C++ and NodeJS/Wasm
- call-for-papers
- cryptanalysis
- cryptanalysis-tasks
- cryptography
The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.
- ai-agents
- bug-bounty
- electron
- offensive-security
php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.
- cve
- hestiacp
- opencart
- php
Randomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.
Open-source agentic security operations platform:
- agentic-security
- cyber-security
- cyber-threat-intelligence
- cybersecurity
Stream encryption & decryption with libsodium and protobuf
- crypto
- cryptography
- protobuf
- libsodium
BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)