Repository Index

Port of TweetNaCl cryptographic library to JavaScript

• crypto
• javascript
• authentication
• signature

A pre-execution guard for AI coding agents. It blocks destructive Git and file system commands, plus common attempts to access sensitive files, before a tool call runs. Supports Amp Code, Antigravity CLI, Claude Code, Codex, Cursor, DeepSeek Harness, Devin CLI, GitHub Copilot CLI, Grok Build, Hermes Agent, Kimi Code, OpenClaw, OpenCode, and Pi.

• claude
• claude-code
• claude-code-plugin
• security

Computer Vision library for human-computer interaction. It implements Head Pose and Gaze Direction Estimation Using Convolutional Neural Networks, Skin Detection through Backprojection, Motion Detection and Tracking, Saliency Map.

• convolutional-neural-networks
• motion-tracking
• color-detection
• face-detection

Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.

• php
• access-control
• audit
• browser-extension

Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection

• ida-plugin
• taint-analysis
• reverse-engineering
• disassembly

An authentication system generator for Rails applications.

• rails
• ruby
• authentication
• generator

The Offensive Manual Web Application Penetration Testing Framework.

• web-penetration-testing
• reconnaissance
• vulnerability-analysis
• scanning-enumeration

Analyze the security of any domain by finding all the information possible. Made in python.

A tool for automating cracking methodologies through Hashcat from the TrustedSec team.

Curated reverse-engineering tools and learning resources for binaries, apps, firmware, formats, and protocols.

• awesome-list
• binary-analysis
• ghidra
• malware-analysis

UEFI pre-driver NVIDIA GPU unlocker for Windows Linux Hackintosh and all EFI-bootable system (Rust): SEC2 scrubber -> FWSEC/WPR2 -> signed Booter -> V67 four-write payload, read-back verified. Verified on most RTX 20 30 40 Series.

A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.

• threat-modeling
• practical-devsecops
• security-review
• devsecops-university

PHP Captcha library

• captcha
• php
• security
• bots

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

• graphql
• security-scanner
• graphql-security
• api-documentation-tool

Checklist of security precautions for Ruby on Rails applications.

• ruby
• ruby-on-rails
• rails
• security

media streaming framework and teleconferencing system written in rust

• rust
• rust-lang
• zoom
• actix-web

A curated list of awesome Security Hardening techniques for Windows.

• windows
• hardening
• security

A jQuery plugin that assists scrolling and snaps to sections.

Database anonymization and test data management

• golang
• obfuscation
• postgresql
• security

Security-focused static analysis for the Phoenix Framework

• static-analysis
• phoenix-framework
• security
• elixir

RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact

• hacktoberfest
• rdp
• pentest
• honeypot

DreamFactory is a secure, self-hosted enterprise data access platform that provides governed API access to any data source, connecting enterprise applications and on-prem LLMs with role-based access and identity passthrough.

• dreamfactory
• laravel
• framework
• php

DOM fuzzer

• fuzzing
• security
• dom

Provides iteration per second benchmarking for Ruby