Repository Index

A developer CLI tool that manages .env files, detects secret leaks, syncs env drift across teammates, and validates environment parity between local/staging/prod all from your terminal. Written in Go.

• cli
• developer-tools
• devops
• dotenv

A multi-purpose, modular medium-interaction honeypot based on Twisted.

• honeypot
• cybersecurity
• twisted
• broker

Prompt-injection firewall for LLM applications — 33 input detectors, 9 output scanners, federated ed25519-signed threat-intel feed. Apache 2.0, 1040 tests, F1 96.0% with 0% false positives. Docker, GitHub Action, LangChain/LlamaIndex/CrewAI integrations.

• agentic-ai
• ai-safety
• fastapi
• langchain

A low-interaction SSH honeypot written in C

• honeypot
• ssh
• security
• ssh-honeypotd

MICROS Honeypot is a low interaction honeypot to detect CVE-2018-2636 in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (MICROS). This is a directory traversal vulnerability.

• honeypot
• micros
• vulnerability
• security

AfterGlow Cloud is a security visualization tool which lets users upload data and visualize the data as graphs on-the-fly (part of Google Summer of Code 2012).

Real-time network traffic analysis in your terminal.

• cli
• ddos
• ddos-detection
• go

Go package for IP2Location.io. Fetch geolocation and proxy data for an IP address, or query WHOIS details for a domain. Integrate an IP geolocation API into Golang backends, microservices and command-line tools. Enrich IPv4 and IPv6 traffic with location intelligence and network details for analytics and security use cases.

• domain-lookup
• golang
• ip-geolocation
• ip2location

Local-LLM alert triage for self-hosted SOCs.

• homelab
• ids
• llm
• ollama

🔥 n01d-forge - Secure Cross-Platform Image Burner with Encryption | LUKS, VeraCrypt, Secure Erase, Hash Verification

• bootable-usb
• cross-platform
• encryption
• etcher-alternative

CalmAV wrapper for elixir

• clamav
• elixir
• antivirus
• malware-detection

Go library MalShare API

• malware
• hash
• threat-intelligence
• threat

🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.

• ansible
• ansible-playbook
• devsecops
• infrastructure-as-code

A plugin based GraphQL vulnerability assessment tool.

• graphql
• graphql-security
• pentest-tool
• python3

Tor control port filter - whitelists which Tor control commands a client can use

• filter
• sandboxing
• security
• tor-control

ada privilege escalation

• ada
• security
• spark
• sudo

A fork of a friendly car security exploration tool for the CAN bus

GoSDDL converter

• sddl
• go
• security
• windows

Crystal shard wrapping the rbsec/sslscan utility

• crystal
• shard
• ssl
• tls

Keep your secrets out of your AI coding agents. A local HTTPS proxy that swaps real credentials with placeholders and injects them at the network boundary.

• ai-agents
• claude-code
• cli
• developer-tools

Encrypted .env files with TOTP unsealing for production deploys. Cross-stack (Node + Java). Zero deps. Defends against npm supply-chain attacks.

• 2fa
• aes-gcm
• dotenv
• encryption

SPARK TOTP library

• spark
• 2fa
• 2fa-security
• ada

Fetch and normalize parameterized URLs from the Wayback CDX API (OSINT, inspired by ParamSpider).

• bugbounty
• cdx
• cli
• kali-linux

The "interpol" security string interpolation library and the "police" command line tool. Just moved here from https://bitbucket.org/vahidi/interpol

• golang
• security-tools