Repository Index

Best Current Practices regarding secure online communication and configuration of services using cryptography.

• cryptography
• applied-cryptography
• documentation
• best-practices

Security Auditor Utility for GraphQL APIs

• security
• penetration-testing
• auditing
• graphql

TranslatedFull-Chain Sentinel (全链哨兵, "full-chain sentinel") is a cybersecurity Agent that integrates web penetration testing, Android app security testing, iOS app security testing, batch target probing for offensive and defensive operations, automated emergency response, and open-source vulnerability monitoring. It is used to assist with automating security service delivery. Use for illegal purposes is prohibited.

• agent
• blue-team
• cybersecurity
• cybersecurity-tools

Scalpel is an open source data carving tool. It is not being actively maintained.

Safe, simple and fast JSON Web Tokens for Go

• jwt
• jwt-token
• jwt-claims
• dependency-free

Single C file TLS 1.2/1.3 implementation, using tomcrypt as crypto library

• tls

Galah: An LLM-powered web honeypot.

• golang
• honeypot
• llm
• openai

A tool for studying JavaScript malware.

• malware
• malwareanalysis
• nodejs
• es6

MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.

Cryptographic signature algorithms: DSA, ECDSA, Ed25519

• ecdsa
• ed25519
• signatures
• dsa

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

• beacons
• blue-team
• c2
• command-and-control

A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule

List DTDs and generate XXE payloads using those local DTDs.

• xxe
• dtd
• security
• hacktoberfest

CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.

Tool to gather Threat Intelligence indicators from publicly available sources

Documenting the unofficial and internal Steam Web API

• documentation
• docs
• wiki
• api-documentation

Charm: A Framework for Rapidly Prototyping Cryptosystems

• python
• cryptography
• prototyping

GUI frontend to John the Ripper password cracker

• gui
• qt
• john
• password

Tiny hashing module that uses the native crypto API in Node.js and the browser

• hashing
• hash-functions
• sha256
• crypto

WinDBG Anti-RootKit Extension

• kernel-mode
• c-plus-plus
• malware
• malware-analysis

Easy to use OAuth 2 library for iOS, written in Swift.

• swift
• oauth2

Codesign Electron macOS apps

• electron-osx-sign
• macos
• entitlements
• provisioning-profiles

:no_entry: (DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.

• security
• dfir
• forensics

Elixir encryption library designed for Ecto

• elixir
• encryption
• ecto
• hex