Repository Index

Cryptographic signature algorithms: DSA, ECDSA, Ed25519

• ecdsa
• ed25519
• signatures
• dsa

A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

• beacons
• blue-team
• c2
• command-and-control

List DTDs and generate XXE payloads using those local DTDs.

• xxe
• dtd
• security
• hacktoberfest

CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.

OpenID Connect Library for Rust

• oauth2-client
• oauth2-authentication
• openid-connect
• openid-client

Making Laravel Passport work with Lumen

• lumen
• passport
• jwt
• oauth2

WinDBG Anti-RootKit Extension

• kernel-mode
• c-plus-plus
• malware
• malware-analysis

Easy to use OAuth 2 library for iOS, written in Swift.

• swift
• oauth2

Codesign Electron macOS apps

• electron-osx-sign
• macos
• entitlements
• provisioning-profiles

:no_entry: (DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.

• security
• dfir
• forensics

An opinionated production-ready SQL-/Swagger-first RESTful JSON API written in Go, highly integrated with VSCode DevContainers by allaboutapps.

• golang-development
• vscode-devcontainers
• golang
• go

Modular file scanning/analysis framework

• python
• analytic-machines
• analysis-framework
• python-script

Automated Attack Simulation in the Cloud, complete with detection use cases.

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

• security-tools
• security
• attestation
• verification

Nintendo Switch userland code execution using Civilization 7 game cartridge

Advanced keyboard-walk generator with configureable basechars, keymap and routes

CuckooDroid - Automated Android Malware Analysis with Cuckoo Sandbox.

🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️

• apollo
• apollo-server
• graphql
• security

JD-Core is a JAVA decompiler written in JAVA.

:white_check_mark: .NET crypto done right. Professionally audited.

• crypto
• cryptography
• c-sharp
• aead

🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more

• tls
• ssl
• certificate
• keystore

bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.

• xss
• bxss
• security
• bugbounty

AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.

• ai
• attack-surface-management
• bbot
• cybersecurity