Repository Index

:atom: Social (OAuth1\OAuth2\OpenID\OpenIDConnect) sign with PHP :shipit:

• php
• oauth
• social
• oauth-application

The Ultimate Boilerplate for Products.

• boilerplate
• meteor
• meteorjs
• nodejs

USB Keystroke Injection Protection

Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness

🔒Unified API for password hashing algorithms

• credential
• nodejs
• hash-functions
• security

Machinae Security Intelligence Collector

Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.

• blue-team
• detection-engineering
• edr
• endpoint-detection

honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway

• honeytoken
• honeypot
• security
• deception

A colleciton of CTF write-ups all using pwntools

Fastest 5KB JS implementation of ed25519 signatures

• ed25519
• curve25519
• eddsa
• cryptography

Collection of example YARA-L rules for use within Google Security Operations

Custom apps for the iDrive 7 head unit (shift lights, virtual dyno, brake and drag timers, G-meter, fault scanner) plus an SDK kit to build and install your own.

• automotive
• bmw
• car-hacking
• head-unit

Django web application to store and manage vouchers, coupons, loyalty and gift cards digitally. Supports PWA, offline caching, expiry notifications, transaction histories, file uploads and OIDC SSO.

• coupons
• vouchers
• conventional-commits
• apprise

Using Intel's PIN tool to solve CTF problems

• ctf
• pin
• reverse-engineering
• instruction-counting

A front-end JavaScript toolkit for creating DNS rebinding attacks.

• dns-rebinding
• dns
• hacking
• red-team

A tool for deploying and detecting use of Active Directory honeytokens

Standalone password candidate generator using the PRINCE algorithm

Fast HTTP enumerator

• http
• fuzz
• fuzzer
• enumerator

DNS Rebinding Exploitation Framework

• dns-rebinding
• red-team
• hacking
• web-hacking

Integrated certification via Let's encrypt for Elixir-powered sites

:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

• cybersecurity
• incident-response
• sysinternals
• nirsoft

OWASP Honeypot, Automated Deception Framework.

• owasp
• honeypot
• honeynet
• deception

A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.

• threat
• hunt
• red
• blue