Repository Index

Modular file scanning/analysis framework

• python
• analytic-machines
• analysis-framework
• python-script

Automated Attack Simulation in the Cloud, complete with detection use cases.

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

• security-tools
• security
• attestation
• verification

Go-Guardian is a golang library that provides a simple, clean, and idiomatic way to create powerful modern API and web authentication.

• golang
• totp
• hotp
• 2fa

Advanced keyboard-walk generator with configureable basechars, keymap and routes

Incident Response Forensic Framework

🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️

• apollo
• apollo-server
• graphql
• security

Linker/Compiler/Tool detector for Windows, Linux and MacOS.

• detect
• reverse-engineering
• signature
• malware-analysis

:white_check_mark: .NET crypto done right. Professionally audited.

• crypto
• cryptography
• c-sharp
• aead

Nginx common useful configuration

• nginx
• configs
• nginx-configuration
• codesandbox

Defanged Indicator of Compromise (IOC) Extractor.

• ioc
• indicators-of-compromise
• library
• ioc-extractor

🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more

• tls
• ssl
• certificate
• keystore

AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.

• ai
• attack-surface-management
• bbot
• cybersecurity

Password cracking rules and masks for hashcat that I generated from cracked passwords.

Simple to use, simple to deploy, one time self destruct messaging service, with hashicorp vault as a backend

• golang
• vault
• security
• secrets

Paaster is a secure and user-friendly pastebin application that prioritizes privacy and simplicity. With end-to-end encryption and paste history, Paaster ensures that your pasted code remains confidential and accessible.

• pastebin
• paaster
• e2ee
• paste

Security libraries for ASP.NET

Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness

DFIRTrack - The Incident Response Tracking Application

• incident-response
• digital-forensics
• dfir
• incident-response-tooling

Catch risky npm dependency changes before they merge.

• dependency-analysis
• devsecops
• github-actions
• malware

honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway

• honeytoken
• honeypot
• security
• deception

Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.

• blue-team
• detection-engineering
• edr
• endpoint-detection

Fastest 5KB JS implementation of ed25519 signatures

• ed25519
• curve25519
• eddsa
• cryptography

Collection of example YARA-L rules for use within Google Security Operations