Repository Index

OpenID/Connect, OAuth2, WS-Federation and SAML 2.0 server based on Duende IdentityServer and ITFoxtec Identity SAML 2.0 with its admin UI

• openid-connect
• admin-ui
• iam
• openid

HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.

• malware-analysis
• dynamic-analysis
• security
• linux

Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.

• codereview
• cybersecurity
• ruby
• sinatra

Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.

• pentesting
• security
• chrome-extension
• api-keys

Win Application Framework (WAF) is a lightweight Framework that helps you to create well structured XAML Applications.

• waf
• dotnet
• csharp
• wpf

RSA public/private key generation, RSA, AES encryption/decryption, RSA sign/verify in Swift with CommonCrypto in iOS and OS X

• ios
• crypt
• swift
• rsa

ObjectivePGP is an open-source library for iOS and macOS that provides developers with tools for implementing OpenPGP encryption and decryption, digital signing, and signature verification in their applications, thereby enhancing security and data integrity.

• openpgp
• objective-c
• encryption
• pgp

phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code

• php
• php-codesniffer
• phpcs
• static-code-analysis

🚀 Useful README.md, LICENSE, CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, GitHub Issues, Pull Requests and Actions templates to jumpstart your projects.

• readme
• documentation
• docs
• docs-generator

Andromeda - Interactive Reverse Engineering Tool for Android Applications

• android
• reverse-engineering
• binary-analysis
• static-analysis

MIRACL Cryptographic SDK: Multiprecision Integer and Rational Arithmetic Cryptographic Library is a C software library that is widely regarded by developers as the gold standard open source SDK for elliptic curve cryptography (ECC).

Best Current Practices regarding secure online communication and configuration of services using cryptography.

• cryptography
• applied-cryptography
• documentation
• best-practices

Security Auditor Utility for GraphQL APIs

• security
• penetration-testing
• auditing
• graphql

A simple way of authenticating your RESTful APIs with API keys using Laravel

Scalpel is an open source data carving tool. It is not being actively maintained.

Scirius is a web application for Suricata ruleset management and threat hunting.

• python
• security
• management
• interface

Single C file TLS 1.2/1.3 implementation, using tomcrypt as crypto library

• tls

Fake sshd that logs ip addresses, usernames, and passwords.

MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.

Cryptographic signature algorithms: DSA, ECDSA, Ed25519

• ecdsa
• ed25519
• signatures
• dsa

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

• beacons
• blue-team
• c2
• command-and-control

A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule

List DTDs and generate XXE payloads using those local DTDs.

• xxe
• dtd
• security
• hacktoberfest

A mostly-serverless distributed hash cracking platform