Repository Index

CTF in a box. Minimal setup required. (not production-ready yet)

Quick ORM RestServer and RestClient based on mORMot framework

• orm
• mormot
• restserver
• restclient

Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.

Middleware based authorization for Absinthe GraphQL powered by Bodyguard

analyze a web-based network traffic 🕶 to detect central command and control servers

• squid
• network-traffic
• proxy-server
• incident-response

Tool to find code cave in PE image (x86 / x64) - Find empty space to place code in PE files

• codecave
• cpp
• pe
• winapi

eBPF Security Monitoring and Sandboxing Agent Based on Aya

• aya
• bpf
• ebpf
• security

🔑 NaCl.Core, a cryptography library for .NET

• dotnet
• netstandard
• dotnet-core
• chacha20-poly1305

A username/password Strategy for Überauth

• ueberauth
• ueberauth-strategies
• identity
• strategy

AI-powered platform for OSINT intelligence analysis. Features archive discovery with hypothesis-driven investigation, GLiNER entity extraction, Mapbox geospatial visualization, network analysis, and document processing. Built with FastAPI, Next.js, Weaviate, and DSPy.

• ai-agents
• document-processing
• dspy
• entity-extraction

Next.js boilerplate for passwordless authentication with Prisma and next-auth with apollo graphql api with style from tailwindcss

Framework agnostic set of sqlalchemy classes that make building applications that require permissions an easy task.

• python
• pyramid
• flask
• sqlalchemy

OAuth 1.0 for Elixir

• elixir
• oauth
• oauth1

provides a full user authentication experience for an API. Includes login,logout,register,forgot password, forgot username, confirmation email and all that other good stuff. Includes plug for checking for authenticated users and macro for generating the required routes.

ThreatTracker is a Python script designed to monitor and generate alerts on given sets of indicators of compromise (IOCs) indexed by a set of Google Custom Search Engines.

Security and Hacking Tools, Exploits, Proof of Concepts, Shellcodes, Scripts.

Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise

• detection
• splunk
• bpfdoor
• vulnerability

A PE (Portable Executable) packer with Huffman Compression and Xor encryption.

• huffman-compression
• huffman-algorithm
• pe-header
• packer

A collection of authentication-related plugs

Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection

• docker-image
• executable-packing
• malware-packers
• research-platform

🌊 Elixir RSS/ATOM feed builder with a focus on standards compliance, security and extensibility

• elixir
• rss
• atom

Simple tool to extract the most common substrings from an input text. Built for password cracking.

• passwords
• cracking
• string-manipulation
• wordlist-generator

Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents

• claude-code
• cti
• llm
• rag

drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates

• docker
• security
• audit