Repository Index

Real-time secret-leak guardrails for AI coding agents (Claude Code, Codex), Git hooks, and CI.

• ai-agents
• claude-code
• claude-code-plugin
• codex

Cumulus. Threat modeling the Clouds.

• card-game
• cornucopia
• elevation-of-privilege
• eop

Cryptographic Dataset Generation & Modelling Framework

• cryptography
• deep-learning
• deep-neural-networks
• machine-learning

OpenID-Login through Steam for your website

• steam-login
• steam-api
• steam
• openid-client

Data policy IN, dynamic view OUT: PACE is the Policy As Code Engine. It helps you to programatically create and apply a data policy to a processing platform like Databricks, Snowflake or BigQuery (or plain 'ol Postgres, even!) with definitions imported from Collibra, Datahub, ODD and the like.

• data-catalog
• data-processing
• policy-enforcement
• bigquery

PowerSponse is a PowerShell module focused on targeted containment and remediation during incident response.

• powershell
• powershell-modules
• incident-response
• containment

Helper functions and socket classes to perform TLS communication by means of WinAPI (SChannel)

• tls
• delphi
• schannel
• winapi

Website to Scrapping all writeup from http://ctftime.org/ and you can organize which to read first!

A SSH Server in Go that logs username/password combos

Authorisation module for the Play! framework

A simple, secure, and highly configurable Elixir identity [username | email | id | etc.]/password authentication module to use with Ecto.

AWSDoor is a red team automation tool designed to simulate advanced attacker behavior in AWS environments

Create dataset for suricata with indicators of MISP instances and add sightings in MISP if an indicator of dataset generates an alert

Crypto Puzzles is a tool and library to provide a bunch of functions for encryption or pseudo encryption as puzzles or brain teasers. Awesome for kids but some puzzles are also a challenge for adults.

• crypto
• puzzle
• puzzle-game
• puzzle-generator

Create n-grams of wordlists based on words, characters, or charsets to use in offline password attacks and data analysis

• hashcat
• jtr
• mdxfind
• ngram

Self-hosted AI-assisted CTI-to-detection workbench for ATT&CK mapping, IOC/CVE intelligence, Threat Radar, malware triage, Attack Simulation, and SIEM validation.

• cybersecurity
• docker
• fastapi
• llm

IOS/MAC Denial-Of-Service [POC/EXPLOIT FOR MASSIVE ATTACK TO IOS/MAC IN NETWORK]

• cve
• security
• hacking
• exploit

passfab-unlocker: Offline Password Recovery Desktop Software with Full Feature Set

• automation
• desktop
• developer-tools
• device-recovery

Prevent your secrets from leaking into logs, std* etc.

• go
• secrets

Session based authentication and role based security for a Pyramid web application.

Statically compiled, zero-dependency Git pre-commit secret scanner and credentials detector written in Go. An alternative to Gitleaks and git-secrets.

• aho-corasick
• cybersecurity
• devops
• git-hook

Packing detection tool for PE files

• detector
• pe-file
• pe-format
• peid

Plug that adds various HTTP Headers to make Phoenix/Elixir app more secure

• hex
• plug
• phoenix
• elixir

Ciao is an easy-to-use Common Lisp OAuth 2.0 client library. It is a port of the Racket OAuth 2.0 Client (package: webapi) to Common Lisp.

• common-lisp
• oauth2-client
• oauth2