Repository Index

Advanced Honeypot framework.

• honeypot
• framework
• security

The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.

• csrf
• crawler
• csrf-attacks
• token-generation

RSA public/private key encryption in Swift

• swift
• ios
• encryption
• rsa

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.

• github-actions
• actions
• supply-chain-security
• hardening

DRAKVUF Black-box Binary Analysis

• malware-analysis
• virtualization
• xen
• introspection

☁️ Python package for interacting with Steam

• steam
• valve
• steamworks
• webapi

Automated Encryption Framework

Digital Forensics artifact repository

Automated Red Team Infrastructure deployement using Docker

• offensive
• pentest
• bugbounty
• hacking

Some public notes

• nodejs
• security
• npm
• travis-ci

Facebook OAuth2 Strategy for OmniAuth

A modular vulnerability scanner with automatic report generation capabilities.

• artemis
• pentesting
• security
• security-scanner

Coherence is a full featured, configurable authentication system for Phoenix

• elixir
• phoenix-framework
• authentication
• hex

🍯 Unobtrusive and flexible spam protection for Rails apps

• honeypot
• rails
• anti-spam
• captcha

A collection of practical security-focused guides and checklists for smart contract development

• crypto
• security
• security-tools
• smart-contracts

Collection of android malware samples

npm package for OpenID Connect, OAuth Code Flow with PKCE, Refresh tokens, Implicit Flow

• openid
• angular
• implicit-flow
• npm

Software Supply Chain Transparency Log

• supply-chain
• provenance
• security
• transparency-log

Custom & better AppArmor profile generator for Docker containers.

• docker
• apparmor-profile
• apparmor
• containers

Procyon is a suite of Java metaprogramming tools, including a rich reflection API, a LINQ-inspired expression tree API for runtime code generation, and a Java decompiler.

:rocket: An open source alternative to searx which provides a modern-looking :sparkles:, lightning-fast :zap:, privacy respecting :disguised_face:, secure :lock: meta search engine

• meta-search-engine
• rust
• search-engine
• fast

A collection of AWS penetration testing junk

Reverse engineer anything with agents, from app behavior down to native binaries.

Package gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services 🔒

• csrf-protection
• gorilla
• middleware
• golang