Repository Index

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

Pterodactyl® is a free, open-source game server management panel built with PHP, React, and Go. Designed with security in mind, Pterodactyl runs all game servers in isolated Docker containers while exposing a beautiful and intuitive UI to end users.

• laravel
• opensource
• mit
• docker

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

• lolbins
• lolscripts
• redteam
• blueteam

Sandbox for developing and testing UI components in isolation

• react
• devtools
• ui
• components

The open-source, privacy-friendly CAPTCHA you host yourself. Bots and AI agents out, people in.

• captcha
• javascript
• proof-of-work
• antispam

Tuta is an email service with a strong focus on security and privacy that lets you encrypt emails, contacts and calendar entries on all your devices.

• javascript
• mithril
• encryption
• email

This is a multi-use bash script for Linux systems to audit wireless networks.

• evil-twin
• wps
• security
• beef

Scripted Local Linux Enumeration & Privilege Escalation Checks

Password protect a static HTML page, decrypted in-browser in JS with no dependency. No server logic needed.

• static-html
• encryption
• html
• password

Cyber Security ALL-IN-ONE Platform

• redteam
• redteam-tools
• hacking-tools
• scanner

JWA, JWS, JWE, JWT, JWK, JWKS for Node.js, Browser, Cloudflare Workers, Deno, Bun, and other Web-interoperable runtimes

• jose
• jwa
• jwe
• jwk

Token-based AngularJS Authentication

🚀🎉📚 SaaS Boilerplate built with Next.js + Tailwind CSS + Shadcn UI + TypeScript. ⚡️ Full-stack React application with Auth, Multi-tenancy, Roles & Permissions, i18n, Landing Page, DB, Logging, Testing

• authentication
• boilerplate
• multi-tenancy
• nextjs

▦ Universal, standards-based auth provider.

TranslatedDeepAudit: An AI hacker team for everyone, putting vulnerability discovery within reach. Beginners can deploy and run it with one click, with autonomous collaborative auditing + automated sandbox PoC verification. Supports private deployment with Ollama and one-click report generation. Supports relay stations. Making security no longer expensive and auditing no longer complicated.

• ai
• bug-detection
• code-audit
• code-quality

[DEPRECATED] Stanford Javascript Crypto Library

The all-in-one browser extension for offensive security professionals 🛠

• reverse-shell
• hacking
• hack-tools
• chrome-extension

CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access

• authorization
• permissions
• acl
• cancan

autonomous red teaming platform; multi-agent offensive-security meta-harness

• agents
• ai
• multi-agent
• offensive-security

The user infrastructure platform. You choose the frontend, backend, and database. Hexclave handles everything else.

• authentication
• nextjs
• oauth
• auth0

A tiny (18.5 kB gzip), zero-dependency, Javascript library to perform OpenSSL RSA Encryption, Decryption, and Key Generation.

Reverse engineering WhatsApp Web.

• whatsapp
• node
• whatsapp-web
• encryption

Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.

An all-in-one hacking tool to remotely take over Android devices.

• adb
• android
• android-debug-bridge
• cybersecurity