47,133 repositories indexed
49–72 of 144 · Most stars
Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.
APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
A multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks.
ThePhish: an automated phishing email analysis tool
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
PHP library for Two Factor Authentication (TFA / 2FA)
Malcom - Malware Communications Analyzer
IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.
Extract and aggregate threat intelligence.
Simple authorization conventions for Phoenix apps
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
A simple way of authenticating your RESTful APIs with API keys using Laravel
Scirius is a web application for Suricata ruleset management and threat hunting.
MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
Tool to gather Threat Intelligence indicators from publicly available sources
Defanged Indicator of Compromise (IOC) Extractor.
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
Collection of example YARA-L rules for use within Google Security Operations
Samsung Tizen root
Using Intel's PIN tool to solve CTF problems