EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
Repository Index
47,133 repositories indexed
49–59 of 59 · Most stars
drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates
Find which of your direct GitHub dependencies is susceptible to RepoJacking attacks
- golang
- go
- supply-chain
- security
:ghost: :flashlight: Invisible JS code execution & social engineering.
Converts John The Ripper/Cain format hashes (singular, or in bulk) to HashCat compatible hash format.
- hashcat
- ntlmv1-hashcat
- hash-formats
- ntlmv2
A version of TurboPower LockBox2, that is aimed at being compatible with Delphi, FPC and Lazarus 32/64 bit
Node-RED node to read and write to a MySQL or a MariaDB database. Compatible with TLS (SSL) and "Caching SHA2 password" authentication method.
A tool for detecting viruses and NSFW material in WARC files
- antivirus
- nsfw-classifier
- warc
- warc-safe
A script to automate the creation of cloud infrastructure for hash cracking.
- redteam-infrastructure
- redteaming
- pentest-tool
- password-cracker
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
- ansible
- ansible-playbook
- devsecops
- infrastructure-as-code
A small, flexible authorization core for Go, built around subject–action–resource–scope checks.