Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).
Repository Index
47,133 repositories indexed
49–72 of 122 · Most stars
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
Framework for Making Environmental Keyed Payloads (NO LONGER SUPPORTED)
- powershell
- golang
- python
- clueless-agents
Tiny hashing module that uses the native crypto API in Node.js and the browser
WinDBG Anti-RootKit Extension
- kernel-mode
- c-plus-plus
- malware
- malware-analysis
Modular file scanning/analysis framework
- python
- analytic-machines
- analysis-framework
- python-script
Go-Guardian is a golang library that provides a simple, clean, and idiomatic way to create powerful modern API and web authentication.
A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
- threat
- hunt
- red
- blue
A modern and easy-to-use cryptographic library for .NET based on libsodium
- aead
- aes-gcm
- blake2b
- chacha20-poly1305
Very simple SAML 2.0 consumer module for ASP.NET/C#
- saml
- asp-net
- single-sign-on
- asp-net-mvc
Modified edition of cuckoo
A modular OSINT honeypot for blue teamers
Compilation of autoexec scripts and mods for Xiaomi Yi camera after reverse engineering of firmware.
- reverse-engineering
- xiaomi
- xiaomi-firmware
- xiaomi-camera
🚀AutoRuns is a PowerShell module that will help do live incident response and enumerate autoruns artifacts that may be used by legitimate programs as well as malware to achieve persistence.
Enable root SSH on BMW MGU head units (iDrive 7 / ID8 BDC3 / ID8 BCP) over ENET - flash the debug image, enroll, persistent SSH with no B7F8E5 DTC, and a unique per-car key.
- developer-mode
- idrive
- idrive7
- root
The JavaScript Crypto Library provides web developers with an extensive and efficient set of cryptographic functions. The library aims to obtain maximum execution speed while preserving modularity and reusability. The library is released as open source under a BDS license.
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
- cve-2026-109618
- cve-2026-109619
- exploit
- mod-php
Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities
- ebpf
- security
- linux-kernel
- linux-security-module
Modified edition of cuckoo
A modular Python application to collect intelligence for malicious hosts.
- cybersecurity
- investigation
Hashing for Modern Object Pascal
- delphi
- fpc
- checksum
- stream
Crypto for Modern Object Pascal
- ecdsa
- cryptography
- delphi
- fpc
Lightweight module to generate Steam-style TOTP auth codes.
THE MOST POWERFUL OFFENSIVE AI AGENT FOR PENTESTING , OSINT , AND ETHICAL HACKING
- ai-bug-bounty
- ai-bug-finder
- ai-bug-reporter
- ai-hacking