Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
Lightweight Certificate Transparency Log Monitor
- certificate-transparency
- pki
- x509
- security
A pure Python HTML5 parser that just works. No C extensions to compile. No system dependencies to install. No complex API to learn.
🕵️ Tool to reverse-engineer Protocol Buffers with unknown definition
A powerful and easy to configure uptime and ssl monitor
Android Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents an on-device app to test for recent device vulnerabilities.
30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)
BitCracker is the first open source password cracking tool for memory units encrypted with BitLocker
Authorization package for Meteor, compatible with built-in accounts packages
BlockBlock provides continual protection by monitoring persistence locations.
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
Use Apple FaceID or TouchID authentication in your app using BiometricAuthentication.
Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteur réseau temps réel + pare-feu sortant, agent de flotte Rust, exports SIEM. 100 % local.
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
- blue-team
- detection-engineering
- edr
- endpoint-detection
honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway
A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
A Linux packet crafting tool.
Easy permission definitions in Elixir apps!
Auditable & minimal JS implementation of public-key post-quantum cryptography
- dilithium
- kyber
- ml-kem
- post-quantum-cryptography
Linux Security and Monitoring Scripts
Respounder detects presence of responder in the network.
- responder
- golang
- network-security-monitoring
- network-security
The universe in numbers. Free, open-source calculators for everything countable.
Universal web application security sensor intended for real-time monitoring and defense.