Repository Index

DDoS attacks over Tor

• ddos
• ddos-tool
• ddos-attack
• ddos-script

Discover internet-wide misconfigurations while drinking coffee

• cybersecurity
• scanner
• golang
• osint

[MIRROR] unofficial implementation of Dante protocol (Audio over IP)

• audio-over-ip
• dante
• reverse-engineering
• aoip

Evidence-based DSM ransomware recovery: preservation, RAM key recovery, copy decryption, and GitLab validation.

Reverse engineering tool for automatic structure recovering and memory use analysis based on DynamoRIO and Capstone

Autonomous OODA-loop pentesting agent. Hermes brain, Kali + Playwright tools over MCP, ATT&CK as the Orient language.

• ai-agents
• autonomous-agents
• kali-linux
• llm-agents

Protect your SIP Servers from bad actors at https://sentrypeer.org

• sip
• voip
• security-tools
• honeypot

EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.

A Java library that implements a ByteChannel interface over SSLEngine, enabling easy-to-use (socket-like) TLS for Java applications.

• java
• ssl
• tls
• networking

A SDK for the creation of analysis tools without obtaining app source code in order to profile runtime performance, examine code coverage, and track high-risk behaviors of a given app on Android 5.0 and above.

• binary-instrument
• android
• malware-research
• reverse-engineering

Low interaction honeypot designed for Android Debug Bridge over TCP/IP

Content discovery and fuzzing with HTTP/3 support (100k requests per second)

Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.

• cybersecurity
• hacking
• iast
• dast

AI-powered platform for OSINT intelligence analysis. Features archive discovery with hypothesis-driven investigation, GLiNER entity extraction, Mapbox geospatial visualization, network analysis, and document processing. Built with FastAPI, Next.js, Weaviate, and DSPy.

• ai-agents
• document-processing
• dspy
• entity-extraction

Bind/Reverse Shells, SOCKS, etc over Tor in Golang

• tor
• ethical-hacking
• reverse-shell
• bind-shell

Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.

• bpf
• ebpf
• forensics
• golang

Foremost is a console program to recover files based on their headers, footers, and internal data structures. c.f., http://foremost.sourceforge.net/

Cloverleaf is a free, open source app to replace your password manager without storing your passwords anywhere.

• password-manager
• password-generator
• security
• password-vault

Proof of concept denial of service over TOR stress test tool

End-to-end encryption for data at rest: a C library and CLI with recoverable keys, post-quantum (ML-KEM) key exchange, and user-to-user sharing

• encryption
• stream-encryption
• aes-256-gcm
• ecdh

Fast incident overview

Data policy IN, dynamic view OUT: PACE is the Policy As Code Engine. It helps you to programatically create and apply a data policy to a processing platform like Databricks, Snowflake or BigQuery (or plain 'ol Postgres, even!) with definitions imported from Collibra, Datahub, ODD and the like.

• data-catalog
• data-processing
• policy-enforcement
• bigquery

Local-first policy gateway for coding agents. Allow, review, or block MCP, shell, SQL, GitHub, and HTTP actions with scoped credentials and signed evidence.

• golang
• observability
• opentelemetry
• policy-engine

passfab-unlocker: Offline Password Recovery Desktop Software with Full Feature Set

• automation
• desktop
• developer-tools
• device-recovery