Repository Index

Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.

• ai-safety
• ai-security
• claude-code
• llm-agent

Android Mobile Device Hardening

• forensic
• security
• hardening
• android-security

:vertical_traffic_light: Block malicious crawlers with Cloudflare Firewall Rules

• cloudflare
• firewall
• user-agent
• firewall-rules

A surprisingly configurable convention-based approach to managing your application's custom configuration settings.

Watchtower | Self-hosted AI security assessment, asset intelligence, and evidence workflows.

• ai-agents
• attack-surface-management
• docker
• penetration-testing

A set of cryptographic primitives for building a multi-hop Proxy Re-encryption scheme, known as Transform Encryption.

• cryptography
• rust
• proxy-re-encryption
• transform-encryption

🔑 Paseto.NET, a Paseto (Platform-Agnostic Security Tokens) implementation for .NET

• paseto
• dotnet
• netstandard
• dotnet-core

Content discovery and fuzzing with HTTP/3 support (100k requests per second)

CTF in a box. Minimal setup required. (not production-ready yet)

Honeypot (Dionaea and kippo) setup script

A set of Maltego transforms for VirusTotal Public API v2.0. This set has the added functionality of caching queries on a daily basis to speed up resolutions.

🚀 Production-ready AI-friendly Go REST API boilerplate with Clean Architecture, JWT auth, RBAC, PostgreSQL migrations, and highly tested. AI-optimized with built-in guidelines for most used IDEs. Docker hot-reload, Swagger docs, one-command setup. Build production APIs in minutes, not weeks.

• api
• api-documentation
• authentication
• backend

Framework agnostic set of sqlalchemy classes that make building applications that require permissions an easy task.

• python
• pyramid
• flask
• sqlalchemy

ThreatTracker is a Python script designed to monitor and generate alerts on given sets of indicators of compromise (IOCs) indexed by a set of Google Custom Search Engines.

Paper vault for passwords and secrets

• cryptocurrency
• cryptography
• cybersecurity
• digital-asset-security

A full-featured Swift library for JOSE standards with first-class support for CryptoKit keys, providing JWS, JWT, SD-JWT, and JWE with signing, encryption, and JWK key management.

• jsonwebtoken
• jws
• jwt
• json-web-key

Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection

• docker-image
• executable-packing
• malware-packers
• research-platform

Advanced Phishing Protection: Suricata rulesets open and free

• anti-phishing
• antiphishing
• openphish
• phishing

Cryptographic Dataset Generation & Modelling Framework

• cryptography
• deep-learning
• deep-neural-networks
• machine-learning

Create dataset for suricata with indicators of MISP instances and add sightings in MISP if an indicator of dataset generates an alert

Create n-grams of wordlists based on words, characters, or charsets to use in offline password attacks and data analysis

• hashcat
• jtr
• mdxfind
• ngram

A malware dataset curation tool which helps identify packed samples.

• malware
• packer
• security
• peid

Collection of danish base wordlists for cracking danish passwords (Hashcat, John the Ripper etc.)

• password-cracking
• wordlists
• hashcat-lists
• hashcat

An easy to use licensing system, using asymmetric cryptography to generate and validate licenses.

• jwt
• paseto
• nacl
• authentication