Repository Index

This package provides json web token (jwt) middleware for goLang http servers

Collecting & Hunting for IOCs with gusto and style

• threat
• hunting
• ioc
• security-tools

Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant

Authenticated and encrypted API tokens using modern crypto

• xchacha20-poly1305
• api
• token-authentication
• jwt

Create and verify JSON Web Tokens (JWT) with Deno or the browser.

• deno
• jwt
• jsonwebtoken
• authentication

PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡

• proxy
• tcp
• tcp-proxy
• penetration-testing

Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.

• anti-bot
• behavioral-analysis
• bot-detection
• captcha

JavaScript OAuth 1.0a signature generator (RFC 5849) for node and the browser

'Packet Capture Forensic Evidence eXtractor' is a tool that finds and extracts files from packet capture files

macOS persistence tool

• persistence
• macos

Django application that performs SAST and Malware Analysis for Android APKs

• android-security
• sast
• malware-analysis
• code-security

HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy‌ + Exploit Timing Attacks

• http2
• race-condition
• race-conditions
• scapy

Secure shell history commands by finding sensitive data

• rust
• shell
• bash
• security

Open Source SIEM (Security Information and Event Management system).

• siem
• risk-management
• risk-assessment
• vulnerability-management

ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods.

• research
• anti-debug
• malware

Swordphish Phishing Awareness Tool

Android Loadable Kernel Modules - mostly used for reversing and debugging on controlled systems/emulators

• loadable-kernel-modules
• android-lkms
• emulators
• kernel

Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.

• ai-safety
• ai-security
• claude-code
• llm-agent

Capacitor plugin to make login with Google,Apple,Facebook and so on, simple and fast to implement

• capacitor
• plugin
• capacitor-plugin

🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.

• padding-oracle
• aes
• decryption
• encryption

List of Magento extensions with known security issues.

• magento
• extensions
• vulnerability

:vertical_traffic_light: Block malicious crawlers with Cloudflare Firewall Rules

• cloudflare
• firewall
• user-agent
• firewall-rules

A desktop app where AI agents decompile the games you own into C/C++ that rebuilds them byte for byte.

• ai
• artificial-intelligence
• artificialintelligence
• decompilation

Merge multiple pcap files together, gracefully.

• pcap
• merge
• tcpdump-capture
• packet-processing