Repository Index

Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.

• anti-bot
• behavioral-analysis
• bot-detection
• captcha

Django application that performs SAST and Malware Analysis for Android APKs

• android-security
• sast
• malware-analysis
• code-security

macOS persistence tool

• persistence
• macos

HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy‌ + Exploit Timing Attacks

• http2
• race-condition
• race-conditions
• scapy

Secure shell history commands by finding sensitive data

• rust
• shell
• bash
• security

🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️

• finder
• graphql
• security
• spider

Open Source SIEM (Security Information and Event Management system).

• siem
• risk-management
• risk-assessment
• vulnerability-management

ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods.

• research
• anti-debug
• malware

A framework for the JOSE standards JWS, JWE, and JWK written in Swift.

• jws
• jwk
• swift
• jwe

Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.

• ai-safety
• ai-security
• claude-code
• llm-agent

BCrypt is a password hashing function

• bcrypt
• delphi
• hash
• password

WebAppSec Content Security Policy

Android Mobile Device Hardening

• forensic
• security
• hardening
• android-security

Capacitor plugin to make login with Google,Apple,Facebook and so on, simple and fast to implement

• capacitor
• plugin
• capacitor-plugin

🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.

• padding-oracle
• aes
• decryption
• encryption

List of Magento extensions with known security issues.

• magento
• extensions
• vulnerability

:vertical_traffic_light: Block malicious crawlers with Cloudflare Firewall Rules

• cloudflare
• firewall
• user-agent
• firewall-rules

BINNY: an open source agent harness for reverse engineering. Plug in any model, or a local one.

• ghidra
• llm-agent
• malware-analysis
• ollama

Quantum Insert

• quantum-insert
• python
• detection
• pcap

Apache Logfile Security Analyzer

Protect your SIP Servers from bad actors at https://sentrypeer.org

• sip
• voip
• security-tools
• honeypot

JWT implementation in Crystal

• jwt
• crystal

Wraps around various tools and provides some additional checks/information to produce a centralized report of a PE file.

A Flask app template with integrated SQLAlchemy, authentication, and Bootstrap frontend