Repository Index

Automated client-side template injection (sandbox escape/bypass) detection for AngularJS v1.x.

• angularjs
• xss
• xss-scanners
• exploit

Respounder detects presence of responder in the network.

• responder
• golang
• network-security-monitoring
• network-security

One-Step APK Decompilation With Multiple Backends

A production-ready SaaS template built with Next.js 15, Supabase, and Tailwind CSS. Includes authentication, user management, file storage, task management demos, and secure RLS policies. Now with a complete React Native + Expo mobile app template! Easily customizable with pre-built themes, i18n support (EN/PL/ZH), and legal documents.

• nextjs
• react
• sass
• supabase

The universe in numbers. Free, open-source calculators for everything countable.

• astro
• bun
• calculator
• calculators

Inject OWASP recommended HTTP Headers for increased security in a single line

• aspnetcore
• middleware
• owasp
• security

Compilation of autoexec scripts and mods for Xiaomi Yi camera after reverse engineering of firmware.

• reverse-engineering
• xiaomi
• xiaomi-firmware
• xiaomi-camera

HAT (Hashcat Automation Tool) - An Automated Hashcat Tool for common wordlists and rules to speed up the process of cracking hashes during engagements. Created for Linux based systems

Python telnet honeypot for catching botnet binaries

• honeypot
• telnet-server
• malware
• botnet

Java implementation of Tink

• crypto
• cryptography
• java
• security

🚀AutoRuns is a PowerShell module that will help do live incident response and enumerate autoruns artifacts that may be used by legitimate programs as well as malware to achieve persistence.

The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups

• active-directory
• cheatsheet
• ctf
• cybersecurity

Universal web application security sensor intended for real-time monitoring and defense.

A collection of useful utility functions

• utility
• utilities
• string
• strings

inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques

• forensics
• hypervisor
• memory-dump
• reverse-engineering

Splunk code (SPL) for serious threat hunters and detection engineers.

• splunk
• threat-hunting
• use-case
• siem

👤Minimalist Google OAuth Authentication for Elixir Apps. Tested, Documented & Maintained. Setup in 5 mins. 🚀

• elixir
• google
• google-api
• auth

A USB proxy based on raw-gadget and libusb

• usb
• proxy
• libusb
• otg

Automatically exported from code.google.com/p/creddump

Elliptic curve cryptography functions: Private Key, Public Key, Signature, AES, Encryption, Decryption

Very fast, high-quality hash function, discrete-incremental and streamed hashing-capable (non-cryptographic, header-only C/C++) 27GB/s + PRNG

• hash
• hashing
• hashing-algorithm
• hash-function

:key: Idiotproof golang password validation library inspired by Python's passlib

Cryptographic library for Embarcadero Delphi and potentially for FPC as well

• delphi
• key-deviation-algorithms
• cryptographic-checksums
• kdf1

Inspektor is a protocol-aware proxy that is used to enforce access policies👮

• security
• openpolicyagent
• acl
• rust