AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.
- ai
- attack-surface-management
- bbot
- cybersecurity
Repository Index
75,360 visible repositories in the index
769–792 of 1,247 · Most stars
OpenXPKI Code
- pki
- enterprise-software
- workflow-based
- x509
Best Current Practices regarding secure online communication and configuration of services using cryptography.
- cryptography
- applied-cryptography
- documentation
- best-practices
A simple way of authenticating your RESTful APIs with API keys using Laravel
Scirius is a web application for Suricata ruleset management and threat hunting.
- python
- security
- management
- interface
Single C file TLS 1.2/1.3 implementation, using tomcrypt as crypto library
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
- beacons
- blue-team
- c2
- command-and-control
Google OAuth Client Library for Java
CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.
Documenting the unofficial and internal Steam Web API
OpenID Connect Library for Rust
- oauth2-client
- oauth2-authentication
- openid-connect
- openid-client
User management lib for Phoenix Framework
Codesign Electron macOS apps
- electron-osx-sign
- macos
- entitlements
- provisioning-profiles
:no_entry: (DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.
PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.
An opinionated production-ready SQL-/Swagger-first RESTful JSON API written in Go, highly integrated with VSCode DevContainers by allaboutapps.
- golang-development
- vscode-devcontainers
- golang
- go
Local-first password manager with direct device-to-device sync
- password-manager
- totp-authenticator
- security
- security-tools
Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
- security-tools
- security
- attestation
- verification
Go-Guardian is a golang library that provides a simple, clean, and idiomatic way to create powerful modern API and web authentication.
Incident Response Forensic Framework
🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more
bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
- xss
- bxss
- security
- bugbounty
MCP (Model Context Protocol) server for game hacking & reverse engineering. A structured knowledge base of 4,100+ skills with full source code archives, specialized agents, and workflow tools -- designed to be plugged into Claude, Cursor, or any MCP-compatible client.
Paaster is a secure and user-friendly pastebin application that prioritizes privacy and simplicity. With end-to-end encryption and paste history, Paaster ensures that your pasted code remains confidential and accessible.
- pastebin
- paaster
- e2ee
- paste