Repository Index

web-framework-agnostic sessions library for the V language

• cookie
• sessions

Wrapper for Next.js applications using PocketBase, with support for both client and server components

LDAP authentication policy for Pyramid

• ldap
• ldap-authentication
• pyramid
• python

Encrypted .env files with TOTP unsealing for production deploys. Cross-stack (Node + Java). Zero deps. Defends against npm supply-chain attacks.

• 2fa
• aes-gcm
• dotenv
• encryption

Abstractions and utilities to get rid of boilerplate code in business logic

• datastructures
• generic
• go
• golang

All algorithm implementations like signature verification and protocol entries like address used in Waves protocol.

• cryptography
• crypto
• signature

Fetch and normalize parameterized URLs from the Wayback CDX API (OSINT, inspired by ParamSpider).

• bugbounty
• cdx
• cli
• kali-linux

🔌 OSINT & Security Extensions for Marshall Browser - Installable plugins for enhanced reconnaissance and security testing

• browser-extension
• golang
• honeypot
• osint

HTTP honeypot on autopilot

• canarytokens
• deception
• deception-technology
• honeypot

Password management for Common Lisp (web) applications. THIS PROJECT HAS MOVED

Ruby gem for the IP2Location.io API. Look up geolocation and proxy information by IP address, and retrieve WHOIS data by domain. Integrate a hosted IP geolocation API into Ruby applications and backend workflows. Enrich IPv4 and IPv6 addresses with geographic and network details for analytics, localization and security checks.

• domain-lookup
• geolocation-api
• ip-geolocation
• ip2location

OAuth.io plugin for Apache Flex/ActionScript

FTP honeypot in Node.js: logs every login and command, quarantines uploaded malware, plants honeytokens in bait files. One-line Docker image.

• blue-team
• cybersecurity
• deception
• docker

A complete GraphQL client shard for the Crystal language inspired by Apollo client including error handling and planned support for caching, authentication and subscriptions.

• graphql
• crystal-language
• crystal-gql
• crystal-shard

Caustic Elixir Cryptocurrency Library (Bitcoin, Ethereum, etc.) with extensive cryptography and number theory library

Detect the Shai Hulud 2.0 npm supply chain attack (796+ packages). Scans for malicious files, hashes, and compromised ecosystems. Fast, accurate scanner.

• cdn
• cve
• polyfill
• polyfill-io

XXTEA encryption algorithm library for ActionScript 3.

👻 Simple middleware to integrate authentication to your applications

• fiber
• golang
• gothic
• middleware

Offers a collection of GraphQL directives for easy validation, authorization, and sanitation, simplifying the implementation of complex functionality in GraphQL APIs. It ensures secure and efficient GraphQL APIs with pre-built solutions.

• graphql
• validation
• authorization
• directive

Implementation of the packing detection heuristic from the paper "Packed PE File Detection for Malware Forensics" of Han et al.

• binary-analysis
• entropy
• entrypoint
• executable-packing

Real-time monitoring and visualization of failed SSH login attempts on a Linux server.

Open-source PocketBase security auditor: detects empty rules, the @request.auth.id != trap, true literals. Active probe confirms leaks live.

• audit
• auditor
• cli
• devsecops

Deep network visibility, powered by Suricata. Artica integrates the Suricata IDS engine directly inside your server, giving you enterprise-grade intrusion detection without the complexity. Monitor every packet in real time, detect advanced threats, and visualize malicious

• appliance
• network-monitoring
• suricata

A Framework for Encrypted Machine Learning in TensorFlow