Automated client-side template injection (sandbox escape/bypass) detection for AngularJS v1.x.
Repository Index
84,085 visible repositories in the index
769–792 of 1,043 · Most stars
Respounder detects presence of responder in the network.
- responder
- golang
- network-security-monitoring
- network-security
Tools to fingerprint WiFi Access Points running the Broadcom SDK and a list of known affected devices.
A Lean backend framework whose authorization safety is formally proven. The developer writes only a Cedar schema and policies; handlers are built on Supabase Auth and PostgreSQL.
- access-control
- authorization
- backend-framework
- cedar
Inject OWASP recommended HTTP Headers for increased security in a single line
- aspnetcore
- middleware
- owasp
- security
The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups
- active-directory
- cheatsheet
- ctf
- cybersecurity
Compilation of autoexec scripts and mods for Xiaomi Yi camera after reverse engineering of firmware.
- reverse-engineering
- xiaomi
- xiaomi-firmware
- xiaomi-camera
🚀AutoRuns is a PowerShell module that will help do live incident response and enumerate autoruns artifacts that may be used by legitimate programs as well as malware to achieve persistence.
The universe in numbers. Free, open-source calculators for everything countable.
Universal web application security sensor intended for real-time monitoring and defense.
A collection of useful utility functions
- utility
- utilities
- string
- strings
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
- cve-2026-109618
- cve-2026-109619
- exploit
- mod-php
inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques
- forensics
- hypervisor
- memory-dump
- reverse-engineering
Splunk code (SPL) for serious threat hunters and detection engineers.
- splunk
- threat-hunting
- use-case
- siem
File Scanning Framework
- security-tools
- network-defense
- file-analysis
- file-analyzer
Very fast, high-quality hash function, discrete-incremental and streamed hashing-capable (non-cryptographic, header-only C/C++) 27GB/s + PRNG
Cryptographic library for Embarcadero Delphi and potentially for FPC as well
- delphi
- key-deviation-algorithms
- cryptographic-checksums
- kdf1
The JavaScript Crypto Library provides web developers with an extensive and efficient set of cryptographic functions. The library aims to obtain maximum execution speed while preserving modularity and reusability. The library is released as open source under a BDS license.
A Rails 6 boilerplate to create your next Saas product. Preloaded with graphQL, devise, JWT, CanCanCan, RailsAdmin, Rubocop, Rspec, i18n and more.
- ruby-on-rails
- api-only
- rubyonrails
- saas-boilerplate
Middleware for adding security headers to an ASP.NET Core application.
Advanced, but minimalistic Next.js and Apollo starter
- typescript
- react
- apollo
- testing-library
AI security review CLI: SAST, secret scanning, SCA, threat modeling and architecture review with Claude Code, Copilot, Codex, Gemini, Cursor or an API key. SARIF output for CI.
- ai-security
- appsec
- claude-code
- cli
C++ application that uses memory and code hooks to detect packers
We took PersistenceSniper, merged it with Python, and misspelled it on purpose. Meet PyrsistenceSniper.
- cybersecurity
- cybersecurity-tools
- incident-response
- security