Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
- anti-bot
- behavioral-analysis
- bot-detection
- captcha
JavaScript OAuth 1.0a signature generator (RFC 5849) for node and the browser
'Packet Capture Forensic Evidence eXtractor' is a tool that finds and extracts files from packet capture files
Django application that performs SAST and Malware Analysis for Android APKs
HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy + Exploit Timing Attacks
- http2
- race-condition
- race-conditions
- scapy
Secure shell history commands by finding sensitive data
🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️
Open Source SIEM (Security Information and Event Management system).
- siem
- risk-management
- risk-assessment
- vulnerability-management
ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods.
Android Loadable Kernel Modules - mostly used for reversing and debugging on controlled systems/emulators
- loadable-kernel-modules
- android-lkms
- emulators
- kernel
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.
Android Mobile Device Hardening
- forensic
- security
- hardening
- android-security
🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.
Erlang Oauth2 implementation
- kivra-platform-engineering
A desktop app where AI agents decompile the games you own into C/C++ that rebuilds them byte for byte.
The fastest communications possible. Delphi rulez.
- delphi
- object-pascal
- tcp-ip
- fast-networking
Merge multiple pcap files together, gracefully.
- pcap
- merge
- tcpdump-capture
- packet-processing
This script is made to collect the most valiable artifacts for foreniscs or incident reponse investigation rather than imaging the whole har drive.
"Evolving AppCompat/AmCache data analysis beyond grep"
Protect your SIP Servers from bad actors at https://sentrypeer.org
JWT implementation in Crystal
EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.
Wraps around various tools and provides some additional checks/information to produce a centralized report of a PE file.
midgetpack is a multiplatform secure ELF packer