Protect against malicious open source packages 🤖
Repository Index
75,859 visible repositories in the index
817–840 of 1,425 · Most stars
Laravel Ban simplify blocking and banning Eloquent models.
- laravel
- eloquent
- cog
- trait
Generate smart and powerful wordlists
- wordlist
- password
- hacking-tool
- password-cracking
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
- sip
- voip
- password-cracker
- svwar
A simple, semantic and developer-friendly crypto package for golang
- aes
- rsa
- des
- 3des
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
- cve-scanning
- pentesting-tools
- rust
- vulnerability-scanners
A linux utility for generating 2FA codes for Steam and managing Steam trade, market, and other confirmations.
- steam
- steamguard-cli
- linux-utility
- sda
Mundane is a Rust cryptography library backed by BoringSSL that is difficult to misuse, ergonomic, and performant (in that order).
- cryptography
- rust
- boringssl
Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.
A server side OAuth2 Bundle for Symfony
PHP 5.3+ oAuth 1/2 Client Library
Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).
PagerDuty's Incident Response Documentation.
- pagerduty
- incident-response
- documentation
- oncall
Limit access to your Laravel applications by using invite codes
- php
- laravel
- laravel-package
- doorman
ARES - authorized red-team engagement automation with dashboard, campaign scope, module orchestration, OPSEC controls, encrypted vault, and reporting.
- active-directory
- cloud-security
- defensive-validation
- fastapi
Python low-interaction honeyclient
- honeyclient
- client-honeypot
- python
- security-tools
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
Seemingly normal USB drive with a hidden security feature
Android Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents an on-device app to test for recent device vulnerabilities.
The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.
Ultimate Javascript Object Signing and Encryption (JOSE), JSON Web Token (JWT) and Json Web Keys (JWK) Implementation for .NET and .NET Core
- jose
- jwt
- json
- jwa
:key: Hash type identifier (CLI & lib)
- security-tools
- hash
- identify
- digest
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
- golang
- http-server
- https-server
- ctf
passfab-unlocker: Standalone Offline Password Recovery Solution
- automation
- desktop
- developer-tools
- device-recovery