Repository Index

Struts Apache 2 based honeypot as well as a detection module for Apache 2 servers

Welcome to HackTheArch! A free open source scoring server for cyber Capture the Flag competitions!

• ctf-scoreboard
• ctf-framework
• ctf-platform
• ctf-events

Fragscapy is a command-line tool to fuzz network protocols by automating the modification of outgoing network packets. It can run multiple successive tests to determine which options can be used to evade firewalls and IDS.

• fuzzing
• network
• ids
• firewall

🚀 Production-ready AI-friendly Go REST API boilerplate with Clean Architecture, JWT auth, RBAC, PostgreSQL migrations, and highly tested. AI-optimized with built-in guidelines for most used IDEs. Docker hot-reload, Swagger docs, one-command setup. Build production APIs in minutes, not weeks.

• api
• api-documentation
• authentication
• backend

Framework agnostic set of sqlalchemy classes that make building applications that require permissions an easy task.

• python
• pyramid
• flask
• sqlalchemy

provides a full user authentication experience for an API. Includes login,logout,register,forgot password, forgot username, confirmation email and all that other good stuff. Includes plug for checking for authenticated users and macro for generating the required routes.

Bundle allows you to create doctrine entities with fields that will be protected by encryption algorithms such as AES

A full-featured Swift library for JOSE standards with first-class support for CryptoKit keys, providing JWS, JWT, SD-JWT, and JWE with signing, encryption, and JWK key management.

• jsonwebtoken
• jws
• jwt
• json-web-key

Handles sessions for Ruby web applications using DynamoDB as a backend.

Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise

• detection
• splunk
• bpfdoor
• vulnerability

This project is designed to create deceptive webpages to deceive and redirect attackers away from real websites.

• deceptive-webpages
• web-cloner
• honeypot
• deception

YALIH (Yet Another Low Interaction Honeyclient) is a low Interaction Client honeypot designed to detect malicious websites through signature, anomaly and pattern matching techniques

A PE (Portable Executable) packer with Huffman Compression and Xor encryption.

• huffman-compression
• huffman-algorithm
• pe-header
• packer

A collection of authentication-related plugs

Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection

• docker-image
• executable-packing
• malware-packers
• research-platform

CrOTP - One Time Passwords for Crystal

• totp
• otp
• 2fa
• two-factor-authentication

Simple tool to extract the most common substrings from an input text. Built for password cracking.

• passwords
• cracking
• string-manipulation
• wordlist-generator

Defensomania is a security monitoring and incident response card game.

• incident-response
• self-assessment
• incident-response-readiness
• educational-game

Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents

• claude-code
• cti
• llm
• rag

Secure diceware passphrase generator

• electron
• electron-app
• desktop-application
• desktop

Powerful Session Management for Kemal applications

• kemal
• session
• crystal
• middleware

drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates

• docker
• security
• audit

NTP, DNS, SSDP, Chargen and generic UDP-based amplification DDoS honeypot

The Intelligent Honey Net Project attempts to create actionable information from honeypots