Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
- binary-analysis
- taint-analysis
The AI Agent for Cyber Security.
Use Apple FaceID or TouchID authentication in your app using BiometricAuthentication.
A concise, directive, specific, flexible, and free incident response plan template
Easy, painless AWS credentials on developer laptops.
Low-Level OAuth 2 / OpenID Connect Client API for JavaScript Runtimes
Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteur réseau temps réel + pare-feu sortant, agent de flotte Rust, exports SIEM. 100 % local.
A lightweight, secure, easy-to-use crypto library suitable for constrained environments.
Free people-search desktop app: look up a nickname, email, phone or site across 3,100+ public pages and get one readable report.
Automatic and platform-independent unpacker for Windows binaries based on emulation
Script to create templates to use with VirtualBox to make vm detection harder
C++23 procedure hooking library.
- hook
- hooks
- detour
- detours
PE-bear (builds only)
- pe-analyzer
- pe-format
- pe-editor
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
A work-in-progress deobfuscator for movfuscated binaries
Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.
Enables client-side applications to dance OAuth with GitHub.
The reliable YouTube API Ruby client
- youtube-api
- youtube-analytics
- video
- ruby
OpenID/Connect, OAuth2, WS-Federation and SAML 2.0 server based on Duende IdentityServer and ITFoxtec Identity SAML 2.0 with its admin UI
Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
RegRipper3.0
RSA public/private key generation, RSA, AES encryption/decryption, RSA sign/verify in Swift with CommonCrypto in iOS and OS X