Repository Index

A low-to-medium interaction SSH Honeypot with features to capture terminal activity and upload to asciinema.org

• golang
• ssh-server
• honeypot
• ssh

Rails compatible Plug session store

• elixir-plug
• elixir-phoenix
• ruby-on-rails
• rails

🦅 EACL: Enterprise Access ControL is a ReBAC Authorization library inspired by SpiceDB, built in Clojure and backed by Datomic Pro, Datahike, Datalevin or DataScript.

• access-control
• clojure
• datalog
• authorization

:evergreen_tree: Merkle Tree implementation in pure Elixir

• elixir
• merkle-tree

a low-interaction honeypot

A whole bunch of public pentest reports & papers

TranslatedActionScript (AS3) library for processing binary data. This library contains MD5, SHA-1, SHA-2 ( SHA-224 and SHA-256 ), Base64, CRC32 algorithms, JSON encoder & decoder as well as PNG and JPEG encoders.

• actionscript
• jpeg
• png
• md5

Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.

A honeypot proxy for mongodb. When run, this will proxy and log all traffic to a dummy mongodb server.

• mongodb
• proxy
• honeypot
• security

Python API Monitor for Android apps

• android
• frida
• api
• monitoring

OPNSense's Suricata IDS/IPS Detection Rules Against NMAP Scans

• crowdsec
• intrusion-detection
• intrusion-detection-system
• intrusion-prevention

Delphi basic library for validation and authentication of LDAP users in Active Directory.

• activedirectory
• delphi
• adsi
• ldap

Tool to help guess a files 256 byte XOR key by using frequency analysis

• frequency-analysis
• python
• xor
• malware

The current repository contains all the scripts needed to build kernel-mode mac-a-mal malicious activity hooking on macOS.

• macos

Blazor.BFF.AzureAD.Template, Blazor WASM hosted in ASP.NET Core using Microsoft Entra ID BFF (server authentication)

• blazor
• aad
• azuread
• template

CTF in a box. Minimal setup required. (not production-ready yet)

Vulnerable Web applications Generator

• vulnerabilities
• docker
• python
• generator

Dynamically generate self-signed certificates and certificate authorities for Go tests

• golang
• certificate-generation
• go
• testing

Honeypot (Dionaea and kippo) setup script

🪓 High-Speed Log Analysis & Forensics Tool - Part of NullSec Toolkit

• c
• forensics
• log-analysis
• security

Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.

Repo for the Open Source version of NOVA

Middleware based authorization for Absinthe GraphQL powered by Bodyguard

Declarative Prisma Authorization layer