Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
- anti-bot
- behavioral-analysis
- bot-detection
- captcha
A desktop app where AI agents decompile the games you own into C/C++ that rebuilds them byte for byte.
Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant
Authenticated and encrypted API tokens using modern crypto
- xchacha20-poly1305
- api
- token-authentication
- jwt
Create and verify JSON Web Tokens (JWT) with Deno or the browser.
PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡
Open Source SIEM (Security Information and Event Management system).
- siem
- risk-management
- risk-assessment
- vulnerability-management
WebAppSec Content Security Policy
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.
Capacitor plugin to make login with Google,Apple,Facebook and so on, simple and fast to implement
🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.
List of Magento extensions with known security issues.
:vertical_traffic_light: Block malicious crawlers with Cloudflare Firewall Rules
Erlang Oauth2 implementation
- kivra-platform-engineering
An evidence-first research platform for observing and studying early signals in medical technology development.
- fda
- medical-devices
- openfda
- python
This script is made to collect the most valiable artifacts for foreniscs or incident reponse investigation rather than imaging the whole har drive.
Protect your SIP Servers from bad actors at https://sentrypeer.org
JWT implementation in Crystal
EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.
Wraps around various tools and provides some additional checks/information to produce a centralized report of a PE file.
A Flask app template with integrated SQLAlchemy, authentication, and Bootstrap frontend
This is an aspiring project aimed at accumulating knowledge from the world of cybersecurity and presenting it in a cogent way, so it is accessible to as large an audience as possible and so that everyone has a good resource to learn hacking from.
A Java library that implements a ByteChannel interface over SSLEngine, enabling easy-to-use (socket-like) TLS for Java applications.
Chiron - An IPv6 Security Assessment framework with advanced IPv6 Extension Headers manipulation capabilities.
- ipv6
- security-assessments