Repository Index

Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise

• detection
• splunk
• bpfdoor
• vulnerability

This project is designed to create deceptive webpages to deceive and redirect attackers away from real websites.

• deceptive-webpages
• web-cloner
• honeypot
• deception

YALIH (Yet Another Low Interaction Honeyclient) is a low Interaction Client honeypot designed to detect malicious websites through signature, anomaly and pattern matching techniques

A PE (Portable Executable) packer with Huffman Compression and Xor encryption.

• huffman-compression
• huffman-algorithm
• pe-header
• packer

Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection

• docker-image
• executable-packing
• malware-packers
• research-platform

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

Defensomania is a security monitoring and incident response card game.

• incident-response
• self-assessment
• incident-response-readiness
• educational-game

Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents

• claude-code
• cti
• llm
• rag

Secure diceware passphrase generator

• electron
• electron-app
• desktop-application
• desktop

Powerful Session Management for Kemal applications

• kemal
• session
• crystal
• middleware

Sublime Malware Research Tool

drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates

• docker
• security
• audit

Bind/Reverse Shells, SOCKS, etc over Tor in Golang

• tor
• ethical-hacking
• reverse-shell
• bind-shell

DEPRECATED, Nozzlr is a bruteforce framework, trully modular and script-friendly

• pentesting
• bruteforce
• python
• infosec

Passwords Fountain - modern & performant password manager interface which works everywhere

Advanced analysis software for APK payloads created by RATs.

• apk
• remoteaccesstrojan
• reverse-engineering
• aapt

Find which of your direct GitHub dependencies is susceptible to RepoJacking attacks

• golang
• go
• supply-chain
• security

NullKia Mobile Security Framework - Tools in Nim, Crystal, V, D, Red, Odin, Haxe, Zig, Kotlin, Lua, PHP, Python | bad-antics | github.com/bad-antics

• android-hacking
• baseband
• bootloader-unlock
• checkm8

Simple Connect / Express Steam authentication library.

🛡 Modern elixir ACL/ABAC library for managing granular user abilities and permissions

• elixir
• elixir-phoenix
• ecto
• acl

Mimicry is a dynamic deception tool that actively deceives an attacker during exploitation and post-exploitation.

• backdoor
• honeypot
• incident-response
• security

Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies on file access, network operations, and process execution.

• bpf
• ebpf
• kernel
• linux

A probably paranoid Golang utility library for securely hashing and encrypting passwords based on the Dropbox method. This implementation uses Blake2b, Scrypt and XSalsa20-Poly1305 (via NaCl SecretBox) to create secure password hashes that are also encrypted using a master passphrase.

• golang
• golang-library
• scrypt
• password-hash

Ultra high-performance secp256k1 ECC engine | Python, Node.js, Rust, Go, C#, Swift, Java bindings | CUDA, Metal, OpenCL GPU | ECDSA, Schnorr, FROST, MuSig2, BIP-352 | 15+ platforms

• cryptography
• cuda
• riscv
• secp256k1