Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Repository Index
47,133 repositories indexed
73–96 of 489 · Most stars
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.
- self-hosted
- self-hosting
- pastebin
- security
Malicious traffic detection system
OmniAuth is a flexible authentication system utilizing Rack middleware.
- omniauth
- authentication
- hacktoberfest
- ruby
Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.
- steampipe
- postgresql
- postgresql-fdw
- cloud
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
- python
- cryptography
Automated Adversary Emulation Platform
- adversary-emulation
- caldera
- security-automation
- red-team
A simple library to work with JSON Web Token and JSON Web Signature
- php
- jwt
- tokens
- hacktoberfest
RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data
- rsa-attack
- rsa
- cryptography
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
- anti-analysis
- anti-debugging
- anti-sandbox
- anti-vm
Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/
Package goth provides a simple, clean, and idiomatic way to write authentication packages for Go web applications.
Common User Passwords Profiler (CUPP)
- wordlist-generator
- wordlist
- dictionary-attack
- password
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
An all-in-one hacking tool to remotely take over Android devices.
- adb
- android
- android-debug-bridge
- cybersecurity
Go package for UUIDs based on RFC 4122 and DCE 1.1: Authentication and Security Services.
- go
- uuid
A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.
- authorization
- permissions
- security
- zanzibar
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
- phishing
- typosquatting
- domains
- dns
JSON Web Token implementation in Python
- python
- jwt
- hacktoberfest
The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.
- hacktoberfest
- abac
- access-control
- acl
Flexible and versatile OAuth 2.0/OpenID Connect stack for .NET
- openidconnect
- oauth2
- aspnetcore
- dotnet
Cameradar hacks its way into RTSP videosurveillance cameras
Dark Web OSINT Tool
- tor
- tor-network
- deepweb
- dark-web