Laravel Ban simplify blocking and banning Eloquent models.
- laravel
- eloquent
- cog
- trait
Repository Index
47,133 repositories indexed
73–96 of 183 · Most stars
Generate smart and powerful wordlists
- wordlist
- password
- hacking-tool
- password-cracking
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
- cve-scanning
- pentesting-tools
- rust
- vulnerability-scanners
Tools and packages that are used for countering forensic activities, including encryption, steganography, and anything that modify attributes. This all includes tools to work with anything in general that makes changes to a system for the purposes of hiding information.
- awesome-list
- awesome
- anti-forensic
- anti-forensics
:key: Hash type identifier (CLI & lib)
- security-tools
- hash
- identify
- digest
A curated Cyber "Security Orchestration, Automation and Response (SOAR)" awesome list.
Reusable prompts for a structured, evidence-first bug bounty hunting workflow
- application-security
- bug-bounty
- bug-bounty-hunting
- cybersecurity
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
- anti-crawling
- cloud-native
- crawler
- deception
The AI Agent for Cyber Security.
- ai-agent
- ai-security
- appsec
- bug-bounty
A concise, directive, specific, flexible, and free incident response plan template
Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteur réseau temps réel + pare-feu sortant, agent de flotte Rust, exports SIEM. 100 % local.
Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.
- codereview
- cybersecurity
- ruby
- sinatra
Every practical and proposed defense against prompt injection.
- ai
- cybersecurity
- prompt-injection
- security
TranslatedCyber Xiaoya Live Edition (赛博小雅, Cyber Xiaoya) · Component-based digital human (Vidu s2) · Free and open source, AGPL-3.0 · Author: 天工开帧 (Tiangong Kaizhen, "Heavenly Craft, Opening Frames") (same name on Douyin/Bilibili/YouTube)
- agpl
- danmaku
- digital-human
- live-streaming
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
- pentesting
- security
- chrome-extension
- api-keys
A PostgreSQL extension for automatic bloat cleanup
Scirius is a web application for Suricata ruleset management and threat hunting.
- python
- security
- management
- interface
Translated全链哨兵 (Quanlian Shaobing, "full-chain sentinel") is a cybersecurity Agent that integrates Web penetration testing, Android App security testing, iOS APP security toilet, batch targeting for attack and defense, automated emergency response, and open-source vulnerability monitoring. It is used to assist with automating security service delivery. Use for illegal purposes is prohibited.
- agent
- blue-team
- cybersecurity
- cybersecurity-tools
Learn cloud security by building it! An open-source homelab teaching Zero Trust, DevSecOps, IaC, and cloud architecture from the ground up.
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
- beacons
- blue-team
- c2
- command-and-control
A curated list of .NET Compiler Platform ("Roslyn") diagnostic analyzers and code fixes. Everyone can contribute here!
🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️
AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.
- ai
- attack-surface-management
- bbot
- cybersecurity
Capri, the Project Capricorn construct from Cyberpunk: Edgerunners 2, living on your desktop and narrating what Claude Code is doing.