Catch risky npm dependency changes before they merge.
- dependency-analysis
- devsecops
- github-actions
- malware
Repository Index
47,133 repositories indexed
73–96 of 138 · Most stars
A starter project for next js with authentication - Contains React 17 + Typescript + Tailwind CSS 2 + React Query 3 + GitHub Auth + LinkedIn Auth + Password-less Auth + Fauna DB + ESLint + Prettier + Husky
- vercel
- nextjs
- nextjs-starter
- nextjs-boilerplate
Keyscope is a key and secret workflow (validation, invalidation, etc.) tool built in Rust
Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools
Set of tools for security testing of Internet of Things devices using specific network IoT protocols
Astral-PE is a low-level mutator (Headers/EP obfuscator) for native Windows PE files (x32/x64)
- cybersecurity
- hacktoberfest
- low-level
- mutator
The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted drives and extracted artifacts from Windows, Linux, MacOS, and Android devices
Wireless Hacking Devices Protocol client
🔐 Library for developing secure, decentralized, anonymous and quantum-resistant networks in Go language
- network
- anonymity
- golang
- library
Cryptographic library for Embarcadero Delphi and potentially for FPC as well
- delphi
- key-deviation-algorithms
- cryptographic-checksums
- kdf1
Inspektor is a protocol-aware proxy that is used to enforce access policies👮
- security
- openpolicyagent
- acl
- rust
The JavaScript Crypto Library provides web developers with an extensive and efficient set of cryptographic functions. The library aims to obtain maximum execution speed while preserving modularity and reusability. The library is released as open source under a BDS license.
A Rails 6 boilerplate to create your next Saas product. Preloaded with graphQL, devise, JWT, CanCanCan, RailsAdmin, Rubocop, Rspec, i18n and more.
- ruby-on-rails
- api-only
- rubyonrails
- saas-boilerplate
Enable root SSH on BMW MGU head units (iDrive 7 / ID8 BDC3 / ID8 BCP) over ENET - flash the debug image, enroll, persistent SSH with no B7F8E5 DTC, and a unique per-car key.
- developer-mode
- idrive
- idrive7
- root
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
- cve-2026-109618
- cve-2026-109619
- exploit
- mod-php
Advanced, but minimalistic Next.js and Apollo starter
- typescript
- react
- apollo
- testing-library
Flash Development Tools
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.
- ai-safety
- ai-security
- claude-code
- llm-agent
Android Mobile Device Hardening
- forensic
- security
- hardening
- android-security
Android Framework for Exploitation, is a framework for exploiting android based devices
Automation of some MAPT activities and interaction with the mobile Android device.
- android-analysis
- frida
- mobile-hacking
- mobile-penetration-testing
Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️
- devsecops
- entropy
- gdpr
- golang
preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.
A platform to develop, run and administer CTF competitions. This is the online echoCTF.RED platform source code
- ctf
- echoctf
- cybersecurity
- hacking