47,133 repositories indexed
73–96 of 181 · Most stars
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
ThePhish: an automated phishing email analysis tool
Procyon is a suite of Java metaprogramming tools, including a rich reflection API, a LINQ-inspired expression tree API for runtime code generation, and a Java decompiler.
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
A pure Python HTML5 parser that just works. No C extensions to compile. No system dependencies to install. No complex API to learn.
Protect against malicious open source packages 🤖
Find exploit tool
RockYou2021.txt is a MASSIVE WORDLIST compiled of various other wordlists. RockYou2021.txt DOES NOT CONTAIN USER:PASS logins!
Agent-first reverse engineering for macOS, Windows and Linux: any ACP agent reads, renames and patches binaries, Android apps and GPU kernels next to you.
Extract and aggregate threat intelligence.
Authorization package for Meteor, compatible with built-in accounts packages
A KeePass-compatible password and secrets manager for people who work with AI agents.
CLI tool for decompiling Android apps to Java. It does resources! It does Java! Its real easy!
ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.
Elixir encryption library designed for Ecto
Automated Attack Simulation in the Cloud, complete with detection use cases.
JD-Core is a JAVA decompiler written in JAVA.
Linker/Compiler/Tool detector for Windows, Linux and MacOS.
Defanged Indicator of Compromise (IOC) Extractor.
The Ultimate Boilerplate for Products.
A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF
Open PS5 firmware 14.10 research: Lua userland experiments, syscall and attack-surface analysis. Kernel read/write and a complete exploit are not demonstrated.
Easily retargetable and hackable interactive disassembler with IDAPython-compatible plugin API