StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
- bugbounty
- security
- security-tools
- mobile-security
Repository Index
61,275 visible repositories in the index
73–96 of 151 · Most stars
Sandboxed Execution Environment
Dynamic analysis of Android apps
Script to create templates to use with VirtualBox to make vm detection harder
- virtualbox
- antivm
- sandbox
- malware-analysis
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
- application-security
- appsec
- bug-bounty
- burp-alternative
OpenID/Connect, OAuth2, WS-Federation and SAML 2.0 server based on Duende IdentityServer and ITFoxtec Identity SAML 2.0 with its admin UI
- openid-connect
- admin-ui
- iam
- openid
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
- pentesting
- security
- chrome-extension
- api-keys
A tool for studying JavaScript malware.
Codesign Electron macOS apps
- electron-osx-sign
- macos
- entitlements
- provisioning-profiles
Who do websites think you are? A privacy self-check: every sniffer any site can run, the portrait they paint, and the contradictions that give away a VPN or proxy
- browser-fingerprinting
- cloudflare-workers
- dns-leak
- network-tools
Local-first password manager with direct device-to-device sync
- password-manager
- totp-authenticator
- security
- security-tools
AI 自主渗透测试平台 · 多智能体自主渗透测试（二次开发自 ARTEX）
CuckooDroid - Automated Android Malware Analysis with Cuckoo Sandbox.
A sandbox escape for iOS 26 and 27, again
Nginx common useful configuration
- nginx
- configs
- nginx-configuration
- codesandbox
Pure Go implementation of the NaCL set of API's
- golang
- nacl
- security
- secretbox
Open-source, auditable network gateway for homelabs, NAS and servers: DDNS, STUN traversal, port forwarding with SNI routing, reverse proxy and web server, ACME certificates, WAF, Tailscale, frp, Cloudflare Tunnel, Docker and web terminal in one binary. Runs on Docker, fnOS, OpenWrt, Linux, macOS and Windows.
- acme
- ddns
- frp
- golang
Security profiling for blackbox Android
Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF
- owasp
- ctf
- ctfd
- application-security
Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js
- malware-samples
- wscript
- deobfuscation
- angler
🔥 A fully open source audit logs service and embeddable UI easily deployed to your own Kubernetes cluster. Brought to you by replicated.com and boxyhq.com 🚀
- enterprise-software
- kubernetes
- audit-logs
- enterprise-ready
Audited & minimal JS implementation of Salsa20, ChaCha and AES
- aes-siv
- chacha20
- chacha20-poly1305
- chacha20poly1305
Record shortcuts in macOS, like Alfred.app.
- macos
- alfred
- record-shortcuts
- clipy
Modified edition of cuckoo