Repository Index

AuthPass - Password Manager based on Flutter for all platforms. Keepass 2.x (KDBX 3 and KDBX 4) compatible.

• flutter
• password-manager
• password-store
• android

Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish/Japanese. For authorized, defensive and detection use only. (upstream: Autumn-27/ARTEX, AGPL-3.0)

• ai-agent
• autonomous-agents
• blue-team
• cybersecurity

Exploit chain for PS5 7.00 - 13.60

• exploit
• kernel
• research
• webkit

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

• android
• antivirus
• machine-learning
• malware-detection

UFONet - Denial of Service Toolkit

• dos
• ddos
• ufonet
• botnet

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

• post-exploitation
• hacking
• backdoor
• stealth

🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse-engineering agents like REA. Poison -> Exhaust -> Hallucinate.

• adversarial-ai
• claude-code
• cursor
• electron-security

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

• appsec
• cicd
• devops
• infosec

Binary Analysis Platform

• binary-analysis
• reverse-engineering
• program-analysis
• static-analysis

Canarytokens helps track activity and actions on your network

A helm plugin that help manage secrets with Git workflow and store them anywhere

• helm
• helm-plugin
• helm-plugins
• kubernetes

ReCaptcha helpers for ruby apps

• recaptcha
• ruby
• rails
• captcha

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

• graphql
• security-scanner
• graphql-security
• api-documentation-tool

LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines.

• libtomcrypt
• cryptography
• c
• encryption

Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS

• aws
• cloud
• security
• big-data

The best way to build Electron apps with security in mind.

• electron
• security
• template
• react

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

• tokenization
• web-security
• compliance
• security

A collection of postmortem templates

• site-reliability-engineering
• site-reliability
• devops
• postmortem

Full featured multi arch/os debugger built on top of PyQt5 and frida

• frida
• pyqt5
• reverse-engineering
• cracking

🍯 Unobtrusive and flexible spam protection for Rails apps

• honeypot
• rails
• anti-spam
• captcha

Protect against malicious open source packages 🤖

• devsecops
• security
• supply-chain-security
• policy-as-code

Generate smart and powerful wordlists

• wordlist
• password
• hacking-tool
• password-cracking

SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.

• sip
• voip
• password-cracker
• svwar

Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.

• cve-scanning
• pentesting-tools
• rust
• vulnerability-scanners