"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
Repository Index
47,133 repositories indexed
73–96 of 152 · Most stars
Ultimate Javascript Object Signing and Encryption (JOSE), JSON Web Token (JWT) and Json Web Keys (JWK) Implementation for .NET and .NET Core
- jose
- jwt
- json
- jwa
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
- golang
- http-server
- https-server
- ctf
Hacking Toolkit
- network-analysis
- networking
- scapy
- python3
Audit AI chat exports locally before sharing or migration. Find possible secrets, personal-data patterns, broken JSON/JSONL, SQLite issues, and scan gaps—without uploading the archive.
- chat-archive
- python
- secret-scanning
- sqlite
A friendly car security exploration tool for the CAN bus
- python
- can-bus
- security-scanner
- security-testing
Scan files or process memory for CobaltStrike beacons and parse their configuration
OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications
- openam
- sso
- oauth
- saml
Cryptographic Primitive Code Generation by Fiat
The AI Agent for Cyber Security.
- ai-agent
- ai-security
- appsec
- bug-bounty
Rails integration for Rodauth authentication framework
- rodauth
- authentication
- rails
- multifactor-authentication
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
- application-security
- appsec
- bug-bounty
- burp-alternative
OpenID/Connect, OAuth2, WS-Federation and SAML 2.0 server based on Duende IdentityServer and ITFoxtec Identity SAML 2.0 with its admin UI
- openid-connect
- admin-ui
- iam
- openid
RSA public/private key generation, RSA, AES encryption/decryption, RSA sign/verify in Swift with CommonCrypto in iOS and OS X
- ios
- crypt
- swift
- rsa
MIRACL Cryptographic SDK: Multiprecision Integer and Rational Arithmetic Cryptographic Library is a C software library that is widely regarded by developers as the gold standard open source SDK for elliptic curve cryptography (ECC).
Best Current Practices regarding secure online communication and configuration of services using cryptography.
- cryptography
- applied-cryptography
- documentation
- best-practices
Security Auditor Utility for GraphQL APIs
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.
Nginx common useful configuration
- nginx
- configs
- nginx-configuration
- codesandbox
🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more
AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.
- ai
- attack-surface-management
- bbot
- cybersecurity
Collection of example YARA-L rules for use within Google Security Operations
Users Plugin for CakePHP
- cakephp
- users
- plugin
- registration