A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.
- in-toto
- software-supply-chain
- security
Repository Index
74,362 visible repositories in the index
937–960 of 1,228 · Most stars
Tools for the Computer Incident Response Team :computer:
- dfir
- python
- carbonblack
- malware-analysis
Invoke-LiveResponse
- ir
- dfir
- winrm
- liveresponse
Open-source agentic security operations platform:
- agentic-security
- cyber-security
- cyber-threat-intelligence
- cybersecurity
Breaks Seewo Whiteboard 3's 15-day trial limit; a game enhancement tool by HuskeyDev.
- activate
- activator
- easinote
- seewo
hapora: Local enhancement script for Typora
- activator
- hack
- license
- typescript
A free, public vulnerability feed: CVE, GHSA, OSV, CISA KEV and EPSS merged into one entry per vulnerability. RSS, JSON API and MCP. Docs and issues only.
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
- exploit
- php
- php2shell
- php2shell-cve
Content discovery and fuzzing with HTTP/3 support (100k requests per second)
An Elixir implementation of the JSON Web Token (JWT) Standard, RFC 7519
Hush is a runtime configuration loader for Elixir applications
- elixir
- aws
- hush
- secret-management
Minimal, consistent Python API for building integrations with malware sandboxes.
- sandbox
- malware-analysis
- api-client
- library
SPARK 2014 re-implementation of the TweetNaCl crypto library
Incident Response Triage - Windows Evidence Collection for Forensic Analysis
UnTangled — the easy, modern web interface for OpenWRT. A friendly LuCI alternative: Network Map, Mesh Wi-Fi, parental controls, VPN, QoS. ~75 KB, offline-first, runs alongside LuCI.
- apk
- dashboard
- firewall
- home-network
The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.
- ai-agents
- bug-bounty
- electron
- offensive-security
Sym is a command line utility and a Ruby API that makes it trivial to encrypt and decrypt sensitive data. Unlike many other existing encryption tools, sym focuses on usability and streamlined interface (CLI), with the goal of making encryption easy and transparent. The result? There is no excuse for keeping your application secrets unencrypted :)
Spam Honeypot with Intelligent Virtual Analyzer
Haskell oauth2 binding
- oauth2
- oauth2-client
- haskell
- identity
基于 ARTEX 的 AI 自主渗透测试系统，支持多 Agent 协作、资产探索与漏洞管理，提供本地部署面板。
- ai-agents
- artex
- cybersecurity
- golang
Provides a unified interface to local and remote authentication systems.
- aura
- authentication
- authenticator
- login
Security library for Vert.x: OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...
- java
- vertx
- security
- authentication
Fast, compact 64/128/256-bit non-crypto hash suite (Rainbow & Rainbow 2) passing SMHasher3, plus experimental Rainstorm. C++ and Node.js/Wasm API & CLI
- call-for-papers
- cryptanalysis
- cryptanalysis-tasks
- cryptography
Local-only browser fingerprint & identity rotation toolkit for authorized security testing. Tor/obfs4, coherent profiles, WebRTC/DNS leak protection.
- browser-privacy
- cli
- fingerprinting
- identity-rotation