47,133 repositories indexed
937–960 of 967 · Most stars
Tamper-evident audit log for Go: an append-only, hash-chained, optionally Ed25519-signed log/slog handler, with offline logx verify. Built on the standard library, zero third-party dependencies. Also a full slog toolkit (colored output, JSON, rotation, fan-out, CLI).
Sitecore SXA Security Headers Module
Fetch and normalize parameterized URLs from the Wayback CDX API (OSINT, inspired by ParamSpider).
The "interpol" security string interpolation library and the "police" command line tool. Just moved here from https://bitbucket.org/vahidi/interpol
🔌 OSINT & Security Extensions for Marshall Browser - Installable plugins for enhanced reconnaissance and security testing
View all the Access right set on Sitecore rols or users
Provision strong AWS security policies easily using the AWS CDK, v1 or v2.
Parse cowrie honeypot logs into a neo4j database
HTTP honeypot on autopilot
Ruby gem for the IP2Location.io API. Look up geolocation and proxy information by IP address, and retrieve WHOIS data by domain. Integrate a hosted IP geolocation API into Ruby applications and backend workflows. Enrich IPv4 and IPv6 addresses with geographic and network details for analytics, localization and security checks.
Pin AI Skill behavior. Block unapproved drift in CI. See exactly what changed in every PR.
A Crystal tool for generating CycloneDX Software Bill of Materials (SBOM) from Crystal shard projects.
Privacy-first Chrome extension for real-time website security analysis using on-device AI. Trust scores (0-100), phishing detection, SSL verification, cookie compliance & AI chatbot powered by WebLLM with zero external data transmission.
Code for ASE'21 Paper "CorbFuzz: Checking Browser Security Policies with Fuzzing"
A framework to manage development and testing environments
TerraSigma - Modern Detection Engineering for the Cloud-Native SIEM Microsoft Sentinel
Yosai integration with the Pyramid Web Framework
Detect the Shai Hulud 2.0 npm supply chain attack (796+ packages). Scans for malicious files, hashes, and compromised ecosystems. Fast, accurate scanner.
Is this app legit? Check before you connect. Free URL security scanner for indie developers and AI builders. Live at trustscanpro.com
Code for the experiment proposed in Section 4.2 of the paper "The Bouncer Problem: Challenges to Remote Explainability".
Stream-first CAN & J1939 toolkit for security research and AI agents — typed JSONL events, CLI, TUI, fuzzing, MCP server.
A secure, client-side tool to broadcast a signed Bitcoin (BTC) transaction from an air-gapped wallet. Fetch UTXOs, regenerate QR codes, and submit raw hex transactions safely.
hived is a honeypot
Open-source PocketBase security auditor: detects empty rules, the @request.auth.id != trap, true literals. Active probe confirms leaks live.