drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates
Repository Index
77,353 visible repositories in the index
937–960 of 1,094 · Most stars
Control Flow Graph Scanning for Android
Passwords Fountain - modern & performant password manager interface which works everywhere
Find which of your direct GitHub dependencies is susceptible to RepoJacking attacks
- golang
- go
- supply-chain
- security
(UNMAINTAINED. FEEL FREE TO FORK) 🐍A Pythonic way to provide JWT authentication for Flask-GraphQL
Mimicry is a dynamic deception tool that actively deceives an attacker during exploitation and post-exploitation.
- backdoor
- honeypot
- incident-response
- security
Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies on file access, network operations, and process execution.
A probably paranoid Golang utility library for securely hashing and encrypting passwords based on the Dropbox method. This implementation uses Blake2b, Scrypt and XSalsa20-Poly1305 (via NaCl SecretBox) to create secure password hashes that are also encrypted using a master passphrase.
- golang
- golang-library
- scrypt
- password-hash
A minimalist Crystal authorization system inspired by https://github.com/varvet/pundit.
- praetorian
- crystal
- authorization
- authorisation
Ultra high-performance secp256k1 ECC engine | Python, Node.js, Rust, Go, C#, Swift, Java bindings | CUDA, Metal, OpenCL GPU | ECDSA, Schnorr, FROST, MuSig2, BIP-352 | 15+ platforms
- cryptography
- cuda
- riscv
- secp256k1
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
Comprehensive security for Lucky framework
- lucky-framework
- authentication
- security
- crystal
Security training for the apps you actually ship. Open your browser and start hacking.
HoneyHTTPD is a Python-based web server honeypot/service imitation builder. Great for honeypots or faking HTTP services.
- python
- honeypot
- honeypot-http
- python-web
Foremost is a console program to recover files based on their headers, footers, and internal data structures. c.f., http://foremost.sourceforge.net/
A performant, 100% native-julia SHA1, SHA2, and SHA3 implementation
- cryptography
- sha1
- sha2
- sha3
Builds json representation of PDF malware sample
🛡️ Free AI that blocks hackers while you sleep. Runs on cheap hardware. When someone in Tokyo gets attacked, you're protected in 30 seconds. No fees. No experts needed. Just protection. One node's detection → everyone's protection.
- ai-security
- cybersecurity
- ids
- iot-security
Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes
- entropy
- pe-file
- pe-files
- pe-format
a native library implementing secp256k1 purely for the crystal language.
- crystal
- crystal-language
- native-library
- secp256k1
OpenID Connect implementation in OCaml. Currently only the RP (client) parts are polished.
- ocaml
- oidc
- oidc-client
PocketBase + SvelteKit (Static): minimalistic template with configured authorization featuring a single binary or Docker image for deploying.
This script takes a file or directory as input, uses GPG AES256 symmetric encryption with the password you provide and adds it to IPFS and returns the IPFS hash.
- ipfs
- cli
- encryption
- ipfs-add
BLE Edition of the original FistBump (portable WPA handshake grabber)