71,372 visible repositories in the index
1,129–1,152 of 1,194 · Most stars
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
Gatling DSL extensions — feeders, profile management, transactions, assertions, Redis integration, and utility functions
CalmAV wrapper for elixir
Go library MalShare API
Integrated MALware Simulator and Emulator
Honeypot that mimics Tomcat manager endpoints. Logs requests and saves attacker's WAR file for later study
Ed25519 high-performance public-key signature system for crystal lang
Converts / formats Rubeus kerberoasting output into Hashcat usable format
Tor control port filter - whitelists which Tor control commands a client can use
Kippo configured to be a backdoored netscreen
Sporeflower is a J2ME-focused Java decompiler and a remapping toolkit, aimed at semantically correct, recompilable output.
A Commitment Scheme library for Coin Flipping/Tossing algorithms and sort. :four_leaf_clover: :camel: :lock: :key:
A Python framework that uses machine learning algorithms to implement the metadata recovery attack against obfuscated programs.
End-to-end encryption for the browser and Node: a JavaScript library (npm: libves) with recoverable keys, post-quantum (ML-KEM) key exchange, and user-to-user sharing
Keep your secrets out of your AI coding agents. A local HTTPS proxy that swaps real credentials with placeholders and injects them at the network boundary.
Simple TCP/UDP honeypot implemented in Perl
Encrypted .env files with TOTP unsealing for production deploys. Cross-stack (Node + Java). Zero deps. Defends against npm supply-chain attacks.
SPARK TOTP library
AES CMAC (rfc 4493) in Elixir
Abstractions and utilities to get rid of boilerplate code in business logic
Fetch and normalize parameterized URLs from the Wayback CDX API (OSINT, inspired by ParamSpider).
The "interpol" security string interpolation library and the "police" command line tool. Just moved here from https://bitbucket.org/vahidi/interpol
🔌 OSINT & Security Extensions for Marshall Browser - Installable plugins for enhanced reconnaissance and security testing
Dead simple, unobtrusive and extendable captcha solution for CakePHP