HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy + Exploit Timing Attacks
- http2
- race-condition
- race-conditions
- scapy
Repository Index
47,133 repositories indexed
97–120 of 135 · Most stars
🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.
- padding-oracle
- aes
- decryption
- encryption
Watchtower | Self-hosted AI security assessment, asset intelligence, and evidence workflows.
- ai-agents
- attack-surface-management
- docker
- penetration-testing
A Hub/research area, for jailbreaking LLM's, and breaking their safety filters.
A PoC that the USB port is an attack surface for a Mazda car's infotainment system and how Mazda hacks are made
Safety in Embodied AI: A Survey of Risks, Attacks, and Defenses | 500+ Papers | Perception, Cognition, Planning, Interaction, Agentic System
- adversarial-attacks
- ai-safety
- autonomous-driving
- backdoor-attacks
preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.
unXOR will search a XORed file and try to guess the key using known-plaintext attacks.
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
- audit
- cognito
- cybersecurity
- scanner
Web interface to explore Suricata EVE outputs
- attack-defense-ctf
- ctf
- network-monitor
- suricata
A graph reliability toolbox based on PyTorch and PyTorch Geometric (PyG).
- adversarial-attacks
- graph-convolutional-networks
- graph-neural-networks
- pytorch
brute force SSH public-key authentication
- ssh
- penetration-testing
- remote-admin-tool
- ssh-key
This library protects against typical web attacks. It was inspired in rack-protection Ruby gem.
This project is designed to create deceptive webpages to deceive and redirect attackers away from real websites.
- deceptive-webpages
- web-cloner
- honeypot
- deception
Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents
Find which of your direct GitHub dependencies is susceptible to RepoJacking attacks
- golang
- go
- supply-chain
- security
Mimicry is a dynamic deception tool that actively deceives an attacker during exploitation and post-exploitation.
🛡️ Free AI that blocks hackers while you sleep. Runs on cheap hardware. When someone in Tokyo gets attacked, you're protected in 30 seconds. No fees. No experts needed. Just protection. One node's detection → everyone's protection.
- ai-security
- cybersecurity
- ids
- iot-security
Project intended to make Attack Maps part of software development by reducing the time it takes to complete them.
Want to crack passwords faster by using a wordlist that fits your 'target audience'? Use WikiRaider.
- wordlist
- wikipedia
- dictionary
- attack
A package to add protection to Vapor against CSRF attacks.
Google Summer of Code 2012 project, supported by The Honeynet Project organization.
Agentic LLM CTF to test prompt injection attacks and preventions
Encrypts 64-bit elf files that decrypt at runtime.
- elf64
- linux
- elf-binaries
- elf-parser