Repository Index

unXOR will search a XORed file and try to guess the key using known-plaintext attacks.

Scan your computer for applications that are either susceptible to dylib hijacking or have been hijacked.

A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation

• audit
• cognito
• cybersecurity
• scanner

Checks with NSRL RDS servers looking for for hash matches

Compute message digest for large files in Go

• go
• golang
• checksum
• message-digest

Collection of ssl verification functions for Erlang

• ssl
• erlang
• security
• network

brute force SSH public-key authentication

• ssh
• penetration-testing
• remote-admin-tool
• ssh-key

Find which of your direct GitHub dependencies is susceptible to RepoJacking attacks

• golang
• go
• supply-chain
• security

Bind/Reverse Shells, SOCKS, etc over Tor in Golang

• tor
• ethical-hacking
• reverse-shell
• bind-shell

Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies on file access, network operations, and process execution.

• bpf
• ebpf
• kernel
• linux

🛡️ Free AI that blocks hackers while you sleep. Runs on cheap hardware. When someone in Tokyo gets attacked, you're protected in 30 seconds. No fees. No experts needed. Just protection. One node's detection → everyone's protection.

• ai-security
• cybersecurity
• ids
• iot-security

a native library implementing secp256k1 purely for the crystal language.

• crystal
• crystal-language
• native-library
• secp256k1

Data policy IN, dynamic view OUT: PACE is the Policy As Code Engine. It helps you to programatically create and apply a data policy to a processing platform like Databricks, Snowflake or BigQuery (or plain 'ol Postgres, even!) with definitions imported from Collibra, Datahub, ODD and the like.

• data-catalog
• data-processing
• policy-enforcement
• bigquery

Agentic LLM CTF to test prompt injection attacks and preventions

Encrypts 64-bit elf files that decrypt at runtime.

• elf64
• linux
• elf-binaries
• elf-parser

Create n-grams of wordlists based on words, characters, or charsets to use in offline password attacks and data analysis

• hashcat
• jtr
• mdxfind
• ngram

🎧 Update a pinned gist to show your top Spotify tracks/artists.

• pinned-gist
• gistbox
• spotify-box
• spotify

A few elixir libraries for working with django

Pythonic way of keeping secrets secure in JSON

• secret-management
• secret-in-json
• json-parser
• python

Encrypted .env files with TOTP unsealing for production deploys. Cross-stack (Node + Java). Zero deps. Defends against npm supply-chain attacks.

• 2fa
• aes-gcm
• dotenv
• encryption

Hudinx is a tiny interaction SSH honeypot engineered in Python to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker.

• honeypot
• engineering
• python
• attacker

A small, flexible authorization core for Go, built around subject–action–resource–scope checks.

Ruby gem for the IP2Location.io API. Look up geolocation and proxy information by IP address, and retrieve WHOIS data by domain. Integrate a hosted IP geolocation API into Ruby applications and backend workflows. Enrich IPv4 and IPv6 addresses with geographic and network details for analytics, localization and security checks.

• domain-lookup
• geolocation-api
• ip-geolocation
• ip2location

Sign-in with Stacks is a library for creating and verifying Sign-In with Stacks messages.