Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
Repository Index
47,133 repositories indexed
97–120 of 150 · Most stars
Integrates Spiffe and Vault to have secretless authentication
- spire
- spiffe
- vault
- hashicorp
Code for our DLS'21 paper - BODMAS: An Open Dataset for Learning based Temporal Analysis of PE Malware. BODMAS is short for Blue Hexagon Open Dataset for Malware AnalysiS.
- malware
- pe-malware
- malware-dataset
- malware-research
Audit and fix your Mac's security in one command. No agent, no signup, open source.
- cli
- compliance
- endpoint-security
- golang
CLI tool for running coding agents inside hardware-isolated microVMs
A docker container to simplify and secure the use of Infrastructure as Code (IaC)
Time-Based One-Time Password (TOTP) and HMAC-Based One-Time Password (HOTP) library for Go.
- hotp
- totp
- totp-codes
- authenticator
Security and Hacking Tools, Exploits, Proof of Concepts, Shellcodes, Scripts.
Vuldroid is a Vulnerable Android Application made with security issues in order to demonstrate how they can occur in code
- android-application
- webview-xss
- application-security
- vulnerable-application
Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents
Hide secrets like API keys, passwords and tokens in Neovim while screen sharing or streaming. Masks .env, JSON, YAML, TOML, XML, .http, Terraform/HCL and Dockerfiles with extmarks, without changing the file. Presentation mode, screen shield, picker and terminal masking.
A low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability.
Troje is a honeypot built around lxc containers. It will run each connection with the service within a seperate lxc container.
hashgen - the blazingly fast hash generator
- cyclone
- generator
- hash
- md5
Web app that can hash/hmac, encrypt/decrypt, and sign/verify the data, debug JWT tokens, parse and edit ASN1 structures, compute diffs, and more
go-fasttld is a high performance effective top level domains (eTLD) extraction module.
- compressed-trie
- idn
- idna
- ipv4
Practical security policy enforcement for Android apps via bytecode rewriting and in-place reference monitor
Real-time secret-leak guardrails for AI coding agents (Claude Code, Codex), Git hooks, and CI.
Encrypts 64-bit elf files that decrypt at runtime.
- elf64
- linux
- elf-binaries
- elf-parser
Crypto Puzzles is a tool and library to provide a bunch of functions for encryption or pseudo encryption as puzzles or brain teasers. Awesome for kids but some puzzles are also a challenge for adults.
WebLogic Honeypot is a low interaction honeypot to detect CVE-2017-10271 in the Oracle WebLogic Server component of Oracle Fusion Middleware. This is a Remote Code Execution vulnerability.
- security
- security-tools
- honeypot
- deception
Privacy-first clipboard manager for macOS. Local-only history, snippets, smart paste, and Touch ID protection.
- clipboard
- clipboard-manager
- developer-tools
- macos
A D Library of encryption, decryption, encode, hash, and message digital signatures.
StaDynA: Addressing the Problem of Dynamic Code Updates in the Security Analysis of Android Applications
- android-security
- android
- static-analysis
- dynamic-analysis