Sandbox for developing and testing UI components in isolation
Repository Index
55,640 visible repositories in the index
97–120 of 789 · Most stars
Malicious traffic detection system
Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.
game of active directory
- active-directory
- infrastructure-as-code
- pentest
- ansible
The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next.
You Know, For WEB Fuzzing !
- fuzzing
- fuzz-testing
- pentesting
- username
GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux
Translatedhsweb (haʊs wɛb) is a foundational project for enterprise-level back-office management systems, developed on spring-boot 2.x and the first to use fully reactive programming.
- spring-boot
- javaweb
- mybatis
- java
Tuta is an email service with a strong focus on security and privacy that lets you encrypt emails, contacts and calendar entries on all your devices.
- javascript
- mithril
- encryption
Password protect a static HTML page, decrypted in-browser in JS with no dependency. No server logic needed.
- static-html
- encryption
- html
- password
Direct Memory Access (DMA) Attack Software
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
- security-audit
- build-tool
- maven-plugin
- jenkins-plugin
A guide to smart contract security best practices
🚀🎉📚 SaaS Boilerplate built with Next.js + Tailwind CSS + Shadcn UI + TypeScript. ⚡️ Full-stack React application with Auth, Multi-tenancy, Roles & Permissions, i18n, Landing Page, DB, Logging, Testing
- authentication
- boilerplate
- multi-tenancy
- nextjs
A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.
Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.
- ai-security
- alert-triage
- cybersecurity
- detection-engineering
TranslatedDeepAudit: An AI hacker team for everyone, putting vulnerability discovery within reach. Beginners can deploy and run it with one click, with autonomous collaborative auditing + automated sandbox PoC verification. Supports private deployment with Ollama and one-click report generation. Supports relay stations. Making security no longer expensive and auditing no longer complicated.
- ai
- bug-detection
- code-audit
- code-quality
RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data
- rsa-attack
- rsa
- cryptography
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
- anti-analysis
- anti-debugging
- anti-sandbox
- anti-vm
Infection Monkey - An open-source adversary emulation platform
- penetration-testing
- security-tools
- security-automation
- infection-monkey
CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access
- authorization
- permissions
- acl
- cancan
External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets.
- external-secrets
- kubernetes
- kubernetes-secrets
- secrets-manager
CTFs as you need them
A native macOS KeePass client
- keepass
- kdbx
- macpass
- password-manager