Repository Index

A framework for orchestrating forensic collection, processing and data export

Evidence-based DSM ransomware recovery: preservation, RAM key recovery, copy decryption, and GitLab validation.

A plugin for Microsoft.EntityFrameworkCore to add support of encrypted fields using built-in or custom encryption providers.

• entity-framework-core
• plugin
• encryption
• netstandard

Cryptography Educational Foundations

• mathematics
• rustlang
• zero-knowledge
• cryptography

$MFT directory tree reconstruction & FILE record info

• mft-browser
• mft
• powershell
• winform

A Lean backend framework whose authorization safety is formally proven. The developer writes only a Cedar schema and policies; handlers are built on Supabase Auth and PostgreSQL.

• access-control
• authorization
• backend-framework
• cedar

:key: Idiotproof golang password validation library inspired by Python's passlib

High-performance pure-javascript SHA1 implementation suitable for large binary data, reaching up to half the native speed.

Hashing for Modern Object Pascal

• delphi
• fpc
• checksum
• stream

An easy, fast lib to correctly password-protect your data

• secrets
• passwords
• encryption
• keys

Z-Hound — a CSV-first collector that finds public threat reports and extracts structured IoCs without a database, LLM, or API key.

blockchain (crypto) tools, libraries & scripts in ruby

• blockchain
• cryptohash
• distributed-database
• proof-of-work

Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.

• anti-bot
• behavioral-analysis
• bot-detection
• captcha

Secure shell history commands by finding sensitive data

• rust
• shell
• bash
• security

"Evolving AppCompat/AmCache data analysis beyond grep"

EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.

Read-only, local-first cloud security scanner for AWS, Azure and GCP. Your scan data stays on your machine.

• aws
• azure
• gcp

Threat Intelligence Quotient Test - Dataviz and Statistical Analysis of TI feeds

An evidence-first research platform for observing and studying early signals in medical technology development.

• fda
• medical-devices
• openfda
• python

GasPot originally released at Blackhat 2015 - Updated for the same stuff 2026

Scalable Binary Data Extraction in Hadoop

Validates passwords against PHP's password_hash function using PASSWORD_DEFAULT. Will rehash when needed, and will upgrade legacy passwords with the Upgrade decorator.

Sym is a command line utility and a Ruby API that makes it trivial to encrypt and decrypt sensitive data. Unlike many other existing encryption tools, sym focuses on usability and streamlined interface (CLI), with the goal of making encryption easy and transparent. The result? There is no excuse for keeping your application secrets unencrypted :)

A mysqldump anonymizer

• mysqldump
• anonymizer
• database-anonymizer
• rgpd