Scriptable network authentication cracker
- rust
- cracking
- lua
- dictionary-attack
Repository Index
87,573 visible repositories in the index
97–120 of 123 · Most stars
HIBA is a system built on top of regular OpenSSH certificate-based authentication that allows to manage flexible authorization of principals on pools of target hosts without the need to push customized authorized_users files periodically.
Python installable command line utiltity for mitigation of host and key compromises.
A Lean backend framework whose authorization safety is formally proven. The developer writes only a Cedar schema and policies; handlers are built on Supabase Auth and PostgreSQL.
- access-control
- authorization
- backend-framework
- cedar
A modular Python application to collect intelligence for malicious hosts.
- cybersecurity
- investigation
Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
- anti-bot
- behavioral-analysis
- bot-detection
- captcha
Watchtower | Self-hosted AI security assessment, asset intelligence, and evidence workflows.
- ai-agents
- attack-surface-management
- docker
- penetration-testing
Protects an unpatched PHP against php2shell (CVE-2026-109618 / CVE-2026-109619): a small extension that mirrors the official fix component by component and steps aside once the engine carries it. PHP 5.6-8.5; Sury, cPanel EA4, DirectAdmin, Docker, Windows.
- cve-2026-109618
- cve-2026-109619
- mitigation
- php
UnTangled — the easy, modern web interface for OpenWRT. A friendly LuCI alternative: Network Map, Mesh Wi-Fi, parental controls, VPN, QoS. ~75 KB, offline-first, runs alongside LuCI.
- apk
- dashboard
- firewall
- home-network
Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.
- networking
- udp
- ipv6
- ipv4
基于 ARTEX 的 AI 自主渗透测试系统，支持多 Agent 协作、资产探索与漏洞管理，提供本地部署面板。
- ai-agents
- artex
- cybersecurity
- golang
Local-only browser fingerprint & identity rotation toolkit for authorized security testing. Tor/obfs4, coherent profiles, WebRTC/DNS leak protection.
- browser-privacy
- cli
- fingerprinting
- identity-rotation
Mac browser for Mach-O binaries (macOS, iOS, watchOS, and tvOS)
- macos
- abi
- mach
- mach-o
Collection of ssl verification functions for Erlang
A honeypot for malware that propagates via USB storage devices
Rohos Disk Encryption: Windows volume encryption with 256-bit AES and hidden drives
- create-hidden-drive
- hidden-drive
- rohos-disk-encryption-download
- rohos-disk-encryption-free
Blazor.BFF.AzureAD.Template, Blazor WASM hosted in ASP.NET Core using Microsoft Entra ID BFF (server authentication)
- blazor
- aad
- azuread
- template
Compatible with LessPass. RustedLessPass is a standalone password manager written in Rust. Powered by Rust / Wasm.
- anonymous
- lesspass
- password
- password-manager
Cloverleaf is a free, open source app to replace your password manager without storing your passwords anywhere.
- password-manager
- password-generator
- security
- password-vault
:ghost: :flashlight: Invisible JS code execution & social engineering.
Self-hosted AI-assisted CTI-to-detection workbench for ATT&CK mapping, IOC/CVE intelligence, Threat Radar, malware triage, Attack Simulation, and SIEM validation.
A developer CLI tool that manages .env files, detects secret leaks, syncs env drift across teammates, and validates environment parity between local/staging/prod all from your terminal. Written in Go.
MICROS Honeypot is a low interaction honeypot to detect CVE-2018-2636 in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (MICROS). This is a directory traversal vulnerability.
- honeypot
- micros
- vulnerability
- security
Local-LLM alert triage for self-hosted SOCs.