Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
☁️ Python package for interacting with Steam
- steam
- valve
- steamworks
- webapi
DRAKVUF Black-box Binary Analysis
Program to reverse Docker images into Dockerfiles
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
Interactive Delphi Reconstructor
Malcom - Malware Communications Analyzer
IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
A Rust implementation of the Noise Protocol Framework
in-toto is a framework to protect supply chain integrity.
- supply-chain
- security
- new-york-university
- secure-systems-lab
Python low-interaction honeyclient
Audit AI chat exports locally before sharing or migration. Find possible secrets, personal-data patterns, broken JSON/JSONL, SQLite issues, and scan gaps—without uploading the archive.
- chat-archive
- python
- secret-scanning
- sqlite
An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)
Nintendo Switch library manager, with automated management tasks, serving your library to multiple supported clients on your Switch, with shop customization and multi user authentication.
- tinfoil
- atmosphere
- homebrew
- switch
Extract and aggregate threat intelligence.
DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
- binary-analysis
- taint-analysis
Use Apple FaceID or TouchID authentication in your app using BiometricAuthentication.
Bluetooth experimentation framework for Broadcom and Cypress chips.
Rails integration for Rodauth authentication framework
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
ObjectivePGP is an open-source library for iOS and macOS that provides developers with tools for implementing OpenPGP encryption and decryption, digital signing, and signature verification in their applications, thereby enhancing security and data integrity.
Andromeda - Interactive Reverse Engineering Tool for Android Applications
MIRACL Cryptographic SDK: Multiprecision Integer and Rational Arithmetic Cryptographic Library is a C software library that is widely regarded by developers as the gold standard open source SDK for elliptic curve cryptography (ECC).