Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).
Repository Index
47,133 repositories indexed
97–120 of 248 · Most stars
Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.
Limit access to your Laravel applications by using invite codes
- php
- laravel
- laravel-package
- doorman
Python low-interaction honeyclient
- honeyclient
- client-honeypot
- python
- security-tools
Platform-Agnostic Security Tokens implementation in GO (Golang)
- go
- golang
- token
- past
StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
- bugbounty
- security
- security-tools
- mobile-security
Cryptographic Primitive Code Generation by Fiat
DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
- binary-analysis
- taint-analysis
Use Apple FaceID or TouchID authentication in your app using BiometricAuthentication.
- authentication
- faceid
- touchid
- biometric-identification
Low-Level OAuth 2 / OpenID Connect Client API for JavaScript Runtimes
- oauth2
- openid
- openid-connect
- oidc
Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.
Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.
- codereview
- cybersecurity
- ruby
- sinatra
phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code
- php
- php-codesniffer
- phpcs
- static-code-analysis
Fast and dependency-free cryptographic hashing library for node.js and browsers (supports MD5, SHA1, SHA256, SHA512, RIPEMD, HMAC)
- hashing-algorithm
- javascript
- hmac
- hexadecimal
🚀 Useful README.md, LICENSE, CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, GitHub Issues, Pull Requests and Actions templates to jumpstart your projects.
- readme
- documentation
- docs
- docs-generator
OpenXPKI Code
- pki
- enterprise-software
- workflow-based
- x509
ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.
- clamscan
- file-scanner
- virus-scan
- docker-compose
A tool for studying JavaScript malware.
eXtended Keccak Code Package
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
Tiny hashing module that uses the native crypto API in Node.js and the browser
WinDBG Anti-RootKit Extension
- kernel-mode
- c-plus-plus
- malware
- malware-analysis
Codesign Electron macOS apps
- electron-osx-sign
- macos
- entitlements
- provisioning-profiles
An opinionated production-ready SQL-/Swagger-first RESTful JSON API written in Go, highly integrated with VSCode DevContainers by allaboutapps.
- golang-development
- vscode-devcontainers
- golang
- go