A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
Repository Index
68,261 visible repositories in the index
97–120 of 172 · Most stars
Minimalistic web app designed for sending private and secure notes.
- end-to-end-encryption
- minimalist
- note
- pastebin
Reverse Shell as a Service
- reverse-shell
- exploit
- vulnerability
- pentesting
LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures from Android devices. It also minimizes its interaction between user and kernel space processes during acquisition, which allows it to produce memory captures that are more forensically sound than those of other tools designed for Linux memory acquisition.
Your Everyday Threat Intelligence
- infosec
- threatintel
- threat-sharing
- threat-hunting
JWT login microservice with plugable backends such as OAuth2, Google, Github, htpasswd, osiam, ..
- jwt
- htpasswd
- service
- golang
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥
One rule to crack all passwords. or atleast we hope so.
Open source, self-hostable watched list for all your content (movies, tv series, anime, games) with user authentication, modern and clean UI and a very simple setup.
Bloodhound Reporting for Blue and Purple Teams
- active
- directory
- blueteam
- purpleteam
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
- github-actions
- actions
- supply-chain-security
- hardening
Malcom - Malware Communications Analyzer
- malware
- network-traffic
- pcap
- threat-intelligence
An information security preparedness tool to do adversarial simulation.
- uber
- vagrant
- yaml
- celery
Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
Ultimate Javascript Object Signing and Encryption (JOSE), JSON Web Token (JWT) and Json Web Keys (JWK) Implementation for .NET and .NET Core
- jose
- jwt
- json
- jwa
:key: Hash type identifier (CLI & lib)
- security-tools
- hash
- identify
- digest
Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.
Platform-Agnostic Security Tokens implementation in GO (Golang)
- go
- golang
- token
- past
:closed_lock_with_key: Multiplatform command-line password manager
A concise, directive, specific, flexible, and free incident response plan template
- incident-response
- incident
- incident-management
- infosec
Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.