CAUTION: END OF SUPPORT ON 14 AUG 2026. The 'jsrsasign' (RSA-Sign JavaScript Library) is an opensource free cryptography library supporting RSA/RSAPSS/ECDSA/DSA signing/validation, ASN.1, PKCS#1/5/8 private/public key, X.509 certificate, CRL, OCSP, CMS SignedData, TimeStamp, CAdES and JSON Web Signature/Token in pure JavaScript.
Manages application of security headers with many safe defaults
- secure-headers
- csp
- hsts
- referrer-policy
A repository of sysmon configuration modules
The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime
Modular and decentralised honeypot
Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
The wolfSSL library is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3 and DTLS 1.3! Update to wolfSSL 5.9.1 for the latest CVE fixes.
PPPwn - PlayStation 4 PPPoE RCE
An authorization library that supports access control models like ACL, RBAC, ABAC in Node.js and Browser
This is the public repository for the CFR Java decompiler
Th3Inspector 🕵️ Best Tool For Information Gathering 🔎
- information-gathering
- reverse-phone-lookup
- mx-lookup
- whois-lookup
Automated Security Testing For REST API's
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
Security sensor for realtime threat detection and protection
🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse-engineering agents like REA. Poison -> Exhaust -> Hallucinate.
Entity Framework Core Power Tools - reverse engineering, migrations and model visualization in Visual Studio & CLI
- entity-framework-core
- visual-studio
- entity-framework
- model-visualization
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
- post-exploitation
- hacking
- backdoor
- stealth
各种漏洞poc、Exp的收集或编写
Modern Java decompiler aiming to be as accurate as possible, with an emphasis on output quality. Fork of the Fernflower decompiler.
- decompiler
- fernflower
- java
- hacktoberfest
The repository host gives no description.
OAuth 2 / OpenID Connect Client API for JavaScript Runtimes
OAuth client integration for Symfony. Supports both OAuth1.0a and OAuth2.
A collection of JavaScript engine CVEs with PoCs