Credentials catching honeypot
- honeypot
- deception
- security
- security-tools
47,133 repositories indexed
97–120 of 163 · Most stars
Credentials catching honeypot
BadActor.org An in-memory application driven jailer written in Go
The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups
Automatically exported from code.google.com/p/creddump
:key: Idiotproof golang password validation library inspired by Python's passlib
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
THE MOST POWERFUL OFFENSIVE AI AGENT FOR PENTESTING , OSINT , AND ETHICAL HACKING
Port of the xxhash library to C++17.
Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️
The Redexer binary instrumentation framework for Dalvik bytecode
Modern honeypot supporting multiple services, realistic website cloning, and AI-powered features
A platform to develop, run and administer CTF competitions. This is the online echoCTF.RED platform source code
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
unXOR will search a XORed file and try to guess the key using known-plaintext attacks.
NeuraVision — AI content generation platform (PHP backend engine: auth, credits, generation, analytics)
The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.
Open-source agentic security operations platform:
A framework for receiving and redistributing abuse feeds
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
🦅 EACL: Enterprise Access ControL is a ReBAC Authorization library inspired by SpiceDB, built in Clojure and backed by Datomic Pro, Datahike, Datalevin or DataScript.
CTF in a box. Minimal setup required. (not production-ready yet)
Middleware based authorization for Absinthe GraphQL powered by Bodyguard
Compatible with LessPass. RustedLessPass is a standalone password manager written in Rust. Powered by Rust / Wasm.
AI-powered platform for OSINT intelligence analysis. Features archive discovery with hypothesis-driven investigation, GLiNER entity extraction, Mapbox geospatial visualization, network analysis, and document processing. Built with FastAPI, Next.js, Weaviate, and DSPy.