A collection of essential and foundational cybersecurity knowledge, thoughtfully organized for easy comprehension.
Repository Index
81,588 visible repositories in the index
97–120 of 181 · Most stars
Secrets Patterns DB: The largest open-source Database for detecting secrets, API keys, passwords, tokens, and more.
- gitleaks
- regex
- regular-expression
- regular-expressions
A python tool used to discover endpoints, potential parameters, a target specific wordlist for a given target and secrets
GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).
WiFi, Bluetooth and Ethernet Threat Detection.
BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.
- osint
- recon
- reconnaissance
- cybersecurity
ICS/SCADA honeypot
- honeypot
- scada
- ics
- python
A collection of postmortem templates
- site-reliability-engineering
- site-reliability
- devops
- postmortem
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
- csrf
- crawler
- csrf-attacks
- token-generation
Package gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services 🔒
- csrf-protection
- gorilla
- middleware
- golang
Mundane is a Rust cryptography library backed by BoringSSL that is difficult to misuse, ergonomic, and performant (in that order).
- cryptography
- rust
- boringssl
PHP 5.3+ oAuth 1/2 Client Library
Audited & minimal JS implementation of hash functions, MACs and KDFs.
- cryptography
- hash
- kdf
- hashing
raven is a Linkedin information gathering tool that can be used by pentesters to gather information about an organization employees using Linkedin.
Usable, easy and safe pure-Rust crypto
- cryptography
- rust
- crypto
- chacha20-poly1305
🚀 Useful README.md, LICENSE, CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, GitHub Issues, Pull Requests and Actions templates to jumpstart your projects.
- readme
- documentation
- docs
- docs-generator
Web Application Honeypot
Python tool for aircraft Doppler audio geolocation using historical ADS-B flight data (Source-available)
- ads-b
- airplane
- doppler-effect
- geolocation
bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
- xss
- bxss
- security
- bugbounty
🔒Unified API for password hashing algorithms
Catch risky npm dependency changes before they merge.
- dependency-analysis
- devsecops
- github-actions
- malware
:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.
Super Next generation Advanced Reactive honEypot
YakTrace reveals when multiple Yik Yak posts were made by the same anonymous account and organizes them into a local PDF dossier. Built on the sidechat.js API project.
- 0-day
- 0-day-exploit
- proof-of-concept
- vulnerability