List DTDs and generate XXE payloads using those local DTDs.
- xxe
- dtd
- security
- hacktoberfest
Repository Index
89,073 visible repositories in the index
1,249–1,272 of 1,771 · Most stars
Tool to gather Threat Intelligence indicators from publicly available sources
OpenID Connect Library for Rust
- oauth2-client
- oauth2-authentication
- openid-connect
- openid-client
:no_entry: (DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.
PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.
Local-first password manager with direct device-to-device sync
- password-manager
- totp-authenticator
- security
- security-tools
Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
- security-tools
- security
- attestation
- verification
Advanced keyboard-walk generator with configureable basechars, keymap and routes
Python tool for aircraft Doppler audio geolocation using historical ADS-B flight data (Source-available)
- ads-b
- airplane
- doppler-effect
- geolocation
🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️
Linker/Compiler/Tool detector for Windows, Linux and MacOS.
- detect
- reverse-engineering
- signature
- malware-analysis
:white_check_mark: .NET crypto done right. Professionally audited.
- crypto
- cryptography
- c-sharp
- aead
Nginx common useful configuration
- nginx
- configs
- nginx-configuration
- codesandbox
🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more
bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
- xss
- bxss
- security
- bugbounty
Samsung Tizen root
- embedded-linux
- firmware-analysis
- hardware-hacking
- mali-gpu
PHP CAPTCHA Script
MCP (Model Context Protocol) server for game hacking & reverse engineering. A structured knowledge base of 4,100+ skills with full source code archives, specialized agents, and workflow tools -- designed to be plugged into Claude, Cursor, or any MCP-compatible client.
Source-built, locally bound FailSafe distribution of ARTEX (v0.3.15)
Simple to use, simple to deploy, one time self destruct messaging service, with hashicorp vault as a backend
Paaster is a secure and user-friendly pastebin application that prioritizes privacy and simplicity. With end-to-end encryption and paste history, Paaster ensures that your pasted code remains confidential and accessible.
- pastebin
- paaster
- e2ee
- paste
A clean room recreation of Auth0 with 1:1 drop in replacement feature parity.
The Ultimate Boilerplate for Products.
- boilerplate
- meteor
- meteorjs
- nodejs
Pure Go implementation of the NaCL set of API's
- golang
- nacl
- security
- secretbox