Repository Index

Automatic HTTPS for any Go program: fully-managed TLS certificate issuance and renewal

• https
• acme
• letsencrypt
• golang

Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.

• doorkeeper
• oauth
• oauth2-provider
• oauth2-server

Dshell is a network forensic analysis framework.

The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.

• hacktoberfest
• abac
• access-control
• acl

Open Source Cloud Native Application Protection Platform (CNAPP)

• cloud-native
• vulnerability-management
• threat-analysis
• devsecops

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

• hids
• security
• pci-dss
• nist800-53

Enterprise-grade Shopify Admin API authentication adapter — OAuth 2.0 Client Credentials Grant with automatic token refresh.

• authentication
• client-credentials
• httpx
• oauth2

A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.

• threat-hunting
• sysmon
• hunting-campaigns
• hypothesis

Android virtual machine and deobfuscator

• deobfuscation
• java
• optimization
• android

Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.

• messaging
• authentication
• key-management
• identity

This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.

• reverse-engineering
• rop
• rop-exploitation
• rop-gadgets

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

• hacking-vps
• bug-bounty
• tmux
• axiom

Digging Deeper....

• incident-response
• forensics-investigations
• inventory-management
• endpoint-security

P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W.

Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.

• reverse-engineering
• symbolic-execution
• binary-analysis
• program-analysis

Java bytecode engineering toolkit

• java-bytecode
• java

FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

• malware
• deobfuscation
• strings
• flare

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

• vulnerabilities
• scanner
• firefox-extension
• grunt-plugins

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.

• bro
• scans
• nmap
• network

Your web application for managing personal data.

• dashboard
• dashboards
• manager
• symfony

A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

• security
• linux-namespaces
• linux
• process-isolation

UNIX-like reverse engineering framework and command-line toolset.

• reverse-engineering
• program-analysis
• security
• exploitation

A high performance offensive security tool for reconnaissance and vulnerability scanning

• reconnaissance
• scanner
• vulnerability-assessment
• vulnerability-scanner

Android Reverse-Engineering Workbench for VS Code

• apktool
• apk-decompiler
• apk-editor
• smali