A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
- application-security
- appsec
- bug-bounty
- burp-alternative
Repository Index
68,261 visible repositories in the index
121–144 of 172 · Most stars
Enables client-side applications to dance OAuth with GitHub.
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
- pentesting
- security
- chrome-extension
- api-keys
Safe, simple and fast JSON Web Tokens for Go
- jwt
- jwt-token
- jwt-claims
- dependency-free
ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.
- clamscan
- file-scanner
- virus-scan
- docker-compose
List DTDs and generate XXE payloads using those local DTDs.
- xxe
- dtd
- security
- hacktoberfest
bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
- xss
- bxss
- security
- bugbounty
An implementation of JOSE standards (JWE, JWS, JWT) in Go
Delphi implementation of JOSE (JSON Object Signing and Encryption) and JWT (JSON Web Token)
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
- network-security
- security
- arkime
- cybersecurity
OWASP Honeypot, Automated Deception Framework.
- owasp
- honeypot
- honeynet
- deception
tool for generating wordlists or extending an existing one using mutations.
Astral-PE is a low-level mutator (Headers/EP obfuscator) for native Windows PE files (x32/x64)
- cybersecurity
- hacktoberfest
- low-level
- mutator
JSON Object Signing and Encryption (JOSE) for Erlang and Elixir
- jose
- cryptography
- jwt
- erlang
A Lean backend framework whose authorization safety is formally proven. The developer writes only a Cedar schema and policies; handlers are built on Supabase Auth and PostgreSQL.
- access-control
- authorization
- backend-framework
- cedar
The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups
- active-directory
- cheatsheet
- ctf
- cybersecurity
Pakkero is a binary packer written in Go made for fun and educational purpose. Its main goal is to take in input a program file (elf binary, script, even appimage) and compress it, protect it from tampering and intrusion.
- launcher
- payload
- elf
- elf-binaries
We took PersistenceSniper, merged it with Python, and misspelled it on purpose. Meet PyrsistenceSniper.
- cybersecurity
- cybersecurity-tools
- incident-response
- security
This is quick session for net/http in golang. This package is perhaps the best implementation of the session mechanism, at least it tries to become one.
- go
- golang
- session
Create adversarial attacks against machine learning Windows malware detectors
- adversarial-machine-learning
- infosec
- python
- attack
A framework for the JOSE standards JWS, JWE, and JWK written in Swift.
- jws
- jwk
- swift
- jwe
A medium interaction printer honeypot 🍯
GUI for Frida -Scripts
- frida
- frida-server
- gui
- diff-gui
The tool is used to analyze the content of the android application in local storage.