Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
Sandboxed Execution Environment
One-Time-Secret sharing platform with a symmetric 256bit AES encryption in the browser
Script to create templates to use with VirtualBox to make vm detection harder
Enables client-side applications to dance OAuth with GitHub.
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
OpenID/Connect, OAuth2, WS-Federation and SAML 2.0 server based on Duende IdentityServer and ITFoxtec Identity SAML 2.0 with its admin UI
RSA public/private key generation, RSA, AES encryption/decryption, RSA sign/verify in Swift with CommonCrypto in iOS and OS X
ObjectivePGP is an open-source library for iOS and macOS that provides developers with tools for implementing OpenPGP encryption and decryption, digital signing, and signature verification in their applications, thereby enhancing security and data integrity.
A simple way of authenticating your RESTful APIs with API keys using Laravel
ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.
Making Laravel Passport work with Lumen
An opinionated production-ready SQL-/Swagger-first RESTful JSON API written in Go, highly integrated with VSCode DevContainers by allaboutapps.
- golang-development
- vscode-devcontainers
- golang
- go
Automated Attack Simulation in the Cloud, complete with detection use cases.
Advanced keyboard-walk generator with configureable basechars, keymap and routes
CuckooDroid - Automated Android Malware Analysis with Cuckoo Sandbox.
🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more
AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.
Simple to use, simple to deploy, one time self destruct messaging service, with hashicorp vault as a backend
Paaster is a secure and user-friendly pastebin application that prioritizes privacy and simplicity. With end-to-end encryption and paste history, Paaster ensures that your pasted code remains confidential and accessible.
:atom: Social (OAuth1\OAuth2\OpenID\OpenIDConnect) sign with PHP :shipit:
- php
- oauth
- social
- oauth-application
Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
JShell - Get a JavaScript shell with XSS.
Collection of example YARA-L rules for use within Google Security Operations