YALIH (Yet Another Low Interaction Honeyclient) is a low Interaction Client honeypot designed to detect malicious websites through signature, anomaly and pattern matching techniques
Repository Index
78,851 visible repositories in the index
1,417–1,440 of 1,684 · Most stars
A PE (Portable Executable) packer with Huffman Compression and Xor encryption.
- huffman-compression
- huffman-algorithm
- pe-header
- packer
A collection of authentication-related plugs
Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents
- claude-code
- cti
- llm
- rag
CrOTP - One Time Passwords for Crystal
Simple tool to extract the most common substrings from an input text. Built for password cracking.
- passwords
- cracking
- string-manipulation
- wordlist-generator
Defensomania is a security monitoring and incident response card game.
- incident-response
- self-assessment
- incident-response-readiness
- educational-game
NullKia Mobile Security Framework - Tools in Nim, Crystal, V, D, Red, Odin, Haxe, Zig, Kotlin, Lua, PHP, Python | bad-antics | github.com/bad-antics
- android-hacking
- baseband
- bootloader-unlock
- checkm8
Secure diceware passphrase generator
Powerful Session Management for Kemal applications
- kemal
- session
- crystal
- middleware
drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates
NTP, DNS, SSDP, Chargen and generic UDP-based amplification DDoS honeypot
The Intelligent Honey Net Project attempts to create actionable information from honeypots
Simple Connect / Express Steam authentication library.
Modular web-application honeypot platform built using go and gin
- cti
- cyber-threat-intelligence
- golang
- honeypot
(UNMAINTAINED. FEEL FREE TO FORK) 🐍A Pythonic way to provide JWT authentication for Flask-GraphQL
Distributed Honeypot
- distributed
- honeypot
- deception
- security
Mimicry is a dynamic deception tool that actively deceives an attacker during exploitation and post-exploitation.
- backdoor
- honeypot
- incident-response
- security
Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies on file access, network operations, and process execution.
A probably paranoid Golang utility library for securely hashing and encrypting passwords based on the Dropbox method. This implementation uses Blake2b, Scrypt and XSalsa20-Poly1305 (via NaCl SecretBox) to create secure password hashes that are also encrypted using a master passphrase.
- golang
- golang-library
- scrypt
- password-hash
A minimalist Crystal authorization system inspired by https://github.com/varvet/pundit.
- praetorian
- crystal
- authorization
- authorisation
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
Comprehensive security for Lucky framework
- lucky-framework
- authentication
- security
- crystal
Password generator written in Golang, usable as a CLI or Go library. Provides options for human readable and accessibility friendly passwords.
- golang
- go
- go-library
- golang-library