Repository Index

brute force SSH public-key authentication

• ssh
• penetration-testing
• remote-admin-tool
• ssh-key

eBPF Security Monitoring and Sandboxing Agent Based on Aya

• aya
• bpf
• ebpf
• security

A set of Maltego transforms for VirusTotal Public API v2.0. This set has the added functionality of caching queries on a daily basis to speed up resolutions.

Rolling hash functions in Java

• rolling-hash-functions
• java
• hashing

AI-powered platform for OSINT intelligence analysis. Features archive discovery with hypothesis-driven investigation, GLiNER entity extraction, Mapbox geospatial visualization, network analysis, and document processing. Built with FastAPI, Next.js, Weaviate, and DSPy.

• ai-agents
• document-processing
• dspy
• entity-extraction

Package passwap provides a unified implementation between different password hashing algorithms. It allows for easy swapping between algorithms, using the same API for all of them.

• argon2
• bcrypt
• go
• hashing

Creates a readable stream producing cryptographically strong pseudo-random data using `crypto.randomBytes()`

• random-bytes
• random
• crypto
• pseudo-random-generator

Simplified CA and device cert manager for strongSwan VPN

Next.js boilerplate for passwordless authentication with Prisma and next-auth with apollo graphql api with style from tailwindcss

Tool used for dumping memory from Android devices

Erlang OAuth2 Client

Fragscapy is a command-line tool to fuzz network protocols by automating the modification of outgoing network packets. It can run multiple successive tests to determine which options can be used to evade firewalls and IDS.

• fuzzing
• network
• ids
• firewall

Welcome to HackTheArch! A free open source scoring server for cyber Capture the Flag competitions!

• ctf-scoreboard
• ctf-framework
• ctf-platform
• ctf-events

🚀 Production-ready AI-friendly Go REST API boilerplate with Clean Architecture, JWT auth, RBAC, PostgreSQL migrations, and highly tested. AI-optimized with built-in guidelines for most used IDEs. Docker hot-reload, Swagger docs, one-command setup. Build production APIs in minutes, not weeks.

• api
• api-documentation
• authentication
• backend

Framework agnostic set of sqlalchemy classes that make building applications that require permissions an easy task.

• python
• pyramid
• flask
• sqlalchemy

provides a full user authentication experience for an API. Includes login,logout,register,forgot password, forgot username, confirmation email and all that other good stuff. Includes plug for checking for authenticated users and macro for generating the required routes.

ThreatTracker is a Python script designed to monitor and generate alerts on given sets of indicators of compromise (IOCs) indexed by a set of Google Custom Search Engines.

Security and Hacking Tools, Exploits, Proof of Concepts, Shellcodes, Scripts.

Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection

• docker-image
• executable-packing
• malware-packers
• research-platform

A full-featured Swift library for JOSE standards with first-class support for CryptoKit keys, providing JWS, JWT, SD-JWT, and JWE with signing, encryption, and JWK key management.

• jsonwebtoken
• jws
• jwt
• json-web-key

Handles sessions for Ruby web applications using DynamoDB as a backend.

Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise

• detection
• splunk
• bpfdoor
• vulnerability

YALIH (Yet Another Low Interaction Honeyclient) is a low Interaction Client honeypot designed to detect malicious websites through signature, anomaly and pattern matching techniques

Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents

• claude-code
• cti
• llm
• rag