Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents
- claude-code
- cti
- llm
- rag
Repository Index
77,852 visible repositories in the index
1,513–1,536 of 1,760 · Most stars
Simple tool to extract the most common substrings from an input text. Built for password cracking.
- passwords
- cracking
- string-manipulation
- wordlist-generator
Defensomania is a security monitoring and incident response card game.
- incident-response
- self-assessment
- incident-response-readiness
- educational-game
NullKia Mobile Security Framework - Tools in Nim, Crystal, V, D, Red, Odin, Haxe, Zig, Kotlin, Lua, PHP, Python | bad-antics | github.com/bad-antics
- android-hacking
- baseband
- bootloader-unlock
- checkm8
Advanced analysis software for APK payloads created by RATs.
- apk
- remoteaccesstrojan
- reverse-engineering
- aapt
drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates
Control Flow Graph Scanning for Android
DEPRECATED, Nozzlr is a bruteforce framework, trully modular and script-friendly
- pentesting
- bruteforce
- python
- infosec
Find which of your direct GitHub dependencies is susceptible to RepoJacking attacks
- golang
- go
- supply-chain
- security
Bind/Reverse Shells, SOCKS, etc over Tor in Golang
- tor
- ethical-hacking
- reverse-shell
- bind-shell
[F]aster [U]niversal [U]npacker
Modular web-application honeypot platform built using go and gin
- cti
- cyber-threat-intelligence
- golang
- honeypot
Markov-chains for linguistically-correct password cracking
🛡 Modern elixir ACL/ABAC library for managing granular user abilities and permissions
- elixir
- elixir-phoenix
- ecto
- acl
Distributed Honeypot
- distributed
- honeypot
- deception
- security
Mimicry is a dynamic deception tool that actively deceives an attacker during exploitation and post-exploitation.
- backdoor
- honeypot
- incident-response
- security
Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies on file access, network operations, and process execution.
Open source tools for realistic-behaving electric grid honeynets
A probably paranoid Golang utility library for securely hashing and encrypting passwords based on the Dropbox method. This implementation uses Blake2b, Scrypt and XSalsa20-Poly1305 (via NaCl SecretBox) to create secure password hashes that are also encrypted using a master passphrase.
- golang
- golang-library
- scrypt
- password-hash
A minimalist Crystal authorization system inspired by https://github.com/varvet/pundit.
- praetorian
- crystal
- authorization
- authorisation
Ultra high-performance secp256k1 ECC engine | Python, Node.js, Rust, Go, C#, Swift, Java bindings | CUDA, Metal, OpenCL GPU | ECDSA, Schnorr, FROST, MuSig2, BIP-352 | 15+ platforms
- cryptography
- cuda
- riscv
- secp256k1
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
Password generator written in Golang, usable as a CLI or Go library. Provides options for human readable and accessibility friendly passwords.
- golang
- go
- go-library
- golang-library
Security training for the apps you actually ship. Open your browser and start hacking.