A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public
- hacking-tools
- bash
- git-dumper
- pentesting
Repository Index
83,087 visible repositories in the index
1,633–1,656 of 2,352 · Most stars
HIBA is a system built on top of regular OpenSSH certificate-based authentication that allows to manage flexible authorization of principals on pools of target hosts without the need to push customized authorized_users files periodically.
Free OSINT app for Discord IDs: paste a user, server or invite and see when it was made and who it copies.
Application template for Rails projects; preloaded with best practices for TDD, security, deployment, and developer productivity.
- rails-template
- template
- rails
- ruby
A collection of cryptographic primitives written in pure Lua
Auditable & minimal JS implementation of public-key post-quantum cryptography
- dilithium
- kyber
- ml-kem
- post-quantum-cryptography
[MIRROR] unofficial implementation of Dante protocol (Audio over IP)
- audio-over-ip
- dante
- reverse-engineering
- aoip
Oath is rails authentication made simple. Previously known as Monban
Guardian DB integration for tracking tokens and ensuring logout cannot be replayed.
- guardian
- database
- guardian-db
🗜️ A packer for Windows x86 executable files written in C and Intel x86 Assembly. The new file after packing can obstruct reverse engineering（使用C和Intel x86汇编开发的Windows x86可执行文件打包工具，打包后的新文件可以阻碍逆向工程）
.NET client for the Auth0 Authentication & Management APIs.
- oauth2
- openid-connect
- dx-sdk
A Python RESTful API framework for online malware analysis and threat intelligence services.
- python
- cybersecurity
- malware
- malware-analysis
A framework for orchestrating forensic collection, processing and data export
Astral-PE is a low-level mutator (Headers/EP obfuscator) for native Windows PE files (x32/x64)
- cybersecurity
- hacktoberfest
- low-level
- mutator
JSON Web Token library
- jwt
- jwt-bearer-tokens
- rsa-signature
- hmac
Evidence-based DSM ransomware recovery: preservation, RAM key recovery, copy decryption, and GitLab validation.
Steam (OpenID) authentication strategy for Passport and Node.js.
DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.
- python
- malware-analysis
- automation
- config-dump
A plugin for Microsoft.EntityFrameworkCore to add support of encrypted fields using built-in or custom encryption providers.
- entity-framework-core
- plugin
- encryption
- netstandard
Wireless Hacking Devices Protocol client
The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted drives and extracted artifacts from Windows, Linux, MacOS, and Android devices
CRAB (Clean Rebuild of Anything's Behavior): rebuild software from behavior, not source code. An MCP-powered toolkit for black-box observation, clean-room reimplementation, and behavioral verification.
- clean-room-reimplementation
- ai-agents
- behavioral-testing
- black-box-testing
JSON Object Signing and Encryption (JOSE) for Erlang and Elixir
- jose
- cryptography
- jwt
- erlang
Kraken: A multi-platform distributed brute-force password cracking system
- kraken
- kraken-client
- security-tools
- security