The open-source, privacy-friendly CAPTCHA you host yourself. Bots and AI agents out, people in.
- captcha
- javascript
- proof-of-work
- antispam
73,362 visible repositories in the index
145–168 of 1,377 · Most stars
The open-source, privacy-friendly CAPTCHA you host yourself. Bots and AI agents out, people in.
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
Unified Policy as Code
Rewrite of the popular wireless network auditor, "wifite"
Tuta is an email service with a strong focus on security and privacy that lets you encrypt emails, contacts and calendar entries on all your devices.
PHP 5.x support for random_bytes() and random_int()
This is a multi-use bash script for Linux systems to audit wireless networks.
Password protect a static HTML page, decrypted in-browser in JS with no dependency. No server logic needed.
Reverse-engineer any video, shot by shot: filmed, AI-generated or coded, and how to remake it. Breakdowns in the open VIDEO.md format. 逆向一切视频,逐个镜头看是拍的、AI 生成的还是代码做的,再告诉你怎么复刻;拆解结果按 VIDEO.md 格式输出。
JWA, JWS, JWE, JWT, JWK, JWKS for Node.js, Browser, Cloudflare Workers, Deno, Bun, and other Web-interoperable runtimes
Defeating Windows User Account Control
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
bcrypt for NodeJs
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
A modern TLS library in Rust
Lightweight vault and password manager for Android, KeePassDX allows editing encrypted data in a single file in KeePass format and fill in the forms in a secure way.
A guide to smart contract security best practices
Automated Adversary Emulation Platform
BleachBit system cleaner for Windows and Linux
The modern Java bytecode editor
open-source jailbreaking tool for many iOS devices
▦ Universal, standards-based auth provider.
Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.
🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙♀️