Repository Index

Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.

A set of Maltego transforms for VirusTotal Public API v2.0. This set has the added functionality of caching queries on a daily basis to speed up resolutions.

eBPF Security Monitoring and Sandboxing Agent Based on Aya

• aya
• bpf
• ebpf
• security

Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise

• detection
• splunk
• bpfdoor
• vulnerability

🌊 Elixir RSS/ATOM feed builder with a focus on standards compliance, security and extensibility

• elixir
• rss
• atom

🛡 Modern elixir ACL/ABAC library for managing granular user abilities and permissions

• elixir
• elixir-phoenix
• ecto
• acl

A probably paranoid Golang utility library for securely hashing and encrypting passwords based on the Dropbox method. This implementation uses Blake2b, Scrypt and XSalsa20-Poly1305 (via NaCl SecretBox) to create secure password hashes that are also encrypted using a master passphrase.

• golang
• golang-library
• scrypt
• password-hash

Password generator written in Golang, usable as a CLI or Go library. Provides options for human readable and accessibility friendly passwords.

• golang
• go
• go-library
• golang-library

A low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability.

• security
• security-tools
• vulnerability
• honeypot

A short and small memory forensics helper.

• python
• volatility
• memory-forensics

Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.

• bpf
• ebpf
• forensics
• golang

Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to find badness.

Example repository for GitHub Actions Time of Check to Time of Use (TOCTOU vulnerabilities)

• actions
• bugbounty
• cicd

A vulnerability patch gathering tool

K8s API Honeypot with Active Defense Capabilities

• never
• going
• to
• give

Web app that can hash/hmac, encrypt/decrypt, and sign/verify the data, debug JWT tokens, parse and edit ASN1 structures, compute diffs, and more

• crypto
• utilities
• utility
• wasm

XSSMaze is a web service designed to test and improve the performance of security testing tools by providing various cases of XSS vulnerabilities.

• crystal-lang
• hacking
• security
• vulnapp

Local-first policy gateway for coding agents. Allow, review, or block MCP, shell, SQL, GitHub, and HTTP actions with scoped credentials and signed evidence.

• golang
• observability
• opentelemetry
• policy-engine

WebLogic Honeypot is a low interaction honeypot to detect CVE-2017-10271 in the Oracle WebLogic Server component of Oracle Fusion Middleware. This is a Remote Code Execution vulnerability.

• security
• security-tools
• honeypot
• deception

National Vulnerability Database (NVD) implemented by rust

• cpe
• cve
• cvss
• nvd

MICROS Honeypot is a low interaction honeypot to detect CVE-2018-2636 in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (MICROS). This is a directory traversal vulnerability.

• honeypot
• micros
• vulnerability
• security

Gatling DSL extensions — feeders, profile management, transactions, assertions, Redis integration, and utility functions

• gatling
• performance
• performance-testing
• gatling-plugin

🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.

• ansible
• ansible-playbook
• devsecops
• infrastructure-as-code

A plugin based GraphQL vulnerability assessment tool.

• graphql
• graphql-security
• pentest-tool
• python3