Repository Index

Bluetooth experimentation framework for Broadcom and Cypress chips.

• bluetooth
• broadcom
• firmware
• ios

The PE file analysis toolkit

• binary-analysis
• reverse-engineering
• pe-file
• portable-executable

Multi-role and whitelist based authorization gem for Rails (and not only Rails!)

• ruby
• cancan
• rails
• access-control

Rails integration for Rodauth authentication framework

• rodauth
• authentication
• rails
• multifactor-authentication

HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.

• malware-analysis
• dynamic-analysis
• security
• linux

Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.

• pentesting
• security
• chrome-extension
• api-keys

ObjectivePGP is an open-source library for iOS and macOS that provides developers with tools for implementing OpenPGP encryption and decryption, digital signing, and signature verification in their applications, thereby enhancing security and data integrity.

• openpgp
• objective-c
• encryption
• pgp

phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code

• php
• php-codesniffer
• phpcs
• static-code-analysis

Andromeda - Interactive Reverse Engineering Tool for Android Applications

• android
• reverse-engineering
• binary-analysis
• static-analysis

MIRACL Cryptographic SDK: Multiprecision Integer and Rational Arithmetic Cryptographic Library is a C software library that is widely regarded by developers as the gold standard open source SDK for elliptic curve cryptography (ECC).

OpenXPKI Code

• pki
• enterprise-software
• workflow-based
• x509

TranslatedFull-Chain Sentinel (全链哨兵, "full-chain sentinel") is a cybersecurity Agent that integrates web penetration testing, Android app security testing, iOS app security testing, batch target probing for offensive and defensive operations, automated emergency response, and open-source vulnerability monitoring. It is used to assist with automating security service delivery. Use for illegal purposes is prohibited.

• agent
• blue-team
• cybersecurity
• cybersecurity-tools

AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.

• ai
• attack-surface-management
• bbot
• cybersecurity

Scirius is a web application for Suricata ruleset management and threat hunting.

• python
• security
• management
• interface

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

• beacons
• blue-team
• c2
• command-and-control

Nintendo Switch userland code execution using Civilization 7 game cartridge

Tool to gather Threat Intelligence indicators from publicly available sources

Documenting the unofficial and internal Steam Web API

• documentation
• docs
• wiki
• api-documentation

GUI frontend to John the Ripper password cracker

• gui
• qt
• john
• password

An opinionated production-ready SQL-/Swagger-first RESTful JSON API written in Go, highly integrated with VSCode DevContainers by allaboutapps.

• golang-development
• vscode-devcontainers
• golang
• go

Defanged Indicator of Compromise (IOC) Extractor.

• ioc
• indicators-of-compromise
• library
• ioc-extractor

🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more

• tls
• ssl
• certificate
• keystore

bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.

• xss
• bxss
• security
• bugbounty

Machinae Security Intelligence Collector