Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.
- ai-safety
- ai-security
- claude-code
- llm-agent
Repository Index
47,133 repositories indexed
145–168 of 212 · Most stars
WebAppSec Content Security Policy
Protect your SIP Servers from bad actors at https://sentrypeer.org
- sip
- voip
- security-tools
- honeypot
Wraps around various tools and provides some additional checks/information to produce a centralized report of a PE file.
gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that you can join on Google Groups: https://groups.google.com/forum/#!topic/gonids/
- suricata
- parse
- security-tools
- network-security
CTF Writeups
Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️
- devsecops
- entropy
- gdpr
- golang
Routopsy - Hacking Routers with Routers
Authentication and authorization providers for Eclipse Vert.x
🔍A cutting edge context aware GraphQL API fuzzing tool!
- api-testing-framework
- graphql
- api
- automated-testing
Follow stolen crypto hop by hop across Bitcoin, Ethereum, TRON, BNB Chain and Solana. Labels where the money landed, keeps proof for every clue, writes the report.
Modern honeypot supporting multiple services, realistic website cloning, and AI-powered features
- cybersecurity
- honeypot
- python
- ai
Public repository for improvements to the EXTRABACON exploit
Token authentication solution for Phoenix. Useful for APIs for e.g. single page apps.
preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.
Ziti SDK for Golang
- golang
- networking
- sdk
- zero-trust
A library for allowing apps to easily use different auth providers.
A free, public vulnerability feed: CVE, GHSA, OSV, CISA KEV and EPSS merged into one entry per vulnerability. RSS, JSON API and MCP. Docs and issues only.
TranslatedCyclops is a browser with XSS detection capabilities
- security
- xss
- taint-tracking
- vulnerability
Writeups of Capture The Flag Competitions
- ctf
- picoctf
- writeups
- glug
Authentication plugin for CakePHP. Can also be used in PSR7 based applications.
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
- cve-2026-109618
- cve-2026-109619
- exploit
- memory-corruption
Kustomize generator plugin that generates Secrets from sops-encrypted files
Process HTTP Pcaps With YARA