gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that you can join on Google Groups: https://groups.google.com/forum/#!topic/gonids/
The complete hacking & penetration testing roadmap. From beginner to elite. 44,982 lines, 150+ Diagram across the roadmap: OPSEC, web security, Active Directory, binary exploitation, EDR evasion, and 0-day research. 300+ tools, 200+ MITRE techniques, C & Rust payloads, lab guides, books, courses, blogs, practice platforms, and AI security resources
🔍 Function-level tracing tool for Seccomp profiling, with eBPF
- ebpf
- ebpf-programs
- golang
- seccomp
Local-first Git diff triage. Turn patches into actionable review checklists in your browser, CLI or GitHub Actions. Zero dependencies, no AI keys, no uploads. By brunnodev.
Open-source agentic security operations platform:
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
Read-only check for traces of the November 2026 NIKKE PC launcher compromise. Windows, Linux (Proton, Steam Deck) and macOS.
TranslatedFush Vue MCP — Vue frontend reverse engineering + web security testing tool (Chrome extension + MCP server, 91 tools)
Mobile runtime detection workbench for AI (iOS and Android)
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
The opposite of Ruler, provides blue teams with the ability to detect Ruler usage against Exchange.
Audit and fix your Mac's security in one command. No agent, no signup, open source.
- cli
- compliance
- endpoint-security
- golang
Distributed Honeypot
Mimicry is a dynamic deception tool that actively deceives an attacker during exploitation and post-exploitation.
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
A low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability.
POMjs is a random password generator in HTML and pure Javascript with no cookies and no trackers. It has been translated into several languages.
Cumulus. Threat modeling the Clouds.
- card-game
- cornucopia
- elevation-of-privilege
- eop
Android Malware Behavior Deleter
A tool designed for consistent and safe capture of off network web resources.
🕵️♀️ Find, locate, and query files for ops and security experts ⚡️⚡️⚡️
Ada Keystore - protect your sensitive data with secure storage
WebLogic Honeypot is a low interaction honeypot to detect CVE-2017-10271 in the Oracle WebLogic Server component of Oracle Fusion Middleware. This is a Remote Code Execution vulnerability.
The plugin repository for Honeycomb, the honeypot framework by Cymmetria