Monkey365 is an open-source security assessment tool for Microsoft 365, Azure, and Microsoft Entra ID. It helps security professionals identify misconfigurations, review cloud security posture, and evaluate environments against industry security best practices and compliance standards.
- azure
- azuread
- microsoft365
- microsoft365-compliance
An authorization library that supports access control models like ACL, RBAC, ABAC in .NET (C#)
Procyon is a suite of Java metaprogramming tools, including a rich reflection API, a LINQ-inspired expression tree API for runtime code generation, and a Java decompiler.
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
- cve-scanning
- pentesting-tools
- rust
- vulnerability-scanners
RockYou2021.txt is a MASSIVE WORDLIST compiled of various other wordlists. RockYou2021.txt DOES NOT CONTAIN USER:PASS logins!
- wordlist
- rockyou
- rockyou2021
- wordlists
Audit AI chat exports locally before sharing or migration. Find possible secrets, personal-data patterns, broken JSON/JSONL, SQLite issues, and scan gaps—without uploading the archive.
- chat-archive
- python
- secret-scanning
- sqlite
Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)
Declarative style of authorization and validation in laravel.
- laravel
- laravel-package
- php
- laravel-acl
Run programs on linux with selectively restricted permissions.
Multi-role and whitelist based authorization gem for Rails (and not only Rails!)
- ruby
- cancan
- rails
- access-control
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.
Python tool for aircraft Doppler audio geolocation using historical ADS-B flight data (Source-available)
- ads-b
- airplane
- doppler-effect
- geolocation
🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️
:white_check_mark: .NET crypto done right. Professionally audited.
🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more
Paaster is a secure and user-friendly pastebin application that prioritizes privacy and simplicity. With end-to-end encryption and paste history, Paaster ensures that your pasted code remains confidential and accessible.
- pastebin
- paaster
- e2ee
- paste
Delphi implementation of JOSE (JSON Object Signing and Encryption) and JWT (JSON Web Token)
Easy permission definitions in Elixir apps!
YakTrace reveals when multiple Yik Yak posts were made by the same anonymous account and organizes them into a local PDF dossier. Built on the sidechat.js API project.
Roles & Permissions for Laravel
A Tool for Automatic Analysis of Malware Behavior