Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
- security-tools
- security
- attestation
- verification
Repository Index
47,133 repositories indexed
145–168 of 257 · Most stars
Advanced keyboard-walk generator with configureable basechars, keymap and routes
🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more
Fastest 5KB JS implementation of ed25519 signatures
- ed25519
- curve25519
- eddsa
- cryptography
Fast HTTP enumerator
- http
- fuzz
- fuzzer
- enumerator
DNS Rebinding Exploitation Framework
Integrated certification via Let's encrypt for Elixir-powered sites
Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF
- owasp
- ctf
- ctfd
- application-security
A Linux packet crafting tool.
- packet-crafting
- networking
- hacking-tool
- intrusion-prevention
MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.
- python
- mqtt
- mqtt-broker
- mqtt-client
🔥 A fully open source audit logs service and embeddable UI easily deployed to your own Kubernetes cluster. Brought to you by replicated.com and boxyhq.com 🚀
- enterprise-software
- kubernetes
- audit-logs
- enterprise-ready
⛽️ Integrates Guzzle 6.x, a PHP HTTP Client, into Symfony
- guzzle
- symfony
- php
- bundle
Roles & Permissions for Laravel
- php
- defender
- middleware
- laravel
:hammer: Manage your website via terminal
- php
- security-tools
- python
- pentest
Keyscope is a key and secret workflow (validation, invalidation, etc.) tool built in Rust
A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public
- hacking-tools
- bash
- git-dumper
- pentesting
Set of tools for security testing of Internet of Things devices using specific network IoT protocols
Astral-PE is a low-level mutator (Headers/EP obfuscator) for native Windows PE files (x32/x64)
- cybersecurity
- hacktoberfest
- low-level
- mutator
Various wordlists FR & EN - Cracking French passwords
- wordlists
- hashcat
- french
- cracking-hashes
Hashcat web interface
- hashcat
- cracking
- analytics
- pentesting
The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups
- active-directory
- cheatsheet
- ctf
- cybersecurity
inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques
- forensics
- hypervisor
- memory-dump
- reverse-engineering
👤Minimalist Google OAuth Authentication for Elixir Apps. Tested, Documented & Maintained. Setup in 5 mins. 🚀
- elixir
- google-api
- auth
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
- cve-2026-109618
- cve-2026-109619
- exploit
- mod-php