Extract and aggregate threat intelligence.
- ioc
- indicators-of-compromise
- threatintel
- threat-intelligence
70,234 visible repositories in the index
169–192 of 301 · Most stars
Extract and aggregate threat intelligence.
Fastest 5KB JS implementation of secp256k1 signatures and ECDH
Collection of pure Rust elliptic curve implementations: NIST P-224, P-256, P-384, P-521, secp256k1, SM2
StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
Typed TypeScript SDK for direct and managed social platform integrations, with capability checks, explicit outcomes, and deterministic testing.
DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
PE-bear (builds only)
Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.
Framework for Making Environmental Keyed Payloads (NO LONGER SUPPORTED)
OpenID/Connect, OAuth2, WS-Federation and SAML 2.0 server based on Duende IdentityServer and ITFoxtec Identity SAML 2.0 with its admin UI
phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code
Usable, easy and safe pure-Rust crypto
Single C file TLS 1.2/1.3 implementation, using tomcrypt as crypto library
ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.
Fake sshd that logs ip addresses, usernames, and passwords.
Cryptographic signature algorithms: DSA, ECDSA, Ed25519
List DTDs and generate XXE payloads using those local DTDs.
Python tool for aircraft Doppler audio geolocation using historical ADS-B flight data (Source-available)
🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more
Password cracking rules and masks for hashcat that I generated from cracked passwords.
An implementation of JOSE standards (JWE, JWS, JWT) in Go
Fastest 5KB JS implementation of ed25519 signatures
Django web application to store and manage vouchers, coupons, loyalty and gift cards digitally. Supports PWA, offline caching, expiry notifications, transaction histories, file uploads and OIDC SSO.
Offline, encrypted vault for seed phrases, private keys, passwords and API keys. Also used by agents.