Repository Index

Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.

• bpf
• ebpf
• forensics
• golang

Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes

• entropy
• pe-file
• pe-files
• pe-format

PocketBase + SvelteKit (Static): minimalistic template with configured authorization featuring a single binary or Docker image for deploying.

• pocketbase
• sveltekit
• authorization

A nodejs web application honeypot

🛡️ Free AI that blocks hackers while you sleep. Runs on cheap hardware. When someone in Tokyo gets attacked, you're protected in 30 seconds. No fees. No experts needed. Just protection. One node's detection → everyone's protection.

• ai-security
• cybersecurity
• ids
• iot-security

Normalizer for honeypot data.

Cryptographic Dataset Generation & Modelling Framework

• cryptography
• deep-learning
• deep-neural-networks
• machine-learning

Android Malware Behavior Deleter

• android
• malware
• antivirus
• editor

Self-hosted AI-assisted CTI-to-detection workbench for ATT&CK mapping, IOC/CVE intelligence, Threat Radar, malware triage, Attack Simulation, and SIEM validation.

• cybersecurity
• docker
• fastapi
• llm

Simple Docker Honeypot server emulating small snippets of the Docker HTTP API

A malware dataset curation tool which helps identify packed samples.

• malware
• packer
• security
• peid

Minimal authentication library for Ruby on Rails

• authentication
• gem
• multitenancy
• rails

Packing detection tool for PE files

• detector
• pe-file
• pe-format
• peid

A simple many-rules to many-files YARA scanner for incident response or malware zoos.

• yara
• yara-scanner
• incident-response
• dfir

Minimal JS implementation of older cryptography algorithms: RSA, DSA, DH.

• cryptography
• dh
• diffie-hellman
• dsa

HL7 / FHIR honeypot

• golang
• honeypot

Attack tool for altering packed samples so that they evade static packing detection

• adversarial
• attack-defense
• evasion
• executable-packing

A mysql honeypot, still very very early stage

Webapplication Honeypot

CalmAV wrapper for elixir

• clamav
• elixir
• antivirus
• malware-detection

Go library MalShare API

• malware
• hash
• threat-intelligence
• threat

🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.

• ansible
• ansible-playbook
• devsecops
• infrastructure-as-code

Integrated MALware Simulator and Emulator

Simple TCP/UDP honeypot implemented in Perl

• honeypot