ThePhish: an automated phishing email analysis tool
Repository Index
47,133 repositories indexed
169–192 of 589 · Most stars
An authorization library that supports access control models like ACL, RBAC, ABAC in .NET (C#)
- casbin
- access-control
- authorization
- rbac
Bloodhound Reporting for Blue and Purple Teams
- active
- directory
- blueteam
- purpleteam
Noriben - Portable, Simple, Malware Analysis Sandbox
Advanced Honeypot framework.
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
- csrf
- crawler
- csrf-attacks
- token-generation
Digital Forensics artifact repository
A modular vulnerability scanner with automatic report generation capabilities.
- artemis
- pentesting
- security
- security-scanner
🍯 Unobtrusive and flexible spam protection for Rails apps
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
- digital-security
- forensics
- incident-response
- ioc
PE Tools - Portable executable (PE) manipulation toolkit
- pefile
- hex-editor
- disassembler
- entropy
Lightweight Certificate Transparency Log Monitor
- certificate-transparency
- pki
- x509
- security
Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part of NCC Group).
- dfir
- dissect
- python
HellPot is a cross-platform portal to endless suffering meant to punish unruly HTTP bots.
IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
- cybersecurity
- threat
- ioc
- malware
An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction
Protect against malicious open source packages 🤖
Generate smart and powerful wordlists
- wordlist
- password
- hacking-tool
- password-cracking
Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.
:honey_pot: A fake Django admin login screen page.
- python
- django
Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.
Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).
PHP 5.3+ oAuth 1/2 Client Library
A powerful and easy to configure uptime and ssl monitor