Repository Index

Secure diceware passphrase generator

• electron
• electron-app
• desktop-application
• desktop

The Intelligent Honey Net Project attempts to create actionable information from honeypots

Advanced analysis software for APK payloads created by RATs.

• apk
• remoteaccesstrojan
• reverse-engineering
• aapt

NullKia Mobile Security Framework - Tools in Nim, Crystal, V, D, Red, Odin, Haxe, Zig, Kotlin, Lua, PHP, Python | bad-antics | github.com/bad-antics

• android-hacking
• baseband
• bootloader-unlock
• checkm8

Modular web-application honeypot platform built using go and gin

• cti
• cyber-threat-intelligence
• golang
• honeypot

Open source tools for realistic-behaving electric grid honeynets

A probably paranoid Golang utility library for securely hashing and encrypting passwords based on the Dropbox method. This implementation uses Blake2b, Scrypt and XSalsa20-Poly1305 (via NaCl SecretBox) to create secure password hashes that are also encrypted using a master passphrase.

• golang
• golang-library
• scrypt
• password-hash

Gulp.js command execution for humans

• gulp
• execa
• gulp-plugin
• gulpjs

Password generator written in Golang, usable as a CLI or Go library. Provides options for human readable and accessibility friendly passwords.

• golang
• go
• go-library
• golang-library

Security training for the apps you actually ship. Open your browser and start hacking.

• appsec
• ctf
• cybersecurity
• nextjs

HoneyHTTPD is a Python-based web server honeypot/service imitation builder. Great for honeypots or faking HTTP services.

• python
• honeypot
• honeypot-http
• python-web

What do we say to JavaScript? Not today! motherfuckingwebsite.com inspired CTF platform.

Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.

• bpf
• ebpf
• forensics
• golang

🛡️ Free AI that blocks hackers while you sleep. Runs on cheap hardware. When someone in Tokyo gets attacked, you're protected in 30 seconds. No fees. No experts needed. Just protection. One node's detection → everyone's protection.

• ai-security
• cybersecurity
• ids
• iot-security

Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to find badness.

Advanced Phishing Protection: Suricata rulesets open and free

• anti-phishing
• antiphishing
• openphish
• phishing

End-to-end encryption for data at rest: a C library and CLI with recoverable keys, post-quantum (ML-KEM) key exchange, and user-to-user sharing

• encryption
• stream-encryption
• aes-256-gcm
• ecdh

Cryptographic Dataset Generation & Modelling Framework

• cryptography
• deep-learning
• deep-neural-networks
• machine-learning

Cumulus. Threat modeling the Clouds.

• card-game
• cornucopia
• elevation-of-privilege
• eop

Data policy IN, dynamic view OUT: PACE is the Policy As Code Engine. It helps you to programatically create and apply a data policy to a processing platform like Databricks, Snowflake or BigQuery (or plain 'ol Postgres, even!) with definitions imported from Collibra, Datahub, ODD and the like.

• data-catalog
• data-processing
• policy-enforcement
• bigquery

Website to Scrapping all writeup from http://ctftime.org/ and you can organize which to read first!

A SSH Server in Go that logs username/password combos

Real-time secret-leak guardrails for AI coding agents (Claude Code, Codex), Git hooks, and CI.

• ai-agents
• claude-code
• claude-code-plugin
• codex

Create dataset for suricata with indicators of MISP instances and add sightings in MISP if an indicator of dataset generates an alert