Repository Index

Find which of your direct GitHub dependencies is susceptible to RepoJacking attacks

• golang
• go
• supply-chain
• security

Mimicry is a dynamic deception tool that actively deceives an attacker during exploitation and post-exploitation.

• backdoor
• honeypot
• incident-response
• security

🛡️ Free AI that blocks hackers while you sleep. Runs on cheap hardware. When someone in Tokyo gets attacked, you're protected in 30 seconds. No fees. No experts needed. Just protection. One node's detection → everyone's protection.

• ai-security
• cybersecurity
• ids
• iot-security

Want to crack passwords faster by using a wordlist that fits your 'target audience'? Use WikiRaider.

• wordlist
• wikipedia
• dictionary
• attack

Google Summer of Code 2012 project, supported by The Honeynet Project organization.

Agentic LLM CTF to test prompt injection attacks and preventions

Encrypts 64-bit elf files that decrypt at runtime.

• elf64
• linux
• elf-binaries
• elf-parser

AWSDoor is a red team automation tool designed to simulate advanced attacker behavior in AWS environments

Create n-grams of wordlists based on words, characters, or charsets to use in offline password attacks and data analysis

• hashcat
• jtr
• mdxfind
• ngram

Self-hosted AI-assisted CTI-to-detection workbench for ATT&CK mapping, IOC/CVE intelligence, Threat Radar, malware triage, Attack Simulation, and SIEM validation.

• cybersecurity
• docker
• fastapi
• llm

IOS/MAC Denial-Of-Service [POC/EXPLOIT FOR MASSIVE ATTACK TO IOS/MAC IN NETWORK]

• cve
• security
• hacking
• exploit

Attack tool for altering packed samples so that they evade static packing detection

• adversarial
• attack-defense
• evasion
• executable-packing

Medusa Repository: Transynther tool and Medusa Attack

Honeypot that mimics Tomcat manager endpoints. Logs requests and saves attacker's WAR file for later study

• honeypot
• spring-boot
• tomcat

Attack Community Graphs through Event Clustering

A Python framework that uses machine learning algorithms to implement the metadata recovery attack against obfuscated programs.

Encrypted .env files with TOTP unsealing for production deploys. Cross-stack (Node + Java). Zero deps. Defends against npm supply-chain attacks.

• 2fa
• aes-gcm
• dotenv
• encryption

Hudinx is a tiny interaction SSH honeypot engineered in Python to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker.

• honeypot
• engineering
• python
• attacker

Sigma Queries turned into KQL for Defender using pysigma - Automated

• detection-engineering
• kql
• microsoftsentinel
• mitre-attack

TerraSigma - Modern Detection Engineering for the Cloud-Native SIEM Microsoft Sentinel

• cybersecurity
• detection-engineering
• devops
• kql

Detect the Shai Hulud 2.0 npm supply chain attack (796+ packages). Scans for malicious files, hashes, and compromised ecosystems. Fast, accurate scanner.

• cdn
• cve
• polyfill
• polyfill-io