Repository Index

The Offensive Manual Web Application Penetration Testing Framework.

• web-penetration-testing
• reconnaissance
• vulnerability-analysis
• scanning-enumeration

Analyze the security of any domain by finding all the information possible. Made in python.

PHP Captcha library

• captcha
• php
• security
• bots

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

• graphql
• security-scanner
• graphql-security
• api-documentation-tool

RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact

• hacktoberfest
• rdp
• pentest
• honeypot

An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity

• ssh
• honeypot
• go
• golang

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

• azure
• defender-for-endpoint
• dfir
• kql

CSRF protection middleware for Go.

• csrf
• go
• security
• middleware

Splunk Security Content

• splunk
• detection
• engineering
• responses

Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS

• aws
• cloud
• security
• big-data

The best way to build Electron apps with security in mind.

• electron
• security
• template
• react

🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥

• hash
• infosec
• cyber
• security

Interactive CTF Exploration Tool

• security
• reverse-engineering
• windows
• windows-internals

One rule to crack all passwords. or atleast we hope so.

ICS/SCADA honeypot

• honeypot
• scada
• ics
• python

GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.

• digital-human-rights
• anonymity
• security
• python

Elastic Security detection content for Endpoint

UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.

• incident-response
• forensics
• computer-forensics
• triage

Secure Vault for Customer PII/PHI/PCI/KYC Records

• gdpr
• pii
• piidata
• security

Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.

• encryption-server
• encryption
• crypto
• cryptography

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

• tokenization
• web-security
• compliance
• security

Security Tool to Look For Interesting Files in S3 Buckets

• s3-bucket
• penetration-testing
• bugbounty
• enumeration

BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.

• security
• yara
• serverless
• terraform

A multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks.

• rust
• security
• security-tools
• pdf