Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.
Repository Index
81,588 visible repositories in the index
193–216 of 2,306 · Most stars
SSH tarpit that slowly sends an endless banner
Reverse-engineer any video, shot by shot: filmed, AI-generated or coded, and how to remake it. Breakdowns in the open VIDEO.md format. 逆向一切视频，逐个镜头看是拍的、AI 生成的还是代码做的，再告诉你怎么复刻；拆解结果按 VIDEO.md 格式输出。
- agent-skills
- ai-video
- aigc-detection
- claude-code
The tiniest OpenID Certified™ authorization and authentication server you have ever seen.
- 2fa
- authentication
- caddy
- golang
You Know, For WEB Fuzzing !
- fuzzing
- fuzz-testing
- pentesting
- username
GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux
The open-source, privacy-friendly CAPTCHA you host yourself. Bots and AI agents out, people in.
- captcha
- javascript
- proof-of-work
- antispam
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
TranslatedA public-network tool for software and hardware routers: ipv6/ipv4 port forwarding, reverse proxy, DDNS, WOL, ipv4 stun intranet penetration, cron, acme, rclone, ftp, webdav, filebrowser
- ddns
- ipv6
- socat
- stun
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
A fast, simple, recursive content discovery tool written in Rust.
- web
- pentest
- pentesting-tool
- rust
Tuta is an email service with a strong focus on security and privacy that lets you encrypt emails, contacts and calendar entries on all your devices.
- javascript
- mithril
- encryption
PHP 5.x support for random_bytes() and random_int()
- php
- php5
- secure
- secure-by-default
This is a multi-use bash script for Linux systems to audit wireless networks.
- evil-twin
- wps
- security
- beef
OmniAuth is a flexible authentication system utilizing Rack middleware.
- omniauth
- authentication
- hacktoberfest
- ruby
Scripted Local Linux Enumeration & Privilege Escalation Checks
Password protect a static HTML page, decrypted in-browser in JS with no dependency. No server logic needed.
- static-html
- encryption
- html
- password
Cyber Security ALL-IN-ONE Platform
- redteam
- redteam-tools
- hacking-tools
- scanner
JWA, JWS, JWE, JWT, JWK, JWKS for Node.js, Browser, Cloudflare Workers, Deno, Bun, and other Web-interoperable runtimes
- jose
- jwa
- jwe
- jwk
Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]
- penetration-testing
- red-teaming
- windows
- fireeye-flare
Token-based AngularJS Authentication
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
- security-audit
- build-tool
- maven-plugin
- jenkins-plugin
Automated ACME SSL certificate generation for nginx-proxy
Lightweight vault and password manager for Android, KeePassDX allows editing encrypted data in a single file in KeePass format and fill in the forms in a secure way.
- keepass
- android
- android-application
- material-design