Repository Index

Kustomize generator plugin that generates Secrets from sops-encrypted files

A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation

• audit
• cognito
• cybersecurity
• scanner

Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.

• crtsh
• cve
• cve-2026-109618
• cve-2026-109619

Words list generator to crack security tokens

The repository host gives no description.

Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.

• cybersecurity
• hacking
• iast
• dast

A library designed to generate cryptographically strong random numbers suitable for managing data such as passwords, account authentication, security tokens, and related secrets.

• clojure
• jvm
• secrets
• security

A honeypot for the Log4Shell vulnerability (CVE-2021-44228).

Vulnerable Web applications Generator

• vulnerabilities
• docker
• python
• generator

Dynamically generate self-signed certificates and certificate authorities for Go tests

• golang
• certificate-generation
• go
• testing

HOTP/TOTP one time passwords on java phones (J2ME)

• hotp
• j2me
• j2me-platform
• one-time-pad

A docker container to simplify and secure the use of Infrastructure as Code (IaC)

• infrastructure-as-code
• iac
• docker
• docker-image

AI-powered platform for OSINT intelligence analysis. Features archive discovery with hypothesis-driven investigation, GLiNER entity extraction, Mapbox geospatial visualization, network analysis, and document processing. Built with FastAPI, Next.js, Weaviate, and DSPy.

• ai-agents
• document-processing
• dspy
• entity-extraction

Creates a readable stream producing cryptographically strong pseudo-random data using `crypto.randomBytes()`

• random-bytes
• random
• crypto
• pseudo-random-generator

ThreatTracker is a Python script designed to monitor and generate alerts on given sets of indicators of compromise (IOCs) indexed by a set of Google Custom Search Engines.

provides a full user authentication experience for an API. Includes login,logout,register,forgot password, forgot username, confirmation email and all that other good stuff. Includes plug for checking for authenticated users and macro for generating the required routes.

Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise

• detection
• splunk
• bpfdoor
• vulnerability

This project is designed to create deceptive webpages to deceive and redirect attackers away from real websites.

• deceptive-webpages
• web-cloner
• honeypot
• deception

Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection

• docker-image
• executable-packing
• malware-packers
• research-platform

Simple tool to extract the most common substrings from an input text. Built for password cracking.

• passwords
• cracking
• string-manipulation
• wordlist-generator

Secure diceware passphrase generator

• electron
• electron-app
• desktop-application
• desktop

drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates

• docker
• security
• audit

NTP, DNS, SSDP, Chargen and generic UDP-based amplification DDoS honeypot

An ICAP Server with yara scanner for URL and content.

• python
• icap-server
• yara
• malware-analysis