Supply Chain Security Research - Living Off The Pipeline tools
- lotp
- supply-chain-security
- living-off-the-pipeline
Repository Index
47,133 repositories indexed
193–216 of 305 · Most stars
Scalable Binary Data Extraction in Hadoop
Minimal, consistent Python API for building integrations with malware sandboxes.
NeuraVision — AI content generation platform (PHP backend engine: auth, credits, generation, analytics)
- ab-testing
- ai-platform
- analytics
- backend-api
Sym is a command line utility and a Ruby API that makes it trivial to encrypt and decrypt sensitive data. Unlike many other existing encryption tools, sym focuses on usability and streamlined interface (CLI), with the goal of making encryption easy and transparent. The result? There is no excuse for keeping your application secrets unencrypted :)
Elixir Plug library to enable SAML 2.0 SP SSO in Phoenix/Plug applications.
- saml2-sp-sso
- saml-assertion
- plug-pipeline
A mysqldump anonymizer
- mysqldump
- anonymizer
- database-anonymizer
- rgpd
The fastest 128-bit and 256-bit hash, passes all tests, and under 140 source lines of code. API library and CLI tool in C++ and NodeJS/Wasm
- call-for-papers
- cryptanalysis
- cryptanalysis-tasks
- cryptography
BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)
A free, public vulnerability feed: CVE, GHSA, OSV, CISA KEV and EPSS merged into one entry per vulnerability. RSS, JSON API and MCP. Docs and issues only.
Writeups of Capture The Flag Competitions
- ctf
- picoctf
- writeups
- glug
Malware/IOC ingestion and processing engine
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
Searches various online resources to try and get as much info about an IP/domain as possible.
Easily access the Shopify API with Elixir.
- shopify
- shopify-api
- elixir
- elixir-lang
Integrates Spiffe and Vault to have secretless authentication
- spire
- spiffe
- vault
- hashicorp
Authenticated encrypted API tokens (IETF XChaCha20-Poly1305 AEAD) for Golang
- golang
- tokens
- branca
- jwt
🦅 EACL: Enterprise Access ControL is a ReBAC Authorization library inspired by SpiceDB, built in Clojure and backed by Datomic Pro, Datahike, Datalevin or DataScript.
- access-control
- clojure
- datalog
- authorization
Go client for the GeoServer REST API — workspaces, datastores, layers, styles, security, ACL, GeoWebCache, Importer, plus OWS GetCapabilities/Describe. Tested against GeoServer 2.27 LTS and 2.28 stable.
- geoserver
- gis
- mapping
- golang
Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.
Python API Monitor for Android apps
- android
- frida
- api
- monitoring
:camera: Instagram API client for the Elixir language (elixir-lang)
- elixir
- instagram-client
- oauth
Quick ORM RestServer and RestClient based on mORMot framework
- orm
- mormot
- restserver
- restclient
A set of Maltego transforms for VirusTotal Public API v2.0. This set has the added functionality of caching queries on a daily basis to speed up resolutions.