Repository Index

ThePhish: an automated phishing email analysis tool

• email
• detection
• malware
• phishing

cwe_checker finds vulnerable patterns in binary executables

• cwe
• binary-analysis
• static-analyzer
• vulnerability-scanner

The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.

• csrf
• crawler
• csrf-attacks
• token-generation

RSA public/private key encryption in Swift

• swift
• ios
• encryption
• rsa

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.

• github-actions
• actions
• supply-chain-security
• hardening

🍯 Unobtrusive and flexible spam protection for Rails apps

• honeypot
• rails
• anti-spam
• captcha

A collection of practical security-focused guides and checklists for smart contract development

• crypto
• security
• security-tools
• smart-contracts

Software Supply Chain Transparency Log

• supply-chain
• provenance
• security
• transparency-log

Custom & better AppArmor profile generator for Docker containers.

• docker
• apparmor-profile
• apparmor
• containers

Procyon is a suite of Java metaprogramming tools, including a rich reflection API, a LINQ-inspired expression tree API for runtime code generation, and a Java decompiler.

:rocket: An open source alternative to searx which provides a modern-looking :sparkles:, lightning-fast :zap:, privacy respecting :disguised_face:, secure :lock: meta search engine

• meta-search-engine
• rust
• search-engine
• fast

Package gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services 🔒

• csrf-protection
• gorilla
• middleware
• golang

Program to reverse Docker images into Dockerfiles

• security-tools
• security
• docker-security
• reverse-engineering

Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0

• android-unpacker
• gdb
• qemu
• reverse-engineering

TranslatedA lightweight DDD forward/reverse business modeling framework that supports the architectural evolution of complex business systems!

• ddd
• extension
• ddd-architecture
• clean-architecture

An information security preparedness tool to do adversarial simulation.

• uber
• vagrant
• yaml
• celery

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

• cybersecurity
• threat
• ioc
• malware

🕵️ Tool to reverse-engineer Protocol Buffers with unknown definition

• reverse-engineering
• protocol-buffers
• serialization

Laravel Ban simplify blocking and banning Eloquent models.

• laravel
• eloquent
• cog
• trait

Protect against malicious open source packages 🤖

• devsecops
• security
• supply-chain-security
• policy-as-code

A Rust implementation of the Noise Protocol Framework

• cryptography
• crypto
• noise-protocol-framework
• noise-protocol

Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.

Wordlist, rules and masks from Kaonashi project (RootedCON 2019)

• wordlist
• password
• password-strength
• password-safety

Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.

• cve-scanning
• pentesting-tools
• rust
• vulnerability-scanners