🕵️♀️ Find, locate, and query files for ops and security experts ⚡️⚡️⚡️
Repository Index
47,133 repositories indexed
193–212 of 212 · Most stars
Crypto Puzzles is a tool and library to provide a bunch of functions for encryption or pseudo encryption as puzzles or brain teasers. Awesome for kids but some puzzles are also a challenge for adults.
GitHub App authentication for Go: installation tokens, JWTs and PATs as oauth2.TokenSource, plus webhook signature verification and KMS/HSM signing
A malware dataset curation tool which helps identify packed samples.
A layer of abstraction the around acme/autocert certificate manager (Golang)
- ssl
- ssl-certificates
- ssl-certificate
- x509
Statically compiled, zero-dependency Git pre-commit secret scanner and credentials detector written in Go. An alternative to Gitleaks and git-secrets.
- aho-corasick
- cybersecurity
- devops
- git-hook
Capture The Flag competition challenge write-ups
- ctf
- ctf-writeups
- ctf-solutions
- writeup
The open-source safety layer for AI agents — block unsafe tool calls, require approval, enforce budgets, audit, replay.
A developer CLI tool that manages .env files, detects secret leaks, syncs env drift across teammates, and validates environment parity between local/staging/prod all from your terminal. Written in Go.
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
- ansible
- ansible-playbook
- devsecops
- infrastructure-as-code
Agile Threat Modeling as Code
- cdk
- modeling
- threagile
- threat
A library that wraps OpenSSL, but also has pure Julia implementations for reference.
RSASSA-PSS Public Key Cryptographic Signature Algorithm for Erlang and Elixir.
Keep your secrets out of your AI coding agents. A local HTTPS proxy that swaps real credentials with placeholders and injects them at the network boundary.
Encrypted .env files with TOTP unsealing for production deploys. Cross-stack (Node + Java). Zero deps. Defends against npm supply-chain attacks.
- 2fa
- aes-gcm
- dotenv
- encryption
A Deterministic Random Bit Generator based on AES in Counter mode (AES-CTR-DRBG) as specified in NIST SP 800-90A written in Go.
- aes-ctr
- crypto
- drbg
- cipher-algorithms
The "interpol" security string interpolation library and the "police" command line tool. Just moved here from https://bitbucket.org/vahidi/interpol
- golang
- security-tools
TerraSigma - Modern Detection Engineering for the Cloud-Native SIEM Microsoft Sentinel
- cybersecurity
- detection-engineering
- devops
- kql
IPFS apps with an update path
Open-source PocketBase security auditor: detects empty rules, the @request.auth.id != trap, true literals. Active probe confirms leaks live.