UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.
Secure Vault for Customer PII/PHI/PCI/KYC Records
Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
- tokenization
- web-security
- compliance
- security
Security Tool to Look For Interesting Files in S3 Buckets
BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
A multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks.
ThePhish: an automated phishing email analysis tool
A utility to safely generate malicious network traffic patterns and evaluate controls.
cwe_checker finds vulnerable patterns in binary executables
Advanced Honeypot framework.
RSA public/private key encryption in Swift
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
Some public notes
A modular vulnerability scanner with automatic report generation capabilities.
🍯 Unobtrusive and flexible spam protection for Rails apps
A collection of practical security-focused guides and checklists for smart contract development
npm package for OpenID Connect, OAuth Code Flow with PKCE, Refresh tokens, Implicit Flow
Software Supply Chain Transparency Log
- supply-chain
- provenance
- security
- transparency-log
Custom & better AppArmor profile generator for Docker containers.
Package gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services 🔒
Lightweight Certificate Transparency Log Monitor
Program to reverse Docker images into Dockerfiles
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.