Repository Index

Interactive CTF Exploration Tool

• security
• reverse-engineering
• windows
• windows-internals

ICS/SCADA honeypot

• honeypot
• scada
• ics
• python

GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.

• digital-human-rights
• anonymity
• security
• python

Elastic Security detection content for Endpoint

UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.

• incident-response
• forensics
• computer-forensics
• triage

Secure Vault for Customer PII/PHI/PCI/KYC Records

• gdpr
• pii
• piidata
• security

Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.

• encryption-server
• encryption
• crypto
• cryptography

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

• tokenization
• web-security
• compliance
• security

Security Tool to Look For Interesting Files in S3 Buckets

• s3-bucket
• penetration-testing
• bugbounty
• enumeration

BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.

• security
• yara
• serverless
• terraform

A multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks.

• rust
• security
• security-tools
• pdf

ThePhish: an automated phishing email analysis tool

• email
• detection
• malware
• phishing

A utility to safely generate malicious network traffic patterns and evaluate controls.

• security
• testing-tools
• monitoring
• intrusion-detection

cwe_checker finds vulnerable patterns in binary executables

• cwe
• binary-analysis
• static-analyzer
• vulnerability-scanner

Noriben - Portable, Simple, Malware Analysis Sandbox

Advanced Honeypot framework.

• honeypot
• framework
• security

RSA public/private key encryption in Swift

• swift
• ios
• encryption
• rsa

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.

• github-actions
• actions
• supply-chain-security
• hardening

Some public notes

• nodejs
• security
• npm
• travis-ci

A modular vulnerability scanner with automatic report generation capabilities.

• artemis
• pentesting
• security
• security-scanner

🍯 Unobtrusive and flexible spam protection for Rails apps

• honeypot
• rails
• anti-spam
• captcha

A collection of practical security-focused guides and checklists for smart contract development

• crypto
• security
• security-tools
• smart-contracts

npm package for OpenID Connect, OAuth Code Flow with PKCE, Refresh tokens, Implicit Flow

• openid
• angular
• implicit-flow
• npm

Software Supply Chain Transparency Log

• supply-chain
• provenance
• security
• transparency-log