47,133 repositories indexed
1–24 of 115 · Most stars
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
SWE-agent takes a GitHub issue and tries to automatically fix it, using your LM of choice. It can also be employed for offensive cybersecurity or competitive coding challenges. [NeurIPS 2024]
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
Small and highly portable detection tests based on MITRE's ATT&CK.
Disk encryption with strong security based on TrueCrypt
Socket-based TS/JavaScript API for WhatsApp Web
Hash-based post quantum signatures in Rust
Solidity contracts implementing hash based post quantum signatures
Hash-based signatures in typescript, WOTS+
RetDec is a retargetable machine-code decompiler based on LLVM.
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
Go package for UUIDs based on RFC 4122 and DCE 1.1: Authentication and Security Services.
Role-based Permissions for Laravel 5
A native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps
eBPF-based Security Observability and Runtime Enforcement
OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W.
🛠 Secure, stateless, and cookie-based session library for Next.js or any JavaScript framework
Token based authentication for Rails JSON APIs. Designed to work with jToker and ng-token-auth.
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
Swift based OAuth library for iOS
A generic, spec-compliant, thorough implementation of the OAuth request-signing logic
AuthPass - Password Manager based on Flutter for all platforms. Keepass 2.x (KDBX 3 and KDBX 4) compatible.
LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures from Android devices. It also minimizes its interaction between user and kernel space processes during acquisition, which allows it to produce memory captures that are more forensically sound than those of other tools designed for Linux memory acquisition.