Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
Repository Index
47,133 repositories indexed
1–22 of 22 · Most stars
Decrypt and export passwords, cookies, history and more from 20 browsers on Windows, macOS and Linux. For authorized security research, incident response and DFIR.
- chrome
- macos
- windows
- pentest-tool
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
The authorization Gem for Ruby on Rails.
- authorization
- cancancan
- rails
🛠 Secure, stateless, and cookie-based session library for Next.js or any JavaScript framework
- nextjs
- authentication
- session
- stateless
A high performance offensive security tool for reconnaissance and vulnerability scanning
- reconnaissance
- scanner
- vulnerability-assessment
- vulnerability-scanner
Manages application of security headers with many safe defaults
- secure-headers
- csp
- hsts
- referrer-policy
Bleeding edge django template focused on code quality and security.
RSA public/private key encryption in Swift
- swift
- ios
- encryption
- rsa
Security library for Clojure
Using Intel's PIN tool to solve CTF problems
- ctf
- pin
- reverse-engineering
- instruction-counting
A modular OSINT honeypot for blue teamers
🍍Jeff provides the simplest way to manage web sessions in Go.
- golang
- sessions
- http
- session-management
Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
- anti-bot
- behavioral-analysis
- bot-detection
- captcha
Straightforward HTTP session management
- session-management
- session
- http
- golang
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
- cve-2026-109618
- cve-2026-109619
- exploit
- memory-corruption
Rails compatible Plug session store
- elixir-plug
- elixir-phoenix
- ruby-on-rails
- rails
POMjs is a random password generator in HTML and pure Javascript with no cookies and no trackers. It has been translated into several languages.
Dropwizard bundle managing authentication through JWT cookies
- jwt
- cookie
- java
- dropwizard
A Commitment Scheme library for Coin Flipping/Tossing algorithms and sort. :four_leaf_clover: :camel: :lock: :key:
- ocaml
- commitment-schemes
- secure-multi-party-computation
- cryptography
web-framework-agnostic sessions library for the V language
- cookie
- sessions
Privacy-first Chrome extension for real-time website security analysis using on-device AI. Trust scores (0-100), phishing detection, SSL verification, cookie compliance & AI chatbot powered by WebLLM with zero external data transmission.
- browser-extension
- chrome-extension
- cybersecurity
- on-device-ai