🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
- privacy
- security
- censorship
- cybersecurity
47,133 repositories indexed
1–24 of 49 · Most stars
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
CTF framework and exploit development library
A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32
Sysmon configuration file template with default high-quality event tracing
Simple Encryption in PHP.
A simple, secure and modern file encryption tool (and Rust library) with small explicit keys, no config options, and UNIX-style composability.
Manages application of security headers with many safe defaults
Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish/Japanese. For authorized, defensive and detection use only. (upstream: Autumn-27/ARTEX, AGPL-3.0)
An engine to make Tor network your default gateway
🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse-engineering agents like REA. Poison -> Exhaust -> Hallucinate.
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
The repository host gives no description.
ThePhish: an automated phishing email analysis tool
Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0
🕵️ Tool to reverse-engineer Protocol Buffers with unknown definition
Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).
The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.
Autonomous pentest legion — AI commander + worker swarm + layered fact-intent graph. 3rd Tencent Intelligent Attack-Defense online champion (634 teams · 8h unattended · 1B tokens beat 4.5B). The Nüwa Test: give AIs Create/Language/History, let a civilization grow.
Defanged Indicator of Compromise (IOC) Extractor.
Easy permission definitions in Elixir apps!
Roles & Permissions for Laravel
Respounder detects presence of responder in the network.
Universal web application security sensor intended for real-time monitoring and defense.