Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
Composio powers 1000+ toolkits, tool search, context management, authentication, and a sandboxed workbench to help you build AI agents that turn intent into action.
一款内网综合扫描工具,方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
Apereo CAS - Identity & Single Sign On for all earthlings and beyond.
A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig – [✩Star] if you're using it!
Collaborative Incident Response platform
GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.
- digital-human-rights
- anonymity
- security
- python
TranslatedA lightweight DDD forward/reverse business modeling framework that supports the architectural evolution of complex business systems!
- ddd
- extension
- ddd-architecture
- clean-architecture
IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.
An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)
OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
CLI tool for decompiling Android apps to Java. It does resources! It does Java! Its real easy!
DFIRTrack - The Incident Response Tracking Application
Security profiling for blackbox Android
AVClass malware labeling tool
A Flask app template with integrated SQLAlchemy, authentication, and Bootstrap frontend
A Java library that implements a ByteChannel interface over SSLEngine, enabling easy-to-use (socket-like) TLS for Java applications.
Watchtower | Self-hosted AI security assessment, asset intelligence, and evidence workflows.
Machine-learn password mangling rules
NTFUZZ: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis (IEEE S&P '21)
- fuzzer
- fuzzing
- kernel-fuzzer
- windows-kernel
Rolling hash functions in Java
Markov-chains for linguistically-correct password cracking