Repository Index

Bitwarden infrastructure/backend (API, database, Docker, etc).

• aspnetcore
• aspnet
• sql-server
• api

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

• owasp
• javascript
• vulnerable
• hacking

Open Source Global Intelligence Platform - Real-Time OSINT Dashboard - A Palantir Alternative - 2nZNHm3Lr9umG3DVrzYwHgktwkuKuJRXqqRqs3ewpump

DNS over HTTPS config profiles for iOS & macOS

• dns
• over
• https
• tls

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

• weblogic
• tomcat
• exploit
• poc

A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.

Reverse engineer anything with agents, from app behavior down to native binaries.

Audited & minimal JS implementation of elliptic curve cryptography.

• crypto
• cryptography
• ecdsa
• ed25519

Audited & minimal JS implementation of hash functions, MACs and KDFs.

• cryptography
• hash
• kdf
• hashing

Fastest 5KB JS implementation of secp256k1 signatures and ECDH

• secp256k1
• ecdsa
• ecc
• cryptography

CyLR - Live Response Collection Tool

Easy to use OAuth 2 library for iOS, written in Swift.

• swift
• oauth2

:atom: Social (OAuth1\OAuth2\OpenID\OpenIDConnect) sign with PHP :shipit:

• php
• oauth
• social
• oauth-application

Fastest 5KB JS implementation of ed25519 signatures

• ed25519
• curve25519
• eddsa
• cryptography

Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF

• owasp
• ctf
• ctfd
• application-security

Audited & minimal JS implementation of Salsa20, ChaCha and AES

• aes-siv
• chacha20
• chacha20-poly1305
• chacha20poly1305

Auditable & minimal JS implementation of public-key post-quantum cryptography

• dilithium
• kyber
• ml-kem
• post-quantum-cryptography

CMS/LMS/Library etc Versions Fingerprinter

• fingerprinting
• cms
• security-tools

Simplifying third-party authentication for web applications.

DEPRECATED, Nozzlr is a bruteforce framework, trully modular and script-friendly

• pentesting
• bruteforce
• python
• infosec

OpenID Connect implementation in OCaml. Currently only the RP (client) parts are polished.

• ocaml
• oidc
• oidc-client

Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to find badness.

Spam Honeypot Tool

Minimal JS implementation of older cryptography algorithms: RSA, DSA, DH.

• cryptography
• dh
• diffie-hellman
• dsa