Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!
- wordlist
- password
- password-strength
- password-safety
Repository Index
56,638 visible repositories in the index
1–13 of 13 · Most stars
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
- cloudflare
- pentest-tool
- pentest
- censys
GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.
- digital-human-rights
- anonymity
- security
- python
BCrypt.Net - Bringing updates to the original bcrypt package
- blowfish
- bcrypt
- c-sharp
- algorithm
A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule
:white_check_mark: .NET crypto done right. Professionally audited.
- crypto
- cryptography
- c-sharp
- aead
Autonomous OODA-loop pentesting agent. Hermes brain, Kali + Playwright tools over MCP, ATT&CK as the Orient language.
- ai-agents
- autonomous-agents
- kali-linux
- llm-agents
Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
- anti-bot
- behavioral-analysis
- bot-detection
- captcha
A Simple Elasticsearch Honeypot
GasPot originally released at Blackhat 2015 - Updated for the same stuff 2026
BLE Edition of the original FistBump (portable WPA handshake grabber)
GoSDDL converter
Crystal shard wrapping the rbsec/sslscan utility