Repository Index

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

• footprinting
• osint
• threatintel
• python

Incredibly fast crawler designed for OSINT.

• crawler
• spider
• python
• osint

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

• zanzibar
• permissions
• database
• distributed-systems

A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.

• authorization
• permissions
• security
• zanzibar

An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉

• access-control
• authorization
• rbac
• rebac

Dark Web OSINT Tool

• tor
• tor-network
• deepweb
• dark-web

bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS

• sanitization
• html
• security
• xss

The SPIFFE Runtime Environment

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

• threat-hunting
• purpleteam
• python3
• windows-eventlog

The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.

• csrf
• crawler
• csrf-attacks
• token-generation

Procyon is a suite of Java metaprogramming tools, including a rich reflection API, a LINQ-inspired expression tree API for runtime code generation, and a Java decompiler.

Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.

Android Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents an on-device app to test for recent device vulnerabilities.

:closed_lock_with_key: Multiplatform command-line password manager

Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.

• anti-crawling
• cloud-native
• crawler
• deception

:no_entry: (DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.

• security
• dfir
• forensics

Simple, drag-and-drop, password-based file encryption

• encryption-utility
• cross-platform
• encryption
• gui

Investigate suspicious activity by visualizing Sysmon's event log

• security
• kibana
• elasticsearch
• sysmon

:key: Idiotproof golang password validation library inspired by Python's passlib

Incident Response - Fast suspicious file finder

• dfir
• investigation
• incident-response
• threat-hunting

🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️

• finder
• graphql
• security
• spider

This is an aspiring project aimed at accumulating knowledge from the world of cybersecurity and presenting it in a cogent way, so it is accessible to as large an audience as possible and so that everyone has a good resource to learn hacking from.

• cryptography
• hacking
• system
• cheatsheet

Integrates Spiffe and Vault to have secretless authentication

• spire
• spiffe
• vault
• hashicorp

🦅 EACL: Enterprise Access ControL is a ReBAC Authorization library inspired by SpiceDB, built in Clojure and backed by Datomic Pro, Datahike, Datalevin or DataScript.

• access-control
• clojure
• datalog
• authorization