Ghidra is a software reverse engineering (SRE) framework
- software-analysis
- disassembler
- reverse-engineering
54,641 visible repositories in the index
1–24 of 29 · Most stars
Ghidra is a software reverse engineering (SRE) framework
Authentication for the Web.
Integrated set of Django applications addressing authentication, registration, account management as well as 3rd party (social) account authentication. 🔁 Mirror of https://codeberg.org/allauth/django-allauth/
The ESP32-BlueJammer (Bluetooth jammer, BLE jammer, WiFi jammer, RC jammer) disrupts 2.4GHz communications. Using an ESP32 and nRF24 modules, it generates noise and unnecessary packets, causing interference between the devices communicating, making them unable to work as intended. Ideal for controlled disruption and security testing.
A native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps
w3af: web application attack and audit framework, the open source web vulnerability scanner.
Privacy-first password manager with built-in email aliasing. Fully encrypted and self-hostable.
CAUTION: END OF SUPPORT ON 14 AUG 2026. The 'jsrsasign' (RSA-Sign JavaScript Library) is an opensource free cryptography library supporting RSA/RSAPSS/ECDSA/DSA signing/validation, ASN.1, PKCS#1/5/8 private/public key, X.509 certificate, CRL, OCSP, CMS SignedData, TimeStamp, CAdES and JSON Web Signature/Token in pure JavaScript.
UFONet - Denial of Service Toolkit
XSS'OR - Hack with JavaScript.
JWT login microservice with plugable backends such as OAuth2, Google, Github, htpasswd, osiam, ..
CSRF protection middleware for Go.
A collection of postmortem templates
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
Package gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services 🔒
The Ultimate Boilerplate for Products.
:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.
High-performance pure-javascript SHA1 implementation suitable for large binary data, reaching up to half the native speed.
🍍Jeff provides the simplest way to manage web sessions in Go.
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.
A warehouse for your malware
Authentication plugin for CakePHP. Can also be used in PSR7 based applications.
Checks with NSRL RDS servers looking for for hash matches
Sectiv is a skill-driven AI security review for Burp Suite. Pick captured traffic and a review goal (IDOR, XSS, SQLi, SSRF…), and get a severity dashboard with description, steps to reproduce, impact, PoC, CWE/CVE and HTML/MD/JSON export. Built with Kotlin + Swing on the Montoya API.