OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
- owasp
- javascript
- vulnerable
- hacking
Repository Index
47,133 repositories indexed
1–24 of 37 · Most stars
Bitwarden client apps (web, browser extension, desktop, and cli).
- webextension
- javascript
- bitwarden
- typescript
fsociety Hacking Tools Pack – A Penetration Testing Framework
- fsociety
- exploitation
- port-scanning
- fsociety-hacking
A Kubernetes controller and tool for one-way encrypted Secrets
- kubernetes
- kubernetes-secrets
- devops-workflow
- encrypt-secrets
free C++ class library of cryptographic schemes
- cryptography
- crypto
- c-plus-plus
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
Hashtopolis - distributed password cracking with Hashcat
- cracking
- distributed
- hashcat
- pentesting
Remote Desktop Protocol in Twisted Python
Full featured multi arch/os debugger built on top of PyQt5 and frida
- frida
- pyqt5
- reverse-engineering
- cracking
🔑 Local-first Secrets Manager
- password
- password-manager
- desktop
- credentials
Easy, painless AWS credentials on developer laptops.
Web Application Honeypot
honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway
A secure password manager for macOS,Linux and Windows platforms
MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.
- python
- mqtt
- mqtt-broker
- mqtt-client
Zero Infrastructure Password Cracking
- cloudtopolis
- cracking
- hashes
- cloud
Offline, encrypted vault for seed phrases, private keys, passwords and API keys. Also used by agents.
teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.
- ids
- teler
- waf
- teler-ids
HIBA is a system built on top of regular OpenSSH certificate-based authentication that allows to manage flexible authorization of principals on pools of target hosts without the need to push customized authorized_users files periodically.
Set of tools for security testing of Internet of Things devices using specific network IoT protocols
Generic Capacitor OAuth 2 client plugin. Stop the war in Ukraine!
- capacitor
- oauth2
- oauth2-client
- capacitor-plugin
ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods.
A desktop app where AI agents decompile the games you own into C/C++ that rebuilds them byte for byte.
- ai
- artificial-intelligence
- artificialintelligence
- decompilation
gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that you can join on Google Groups: https://groups.google.com/forum/#!topic/gonids/
- suricata
- parse
- security-tools
- network-security