Ranked by Attention Score: stars gained over the last 90 complete days
901–1000 of 1,288 by Attention Score · Aug 7, 2026 – Nov 4, 2026 (UTC)
HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy + Exploit Timing Attacks
C++11 header-only message digest library
simple YARA-based IOC scanner
A hashcat-based distributed password cracking system
A PoC that the USB port is an attack surface for a Mazda car's infotainment system and how Mazda hacks are made
A CHIP-8 interpreter, assembler and disassembler in C
Simple framework to extract "actionable" data from Android malware (C&Cs, phone numbers etc.)
This repository contains reverse engineering results and resources for a few specific car models of a very specific car manufacturer. Please don't sue.
The repository host gives no description.
Advanced analysis software for APK payloads created by RATs.
Minimal JS implementation of older cryptography algorithms: RSA, DSA, DH.
Runtime guardrails for Claude Code. Auto-approve what's safe, gate what's risky, block what's dangerous. Dual enforcement, full audit trail. MIT.
Capture, inspect, and replay webhooks with 90-day history + signature verification. Built on Cloudflare Workers + D1.
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
File transfer solution with end-to-end encryption.
Go http.Client with a byte-exact browser TLS fingerprint (uTLS) — survive JA3/JA4 blocking without a headless browser.
Pin AI Skill behavior. Block unapproved drift in CI. See exactly what changed in every PR.
Laravel Eloquent roles and abilities.
CAUTION: END OF SUPPORT ON 14 AUG 2026. The 'jsrsasign' (RSA-Sign JavaScript Library) is an opensource free cryptography library supporting RSA/RSAPSS/ECDSA/DSA signing/validation, ASN.1, PKCS#1/5/8 private/public key, X.509 certificate, CRL, OCSP, CMS SignedData, TimeStamp, CAdES and JSON Web Signature/Token in pure JavaScript.
Handle roles and permissions in your Laravel application
ReCaptcha helpers for ruby apps
SSH man-in-the-middle tool
Python scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU
Interactive CTF Exploration Tool
An OpenID Connect reference implementation in Java on the Spring platform.
Security Tool to Look For Interesting Files in S3 Buckets
RSA public/private key encryption in Swift
npm package for OpenID Connect, OAuth Code Flow with PKCE, Refresh tokens, Implicit Flow
Elastic Malware Benchmark for Empowering Researchers
TranslatedA lightweight DDD forward/reverse business modeling framework that supports the architectural evolution of complex business systems!
ISF(Industrial Control System Exploitation Framework)，a exploitation framework based on Python
Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance and exploitation of information systems.
Use Apple FaceID or TouchID authentication in your app using BiometricAuthentication.
A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.
Rails integration for Rodauth authentication framework
The reliable YouTube API Ruby client
MIRACL Cryptographic SDK: Multiprecision Integer and Rational Arithmetic Cryptographic Library is a C software library that is widely regarded by developers as the gold standard open source SDK for elliptic curve cryptography (ECC).
A tool for studying JavaScript malware.
Google OAuth Client Library for Java
Auto Scanning to SSL Vulnerability
Modular file scanning/analysis framework
bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
DFIRTrack - The Incident Response Tracking Application
Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux
Standalone password candidate generator using the PRINCE algorithm
Rule for hashcat or john. Aiming to crack how people generate their password
🔥 A fully open source audit logs service and embeddable UI easily deployed to your own Kubernetes cluster. Brought to you by replicated.com and boxyhq.com 🚀
JSON Web Token library for C++
Keyscope is a key and secret workflow (validation, invalidation, etc.) tool built in Rust
Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools
A web front-end for password cracking and analytics
.NET client for the Auth0 Authentication & Management APIs.
Tools for building and disassembling Pokémon Red and Pokémon Crystal
Various wordlists FR & EN - Cracking French passwords
Hashcat web interface
The platform used to run picoCTF 2019. (deprecated)
Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities
ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods.
List of Magento extensions with known security issues.
:vertical_traffic_light: Block malicious crawlers with Cloudflare Firewall Rules
This script is made to collect the most valiable artifacts for foreniscs or incident reponse investigation rather than imaging the whole har drive.
"Evolving AppCompat/AmCache data analysis beyond grep"
Android Framework for Exploitation, is a framework for exploiting android based devices
Suricata rules for network anomaly detection
TranslatedPassword generation tool: flexible and scriptable password dictionary generator which can support brute-force, combination, complex rule mode etc...
A set of cryptographic primitives for building a multi-hop Proxy Re-encryption scheme, known as Transform Encryption.
A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
Hashcat wrapper to help automate the cracking process
The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX account.
A library designed to generate cryptographically strong random numbers suitable for managing data such as passwords, account authentication, security tokens, and related secrets.
OPNSense's Suricata IDS/IPS Detection Rules Against NMAP Scans
HOTP/TOTP one time passwords on java phones (J2ME)
Tool to find code cave in PE image (x86 / x64) - Find empty space to place code in PE files
Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection
EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
Client-side AES-256-GCM zero-knowledge encryption library. Browser-native Web Crypto API, no dependencies. Powers FileShot.io.
Privacy-first clipboard manager for macOS. Local-only history, snippets, smart paste, and Touch ID protection.
Modern, profile-based hosts file manager for macOS. Block ads, trackers, and distractions with ease.
Lightweight Docker monitoring dashboard with anomaly detection & Telegram alerts. One-liner install, zero config.
Sandboxed devcontainer for running Claude Code, Codex, and OpenCode in bypass / auto-approve mode.
Open-source eBPF compatibility evidence and CI gate
Local-LLM alert triage for self-hosted SOCs.
HTTP honeypot on autopilot
Hash-based signatures in typescript, WOTS+
The repository host gives no description.
[DEPRECATED] Stanford Javascript Crypto Library