security

opmsg message encryption

Create and validate signed URLs with a limited lifetime

Python implementation of Dropbox's realistic password strength estimator

Remote administration service which uses twitter as a command and control server

Sign, verify, encrypt and decrypt using the Secure Enclave

Multi Tool Subdomain Enumeration

Robber is open source tool for finding executables prone to DLL hijacking

🔪Browser logic vulnerabilities :skull_and_crossbones:

framework to rapidly implement custom droppers for all three major operating systems

:lock: Chromium's HSTS preload list submission website.

DevSec Linux Baseline - InSpec Profile

Bluetooth experimentation framework for Broadcom and Cypress chips.

kernel privilege escalation enumeration and exploitation framework

Mendmix定位是一站式分布式开发架构开源解决方案及云原生架构技术底座。Mendmix提供了数据库、缓存、消息中间件、分布式定时任务、安全框架、网关以及主流产商云...

HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security as...

Quick and simple security for Flask applications

Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynamic hooks.

Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.

历经开发周期多年，并且应用过千万级别项目的工具箱

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.

Automatic and platform-independent unpacker for Windows binaries based on emulation

FATT /fingerprintAllTheThings - a pyshark based script for extracting network metadata and fingerprints from pcap files and live network traffic

fireELF - Fileless Linux Malware Framework

python script for Google Dorking

Easy automated vulnerability scanning, reporting and analysis

Scirius is a web application for Suricata ruleset management and threat hunting.

五合一收款码在线生成,40个模板 支持微信支付、支付宝支付、手机QQ支付、京东钱包、百度钱包,PayPal五合一收款，将其二维码合并为一个二维码，无需手续费,支持qq...

A Graphql query cost analyzer.

Adds extra security-related features in your Symfony application

Captcha Gem for Rails, which generates captcha image by Rust.

OSINT Swiss Army Knife

Python 3.5+ DNS asynchronous brute force utility

A decentralized threshold cryptography network focused on proxy reencryption.

Open source pre-operation C2 server based on python and powershell

Avast JavaScript Interactive Shell

WireGuard VPN server installer

phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code

Fuzzapi is a tool used for REST API pentesting and uses API_Fuzzer gem

A browser API to prevent DOM-Based Cross Site Scripting in modern web applications.

Scan your code for security misconfiguration, search for passwords and secrets. :mag:

Emotet detection tool for Windows OS

Steeltoe samples and reference application collection

:vertical_traffic_light:Web Application Firewall or API Gateway(应用防火墙/API网关)

Tools, scripts and tips useful during Penetration Testing engagements.

0day安全_软件漏洞分析技术

A security extension for devise, meeting industry-standard security demands for web applications.

A curated list of awesome serverless security resources such as (e)books, articles, whitepapers, blogs and research papers.

Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify sus...

JSshell - JavaScript reverse/remote shell

An example Node.js Relying Party implementation of the WebAuthn specification