security

Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.

RSA public/private key encryption in Swift

The fastest dork scanner written in Go.

Open-source GitHub repository abuse detection and response system.

专为CTF设计的Jinja2 SSTI全自动绕WAF脚本 | A Jinja2 SSTI cracker for bypassing WAF, designed for CTF

Your MitM sidekick for relaying attacks featuring DHCPv6 DNS takeover as well as mDNS, LLMNR and NetBIOS-NS spoofing.

PowerShell framework to assess Azure security

☕ Latte: the safest & truly intuitive templates for PHP. Engine for those who want the most secure PHP sites.

Simple extension that provides Basic, Digest and Token HTTP authentication for Flask routes

80k+ WordPress Nuclei templates, updated daily from Wordfence intel—filter by severity/tags/CVE and scan in one line. 🚀🔒

Mobile Hacker's Weapons / A collection of cool tools used by Mobile hackers. Happy hacking , Happy bug-hunting

Testing, simplified. || An inclusive, accessibility-first GUI for generating clean, semantic Javascript tests in only a few clicks of a button.

Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration

Athena OS is a Arch/Nix-based distro focused on Cybersecurity. Learn, practice and enjoy with any hacking tool!

✨ Awesome - A curated list of amazing Homomorphic Encryption libraries, software and resources

Coverage-guided, in-process fuzzing for the JVM

🍯 Unobtrusive and flexible spam protection for Rails apps

Collection of npm package manager Security Best Practices

Bareos is a cross-network Open Source backup solution (licensed under AGPLv3) which preserves, archives, and recovers data from all major operating systems.

Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.

Authentication for PHP. Simple, lightweight and secure.

npm package for OpenID Connect, OAuth Code Flow with PKCE, Refresh tokens, Implicit Flow

Transparent proxy through Tor for Kali Linux OS

Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating them and running API security tests.

Keep your sensitive information out of chat logs, emails, and more with encrypted secrets.

🔒 Enterprise-grade API gateway that helps you monitor and impose cost or rate limits per API key. Get fine-grained access control and monitoring per user, application, or environment. Supports OpenAI, Azure OpenAI, Anthropic, vLLM, and open-source LLMs.

Detect leaked secrets + live validation. Map blast radius across your stack. Revoke fast. Hundreds of rules.

An IIS short filename enumeration tool

Package gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services 🔒

One-command AmneziaWG 2.0 / 3.x installer for a self-hosted VPN server on Ubuntu and Debian: DPI bypass, traffic obfuscation, split tunneling, auto-hardening, client management. Includes a VPN cascade guide.