security

CatSniffer is an original multiprotocol and multiband board for sniffing, communicating, and attacking IoT (Internet of Things) devices using the latest radio IoT protocols. It is a highly portable USB stick that integrates TI CC1352, Semtech SX1262, and an RP2040 for V3 or a Microchip SAMD21E17 for V2

「🔑」A tool used to hunt down API key leaks in JS files and pages

Open Source Tripwire®

Java RMI Vulnerability Scanner

Pure PHP polyfill for ext/sodium

Bluetooth Low Energy (BLE) packet sniffer and transmitter for both standard and non standard (raw bit) based on Software Defined Radio (SDR).

Pike is a tool for determining the permissions or policy required for IAC code

ADAMANT Blockchain Node

A firewall that utilizes the Linux kernel's XDP hook. The XDP hook allows for very fast network processing on Linux systems. This is great for dropping malicious traffic from a (D)DoS attack. IPv6 is supported with this firewall! I hope this helps network engineers/programmers interested in utilizing XDP!

A vulnerable version of Rails that follows the OWASP Top 10

(Formerly Solium) Code quality & Security Linter for Solidity

Secrets management for teams and AI agents.

Historical Windows temporal memory-state research artifact for studying time-bound memory observations, validation limits, and defensive visibility.

台灣資安 / CTF 學習資源整理

OpenZeppelin Contracts written in Cairo for Starknet, a decentralized ZK Rollup

Digital Forensics Investigation Platform

Smart Contract Weakness Classification and Test Cases

A deauth attack that disconnects all devices from the target wifi network (2.4Ghz & 5Ghz), WPA3 also supported (PMF not tested)

Share passwords securely

A curated list of OPA related tools, frameworks and articles

graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology is behind a given GraphQL endpoint.

SiteOne Crawler is a cross-platform website crawler and analyzer for SEO, security, accessibility, and performance optimization—ideal for developers, DevOps, QA engineers, and consultants. Supports Windows, macOS, and Linux (x64 and arm64).

Enterprise-oriented Generic Proxy Solutions. Maintenance mode now, please switch to use [VEY](https://github.com/VEY-OSS/vey) for new development efforts

Run programs on linux with selectively restricted permissions.

An OSINT / digital forensics tool built in Python

A curated list of awesome self-hosted GitHub Action runners in a large comparison matrix

Claude Skills for Governance, Risk, & Compliance (GRC): Expert-level compliance guidance for ISO 27001, SOC 2, FedRAMP, GDPR, HIPAA, NIST CSF, PCI DSS, EU AI Act, ISO 42001, ISO 27701, DORA, CSRD, India's DPDPA, CMMC 2.0, NIST AI Risk, SWIFT, CCPA/CPRA, and others. Benchmark 93% (with skills) vs 74% (without skills). Updated Monthly.

OpenID, OAuth 2.0, SCIM2.0, UMA2.0, FAPI, CIBA & OPENBANKING Framework for ASP.NET Core

Customizable Linux Persistence Tool for Security Research and Detection Engineering.

Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets