security

RetroWrite -- Retrofitting compiler passes through binary rewriting

Source code for 2FAS Auth iOS app

:computer: :key: ssh-agent for TPMs

Blind WAF identification tool

Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.

CI/CD Security Analyzer

Kubernetes RBAC static analysis & visualisation tool

Servers for our website, HTTP/HTTPS connectivity checks, HTTPS network time, NTP (for Qualcomm XTRA), Broadcom PSDS cache, Samsung PSDS cache, Qualcomm PSDS (XTRA) cache, SUPL proxy, attestation key provisioning proxy, Vanadium component update check/download proxy, network location proxy and geocoding proxy. Also app and OS updates via an include.

Security Bulletins that relate to Netflix Open Source

The source code for webauthn.io, a demonstration of WebAuthn.

IP lists full of bad IPs - Updated every 2H

AI gets the context. Not your private data. Local-first privacy proxy for browser chat, AI APIs, and coding agents.

🔐 API key permissions for Django REST Framework

Pentesting and Bug Bounty Notes, Cheetsheets and Guide for Ethical Hacker, Whitehat Pentesters and CTF Players.

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.

Lightweight, file-based workspace for source-guided whitebox security review.

A tool that allows you to convert NMAP results to html, csv, json, markdown, graphviz (dot), sqlite, excel and d2-lang. Simply put it's nmap converter.

aawaf 是一款基于语义分析的Web应用防火墙

🔥🔒 Awesome MCP (Model Context Protocol) Security 🖥️

基于ARL v2.6.2版本源码，生成docker镜像进行快速部署，同时提供七千多条指纹

Secure Password Hashes for Python

BlueToolkit is an extensible Bluetooth Classic vulnerability testing framework that helps uncover new and old vulnerabilities in Bluetooth-enabled devices. Could be used in the vulnerability research, penetration testing and bluetooth hacking. We also collected and classified Bluetooth vulnerabilities in an "Awesome Bluetooth Security" way

Collection of Various Root Detection Apps for Android

SIEM Tactics, Techiques, and Procedures

Simple Wireguard 2FA

An interactive cybersecurity curriculum designed for enterprise use at software companies using Elixir

Every practical and proposed defense against prompt injection.

An example C program which contains vulnerable code for common types of vulnerabilities. It can be used to show fuzzing concepts.

Linux audit userspace repository

A simple Keychain wrapper for iOS, macOS, tvOS, and watchOS