security

An advanced tool for working with access tokens and Windows security policy.

A curated list of awesome iOS application security resources.

A Python pickling decompiler and static analyzer

Galah: An LLM-powered web honeypot.

List DTDs and generate XXE payloads using those local DTDs.

Next-generation JavaScript analysis tooling

A browser API to prevent DOM-Based Cross Site Scripting in modern web applications.

Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.

Password recovery tool for Microsoft Operating Systems. It allows easy recovery of various kind of passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks and more!

Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.

Sec-Gemini is a cutting-edge AI model designed to enhance cybersecurity capabilities and empower defenders in the ongoing battle against cyber threats.

Open-source attack surface management and authorized security automation platform for asset discovery, service probing, scan orchestration, and security result management.

AntiHunter Perimeter Defense Systems - DIGI Node Firmware

汽车/安卓/固件/代码安全测试工具集

Fast and light-weight API proxy firewall for request and response validation by OpenAPI specs.

A comprehensive collection of AI development patterns for building software with AI assistance, organized by implementation maturity and development lifecycle phases. Includes Foundation, Development, and Operations patterns with practical examples and anti-patterns.

常见的攻击行为监测特征及方法，涵盖端点和流量，未包含PowerShell和Sysmon。预祝运营生活愉快！

Rate Limit middleware for Hono Server

The Grimoire Hypervisor solution for x86 Processors with experimental nested virtualization support. Remastering with Rust in progress.

Authority control plane for autonomous work. EMILIA Gate enforces finite customer-owned mandates at protected executor boundaries; the open protocol keeps evidence verifiable.

Datadog Python APM Client

Tools, scripts and tips useful during Penetration Testing engagements.

Awesome CSIRT is an curated list of links and resources in security and CSIRT daily activities.

Steeltoe samples and reference application collection

ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library that makes it easier for programmers to write lower-risk applications.

A proxy server for multiple ollama instances with Key security

The Janssen Project is a home for open source IAM components, featuring Auth Server (OAuth/OpenID), Agama low-code identity orchestration, and the Cedarling policy decision point. The "Janssen Server" distributions bundle IAM components under one control plane.

An implementation of TEMPEST en GNU Radio

Protect your secrets using Gitleaks-Action

Official SonarQube MCP Server for code quality and security in AI agents