Open-source repositories gaining traction right now.
170 repositories


Professional Open Source Command & Control Framework

Outsource proof generation to an untrusted server without revealing the witness

Per-application VPN split tunneling for Windows. Route specific apps outside or inside your VPN at the packet level.

A modern, secure password manager built with Rust and Iced GUI framework. Store and manage your credentials with military-grade encryption.



Discontinued Rust rewrite of ZeroTrace Atlas: Windows-only input‑event telemetry for cybersecurity labs.

An information exposure vulnerability in Datart v1.0.0-rc.3 allows authenticated attackers to access sensitive data via a custom H2 JDBC connection string.

一个简易的 dll 注入生成器


自动化Web备份文件扫描、监控系统。集成备份文件扫描、任务调度等功能,可以帮助安全研究人员自动化地发现和监控目标域名的备份文件。

Some of the interesting payloads out there, use them for testing your web sites or your web applications

DefVault detects and stops phishing, malware, and RAT attacks before credentials are exposed, protecting both enterprise infrastructure and individual users while preserving usability.

QuestExploit 是一款基于 Go 语言开发的自动化安全测试工具。它针对 QuestDB 数据库的身份验证机制进行深度探测,能够自动验证多种绕过手段,并演示在成功绕过身份验证后,攻击者可能执行的恶意操作(如数据窃取、表删除、任意文件写入等)。 本项目是 QuestDB 身份验证绕过漏洞利用工具 的详细文档。该工具专门用于演示和测试 QuestDB 在特定配置下存在的安全风险,帮助安全研究人员理解身份验证绕过机制及其潜在后果。

a small discord token grabber made for education purpose only


HybridAuthentication

Obfuscation ToolV2

Evidencia de tarea 1 Programación Avanzada de Ciberseguridad


Network Security Toolkit - IP info, geolocation, speed test, breach check, DNS security


一款基于格密码的抗量子数字资产保护系统

🛡️ Lightweight, efficient HTTP/HTTPS prober intended for bug hunters and pentesters

A pure rust, no-dependency utility for generating maximum-strength passwords.

Constraint-based password generator implemented in Rust.

SELA (Secure Encrypted Ledger Access). The air-gapped crypto vault project

Automated scraper that extracts and decodes hidden Spotify TOTP secrets (nuances) with real-time cryptographic analysis

TOLONG JANGAN LUPA NAKAN

Native DPI bypass engine for Windows. Zero-config, zero-lag, zero-limits. Powered by Rust & WinDivert.


Sistema de login desenvolvido em Python, simulando o acesso a um banco governamental com controle de segurança por limite de 3 tentativas de senha.

Secure authentication plugin for Paper/Spigot 1.21.x.


HoundEyes hunts sensitive data leaks while you browse. It passively scans every HTTP response for credit cards, API keys, tokens, PII, credentials, private keys, and more -- across any domain, with zero configuration.

Get premium features for free (EDUCATIONAL USE ONLY)


Demo for Spring Security latest updates and login retry caps within a Redis caching implementation

Command-line tool that orchestrates multiple SAST tools and aggregates their results into unified reports



Share secrets via encrypted one-time links. E2E encrypted in the browser, server never sees plaintext. Optional EVM payment to unlock.


Behavioral backup intelligence. Watches your data. Acts when it matters.



mirror of https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake.git

Go SDK for SanctumAI — credential management for AI agents

Client-side document notarization using Merkle trees, SHA-256 proofs, and Ethereum wallet signatures
Paste a github.com URL. Submissions are reviewed before they are tracked.