Security
5,347 items in 29 lists
-
Damn Vulnerable Mobile App (DVMA) github.com
-
QuadrantSec Suricata Rules github.com
Set of Suricata rules published by QuadrantSec.
-
surify-cli github.com
Generate suricata-rules from collection of IOCs (JSON, CSV or flags) based on your suricata template.
-
SePass: Semantic Password Guessing using k-nn Similarity Search in Word Embeddings github.com
A password guessing method that utilizes word embeddings to discover and exploit semantic correlations in password lists.
-
Cloudstomp github.com
Automated deployment of instances on EC2 via plugin for high CPU/GPU applications at the lowest price.
-
accent_permutator github.com
A tool to transform characters from ASCII / UTF-8 to accented characters such as "o" to "ò".
-
Rhme-2016 github.com
Riscure Hack me 2 is a low level hardware CTF challenge.
-
canarchy github.com
CANarchy is a stream-first CAN analysis and manipulation runtime designed for automation, security research, and agent-driven workflows.
-
shai-hulud-scanner github.com
Detect indicators of compromise from the Shai Hulud 2.0 npm supply chain attack that compromised 796+ packages. Performs comprehensive security checks for malicious files, hashes, and patterns.
-
cve-ape github.com
A non-intrusive CVE scanner for embedding in test and CI environments that can scan package lists and individual packages for existing CVEs via locally stored CVE database. Can also be used as an offline CVE scanner for e.g. OT/ICS.
-
suricata-ls-vscode github.com
Suricata IntelliSense Extension using the Suricata Language Server.
-
Artica github.com
Suricata IDS integration for the Artica gateway appliance.
-
Mauerspecht github.com
Simple Probing Tool for Corporate Walled Garden Networks.
-
REMINDer github.com
Packing detection tool based on the entropy value of the entry point section and the WRITE attribute.
-
DSFF github.com
DataSet File Format for exchanging datasets and converting to ARFF (for use with Weka), CSV or Packing-Box's dataset structure.
-
PANDI github.com
Dynamic packing detection solution built on top of PANDA.
-
slurp github.com
-
Generic File Parser github.com
-
react2shell-scanner github.com
Detect CVE-2025-55182 (React2Shell) RCE vulnerability in React Server Components. Scans React 19.x and Next.js projects for critical remote code execution flaws.
-
OAuth 2.0 App2App Browserless Flow github.com
Describing a protocol enabling native navigation across apps performing authentication using the App2App pattern, without requiring a web browser.
-
Guard Bands github.com
Cryptographic data boundary for LLM applications: untrusted content is wrapped in HMAC-SHA256 or Ed25519 signed markers that bind provenance, lifetime and application context, and the verifier reconstructs that context from trusted state before a protected path proceeds…
-
Suricata-Monitoring github.com
LibreNMS JSON / Nagios monitor for Suricata stats.
-
luaevilbit github.com
An Evil bit implementation in luajit for Suricata.
-
suricata-zabbix github.com
Zabbix application layer plugin for Suricata.
-
Yara Finder github.com
-
Malware Organiser github.com
-
Lilith github.com
Reads EVE files into SQL as well as search stored data.
-
ansible-suricata github.com
Suricata Ansible role (slightly outdated).
-
WebDecoy github.com
-
Sigma2SPL github.com
A repository of all SIGMA rules converted to SPL that runs on a weekly schedule to update the repository and align with the up to date version of the SIGMA rules repository.
-
WSO2 Identity Server wso2.com
Identity Server which provides modern identity and access management capabilities that can be easily built into organization's customer experience (CX) applications.
-
MiniOrange OAuth SSO wordpress.org
Wordpress OAuth and OpenID Connect plugin developed and actively maintained by MiniOrange.
-
Symfony Security symfony.com
PHP Security component with OpenID Connect support.
-
Mike Jones: Self-Issued self-issued.info
Mike Jones blog posts about OAuth 2.0 and OpenID Connect.
-
SecureAuth secureauth.com
Identity security platform that provides OpenID Connect Provider capabilities.
-
SailPoint sailpoint.com
Enterprise identity security platform that provides OpenID Connect Provider capabilities.
-
golang.org/x/oauth2 pkg.go.dev
Official Golang client implementation for OAuth 2.0 spec with OpenID Connect support.
-
PingFederate pingidentity.com
Federation server that provides secure single sign-on, API security and provisioning for enterprise customers, partners, and employees.
-
-
OpenID Shared Signals Framework Specification 1.0 openid.net
Shared Signals Framework (SSF) enables sharing of signals and events between cooperating peers that enables multiple applications such as Risk Incident Sharing and Coordination (RISC) and the Continuous Access Evaluation Profile (CAEP).
-
OpenID Provider Authentication Policy Extension 1.0 openid.net
Specifications about a mechanism by which a Relying Party can request that particular authentication policies like multi-factor authentication be applied by the OpenID Provider.
-
Financial-grade API Security Profile 1.0 - Part 2: Advanced openid.net
Advanced security profile of OAuth that is suitable to be used for protecting APIs with high inherent risk in the context of Financial-grade APIs.
-
Financial-grade API Security Profile 1.0 - Part 1: Baseline openid.net
Baseline security profile of OAuth that is suitable for protecting APIs with a moderate inherent risk in the context of Financial-grade APIs.
-
Financial-grade API: Client Initiated Backchannel Authentication Profile openid.net
Financial services profile specifications for Client Initiated Backchannel Authentication (aka CIBA).
-
OpenID Connect Federation 1.0 openid.net
Draft specifications for putting in place bilateral federations between to organizations.
-
OpenID Connect Session Management openid.net
Specifications about OpenID Connect session management.
-
OpenID Connect RP-Initiated Logout openid.net
Defines how a Relying Party can requests that the OpenID Connect provider log out the End-User by redirecting the End-User's User Agent to the OP's Logout Endpoint.
-
OpenID Connect Dynamic Client Registration openid.net
Mechanism for sender-constraining OAuth 2.0 tokens via a proof-of-possession mechanism on the application level which allows for the detection of replay attacks with tokens.
-
Initiating User Registration via OpenID Connect openid.net
Specifications for initiating user registration via OpenID Connect and create prompt.
-
OpenID Connect Front-Channel Logout openid.net
Logout mechanism that uses front-channel communication via the User Agent between the OpenID Connect provider (OP) and Relying Parties (RPs) being logged out that does not need an OpenID Provider iframe on Relying Party pages.
- next page of items loading…
