Sicherheit · GitHub

Firefox extension to automatically open websites in a container

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

• SBOM generation across many ecosystems (npm, PyPI, Maven, Gradle, Go, Cargo, RubyGems, Composer, NuGet, Hex, Dart, pnpm, Poetry, yarn and more) with owned per-ecosystem lockfile parsers.
• Vulnerability detection from Synapse's own advisory store as the primary source, matched alongside a live advisory API, cross-correlated and de-duplicated; the store ingests OSV, GHSA, CSAF and OVAL for detection independence.

Gram is Klarna's own threat model diagramming tool

• Fully featured diagramming tool specialized for threat modeling.
• Collaborative editing with multiple users over websocket

A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.

XSScope is one of the most powerful and advanced GUI Framework for Modern Browser exploitation via XSS.

• Perform XSS botnet attack(s). Every victim who is affected by XSS payload (in the webserver), will contantly bind the payload and wait for commands from attacker. A bind payload is one that waits for a connection from its controller.
• HTTP Flood (DDos) via XSS botnets

C# based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can later be weaponized during Red Team Operations to evade EDR's.

OpenAnt from Knostic is the leading open source LLM-based vulnerability discovery and remediation product, helping defenders proactively find and patch verified security flaws while minimizing both false positives and negatives. Stage 1 detects. Stage 2 attacks. What survives is real.

🛡️ Comprehensive Cybersecurity Arsenal, Bug Bounty Payloads & Security Audit Tools by IKONA ONI

• 🗂️ IKONA Arsenal & Master Modules: Automated and manual web security testing scripts.
• 💥 Web Exploitation & Payloads: Payloads for XSS, SQLi, SSRF, SSTI, JWT, IDOR, Race Conditions, CRLF, and Command Injection.

Semi-automatic OSINT framework and package manager

Fast, private, modern sandbox designed for desktop Linux

Linux eBPF backdoor over TCP. Spawn reverse shells, RCE, on prior privileged access. Less Honkin, More Tonkin.

Checklist for container security - devsecops practices

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Verbirg Geheimnisse sicher mit unsichtbaren Zeichen in Klartext und schütze sie mit Passwörtern 🧙🏻‍♂️⭐

• Protect your invisible secret using passwords and HMAC integrity
• Cryptographically secure by encrypting the invisible secret using AES-256-CTR.

An offline multi-tool Android app for hiking, backpacking, camping, wilderness survival, foraging, and hunting.

• Navigate using beacons (waypoints), paths, and bearings
• Retrace your steps with backtrack