Security · GitHub

OpenSkills: Run Claude Skills Locally using any LLM

An Active Defense and EDR software to empower Blue Teams

SSH-based "VPN for poors"

重生之我在安全行业讨口子系列，分享在安全行业讨口子过程中，SRC、项目实战的有趣案例 Rebirth - My Struggle in the Security Industry Series: Sharing Interesting Cases in the Process of Struggling for a Living in the Security Industry, including SRC and BugBounty/ RedTeam Project Practical Experiences

JANUSEC Application Gateway provides secure access, including reverse proxy, K8S Ingress Controller, Automatic ACME Certificate, WAF, 5-Second Shield, CC Defense, OAuth2 Authentication, Global Server Load Balance, and Cookie Compliance etc. JANUSEC应用网关，提供安全的接入，包括反向代理、K8S Ingress Controller、自动化ACME证书、WAF、5秒盾、CC防御、OAuth2身份认证、GSLB负载均衡与Cookie合规等。

• Fast Delivery : Web-based Configuration
• Secure Access: Enable HTTPS by One Click

Security interview questions with possible explanation for roles in AppSec, Pentesting, Cloud Security, DevSecOps, Network Security and so on

The goal of this project is to provide additional features on top of the existing npm audit options

Penetration Testing Platform

A Tox-based instant messaging and video chat client.

A script for credentials-based attack surface enumeration and general reconnaissance of massive external networks

• High-speed enumeration — masscan finds open ports, nmap deep-scans only the responsive hosts
• Full ASN-based discovery — resolves A records, queries whois for CIDR + ASN, then pulls every prefix the ASN announces via RADB, with interactive range selection (-d and -c)

A privacy-first, open-source, markdown PKM tool with graphs, canvas and community plugins

Harden a rooted LG webOS TV: neutralise microphones, the remote-mic voice pipeline and the screen-capture leak; block ad/telemetry/ACR endpoints (dual-stack); decline LG consents; hide ad apps; debloat. Reversible + boot-persistent.

ADOS Turn AI into a repeatable, auditable SDLC: ticket → spec → plan → PR → quality gates → release. Agents, templates, skills, scripts, and reference workflows.

Hand‑curated offensive security toolkit, scripts, and writeups for ethical hackers, pentesters, and IT pros eager to level up.

Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.