Security Libraries

364 Components & Libraries

Sortby

Security Libraries

🍯 Generic honeypot utilities for use in django projects.

Django application that provides utilities for preventing automated form spam. Provides template tags, view decorators, and middleware to add and verify honeypot fields to forms. Written by James Tur…

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

General information, tutorials, and precompiled binaries can be found on the mitmproxy website. The documentation for mitmproxy is available on our website: If you have questions on how to use mitmpr…

Low code web framework for real world applications, in Python and Javascript

Login for the PWD site: (username: Administrator, password: admin) By contributing to Frappe, you agree that your contributions will be licensed under its MIT License.

Safely pass trusted data to untrusted environments and back.

... so better sign this Various helpers to pass data to untrusted environments and to get it back safe and sound. Data is cryptographically signed to ensure that a token has not been tampered with. I…

Daemon to ban hosts that cause multiple authentication errors

Though Fail2Ban is able to reduce the rate of incorrect authentication attempts, it cannot eliminate the risk presented by weak authentication. Set up services to use only two factor, or public/priva…

Tor2web is an HTTP proxy software that enables access to Tor Hidden Services by mean of common web browsers

Tor2web is an HTTP proxy software that enables access to Tor Hidden Services by mean of common web browsers To support the Tor2web project you can help us with donations that will goes entirely for t…

Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp

The tool is highly configurable and anybody can trivially create simple plugins or add new tests in the configuration files without having any development experience. OWTF is developed on KaliLinux a…

Computer Aided Integration of Requirements and Information Security - Server

CAIRIS (Computer Aided Integration of Requirements and Information Security) is a platform for modelling secure and usable systems. CAIRIS was built from the ground-up to support usability, requireme…

Authentication module for the Bottle and Flask web frameworks

Cork - Authentication for the Bottle web framework Cork provides a simple set of methods to implement Authentication and Authorization in web applications based on Bottle and Flask.

🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.

You have three options to generate your own hosts file. You can use our container image, build your own image, or do it in your own environment. Option #1 is easiest if you have Linux with Docker ins…

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

SpiderFoot can be used offensively (e.g. in a red team exercise or penetration test) for reconnaissance of your target or defensively to gather information about what you or your organisation might h…

umbrella project for emulation of smart card readers or smart cards

Virtual Smart Card Architecture is an umbrella project for various projects concerned with the emulation of different types of smart card readers or smart cards themselves. Currently the following pr…

HULK DoS tool ported to Go with some additional features.

The main difference from Python version layed in Golang architecture for concurrency: the goroutines. hulk.py runs a new thread for each connection in the connection pool so it uses hundreds and thou…

GlobaLeaks is free, open source software enabling anyone to easily set up and maintain a secure whistleblowing platform.

Project best practices and scores:

:package: The fastest and simplest packet manipulation lib for Python

This is Pypacker: The fastest and simplest packet manipulation lib for Python. It lets you create packets manually by defining every aspect of all header data, dissect packets by parsing raw packet b…

Python reference implementation of The Update Framework (TUF)

Python-TUF provides the following APIs: The reference implementation strives to be a readable guide and demonstration for those working on implementing TUF in their own languages, environments, or up…

ICS/SCADA honeypot

Conpot is an ICS honeypot with the goal to collect intelligence about the motives and methods of adversaries targeting industrial control systems.

Smart Meter Security Testing Framework

Termineter is a Python framework which provides a platform for the security testing of smart meters. It implements the C1218 and C1219 protocols for communication over an optical interface. Current…

Web path scanner

An advanced web path brute-forcer Choose one of these installation options: dirsearch allows you to pause the scanning progress with CTRL+C, from here, you can save the progress (and continue later),…

KicomAV is an open source (GPL v2) antivirus engine designed for detecting malware and disinfecting it.

Three quick start options are available:

Simple extension that provides Basic, Digest and Token HTTP authentication for Flask routes

Simple extension that provides Basic, Digest and Token HTTP authentication for Flask routes. The easiest way to install this is through pip.

:satellite: A Mac menubar app that notifies you whenever SSH, VNC, sudo, or other auth events occur.

It's very useful if you're paranoid about people trying to hack into your computer. Or... if you simply like having information about people using your computer's resources. The currently working al…

Bareos is a cross-network Open Source backup solution (licensed under AGPLv3) which preserves, archives, and recovers data from all major operating systems.

If you want to contribute something to this repo please read our contribution policy at The Bareos project offers two mailing lists: bareos-users and bareos-devel.

a pure python Java KeyStore file parser, including private key decryption

A pure python Java KeyStore file parser, including private/secret key decryption. Can read JKS, JCEKS, BKS and UBER (BouncyCastle) key stores. The best way to utilize a certificate stored in a jks fi…

Distributed WPA PSK auditor

Distributed WPA PSK auditor Live installation:

A fast and modular scanner for Tor exit relays. The canonical repository (including issue tracker) is at https://gitlab.torproject.org/tpo/network-health/exitmap

Finally, note that exitmap is a network measurement tool and of little use to ordinary Tor users. The Tor Project is already running the tool regularly. More exitmap scans just cause unnecessary net…

A collection of security related Python and Bash shell scripts. Analyze hosts on generic security vulnerabilities. Wrapper around popular tools like nmap (portscanner), nikto (webscanner) and testssl.sh (SSL/TLS scanner)

A collection of security related Python and Bash shell scripts, mainly revolving around testing hosts for security vulnerabilities. For the shell scripts no fancy programming framework is required, a…

Phishing Campaign Toolkit

King Phisher is a tool for testing and promoting user awareness by simulating real world phishing attacks. It features an easy to use, yet very flexible architecture allowing full control over both e…