Repository History
17 repositories tagged with Security
wireguard-tools: Essential Utilities for WireGuard VPN Configuration
wireguard-tools provides the core userspace utilities for configuring WireGuard VPN tunnels across multiple operating systems. This project includes the `wg` and `wg-quick` tools, simplifying the setup and management of secure network connections. It supports Linux, OpenBSD, FreeBSD, macOS, Windows, and Android, making it a versatile solution for WireGuard users.
Tailscale: Secure and Easy WireGuard-based VPN with 2FA and SSO
Tailscale offers a simple and secure way to build private networks using WireGuard, integrating 2FA and SSO for enhanced access control. This open-source repository contains the core `tailscaled` daemon and `tailscale` CLI tool, enabling cross-platform secure connectivity. It simplifies network configuration, making secure remote access and device communication effortless.
hakoriginfinder: Discovering Origin Hosts Behind Reverse Proxies
hakoriginfinder is a powerful Go-based tool designed to uncover the true origin host behind reverse proxies, including cloud-based Web Application Firewalls (WAFs). It achieves this by comparing HTTP responses from potential origin IP addresses against the original proxy response using the Levenshtein algorithm. This functionality makes it an invaluable asset for security researchers and penetration testers looking to bypass WAFs and identify underlying infrastructure.
Disposable Email Validator: Block Disposable Emails and Plus Addressing
The `disposable-email-validator` library helps prevent fake signups by blocking disposable email addresses and optional plus addressing. It offers flexible, environment-specific rules, making it ideal for production applications while allowing development flexibility. This TypeScript-based tool provides a robust solution for email validation.
Microsandbox: Secure, Self-Hosted Sandboxes for AI Agents and Untrusted Code
Microsandbox is an open-source project providing self-hosted, hardware-isolated sandboxes designed for securely executing untrusted user and AI code. It offers a unique balance of strong isolation, instant startup times, and OCI compatibility, addressing the challenges of traditional container and VM solutions. Built in Rust, Microsandbox is ideal for developers building agentic AI applications requiring robust and flexible execution environments.
Sirius: Open-Source Vulnerability Scanner with Real-time Monitoring
Sirius is an open-source, comprehensive vulnerability scanner that integrates community-driven security intelligence and automated penetration testing. Its latest v0.4.0 release introduces robust system monitoring and observability features, enhancing its capabilities. The platform offers a user-friendly interface and a quick Docker-based setup, making it accessible for security professionals.
theProtector: Real-time Linux Security Monitoring with eBPF and Honeypots
theProtector is a powerful Linux Bash script designed for real-time host-based security monitoring. It leverages advanced techniques like eBPF kernel monitoring, YARA pattern matching, and network honeypots to detect and respond to threats. This tool provides multi-layer security for paranoid admins on a budget, ensuring continuous protection with minimal overhead.
Wassette: A Security-Oriented Runtime for WebAssembly Components
Wassette is a security-focused runtime developed by Microsoft, designed to execute WebAssembly Components via the MCP protocol. It provides a secure sandbox environment, making it easy to extend AI agents with new tools. Leveraging Wasmtime, Wassette offers browser-grade isolation for enhanced security, though it is currently in early development.
Magic Wormhole: Securely Transfer Files and Text Between Computers
Magic Wormhole is an open-source tool that enables secure and easy transfer of files, directories, or text snippets between computers. It uses unique, human-pronounceable "wormhole codes" to identify endpoints, ensuring safe, one-time use transfers without complex setup. This Python-based utility simplifies cross-device data sharing with strong cryptographic guarantees.
Ghosting-AMSI: AMSI Bypass via RPC Hijack (NdrClientCall3)
Ghosting-AMSI presents an advanced technique to bypass AMSI detection by exploiting COM-level mechanics. It achieves this by hijacking the NdrClientCall3 function within the RPC runtime, intercepting AMSI scan requests before they reach the antivirus engine. This method provides a stealthy bypass without modifying AMSI.dll, making it highly effective against various detection mechanisms.
Trident: A Rust Fuzzing Framework for Secure Solana Program Development
Trident is a robust, Rust-based fuzzing framework specifically designed for Solana programs. It empowers developers to ship secure code by efficiently identifying critical vulnerabilities, such as edge cases, overflows, and missing constraints, early in the development cycle. This powerful tool offers manually-guided, stateful fuzzing capabilities, leveraging Anchor-like macros and executing thousands of transactions per second to thoroughly stress-test programs.
Pyre-check: Performant Type-Checking and Static Analysis for Python
Pyre-check is a high-performance type checker for Python, compliant with PEP 484, designed for incremental analysis of large codebases. It features Pysa, a security-focused static analysis tool for identifying data flow issues in Python applications, enhancing code quality and security.