Directory
Published directory entries matching your search.
MalwareBazaar is a platform from abuse.ch and Spamhaus for sharing malware samples with the infosec community, antivirus vendors, and threat intelligence providers. Users can upload samples, browse the database, set alerts for newly observed malware, and use APIs to push or pull signals and automate bulk queries. Spamhaus datasets enhanced with MalwareBazaar samples are also available.
Better Auth is a framework-agnostic authentication and authorization framework for TypeScript. It provides built-in email and password authentication, account and session management, social sign-on, two-factor authentication, and a rate limiter, and can be extended with plugins for features such as passkeys and multi-tenancy. It supports most popular frameworks and requires a database, such as SQLite, PostgreSQL, or MySQL, to store user data.
Binary Ninja offers two free ways to try the reverse engineering tool: Binary Ninja Cloud, a browser-based tool, and Binary Ninja Free, a downloadable app for local use. Cloud supports all architectures but requires uploading binaries; Free supports x86, x86_64, ARMv7 and ARMv8/AArch64 and is for non-commercial purposes or evaluation.
BugBountyHunting.com is a community-curated resource that collects writeups, resources and content related to bug bounty hunting, described as a bug bounty hunting search engine. It aims to help beginners starting in web application security learn more about bug bounty hunting.
Cap is a free, open-source, self-hosted CAPTCHA alternative. It uses proof-of-work and JavaScript instrumentation challenges instead of visual puzzles, and is licensed under Apache 2.0. It is installed by running a server with Docker and adding a widget to a form.
Cap is a GitHub repository or organization with source code, releases, documentation, or project resources.
Certbot is a tool run from the command line to obtain and install HTTPS certificates. It can either be run once to get free HTTPS certificates or used with instructions generated for a server's software and system. Using it requires comfort with the command line and an HTTP website. The project is a project of the Electronic Frontier Foundation.
Reverse Engineering challenges is a collection of reverse engineering exercises contrived by Dennis Yurichev. The challenges are organized by level, type, architecture and operating system, with levels ranging from 1 to 3. The site also offers an about page.
CheckFileType is a free online tool that determines a file's true type, extension and MIME type from its contents rather than its extension. Users upload a file without registration, and the tool can look inside archives such as ZIP files to report the type of each contained file. Files are stored temporarily and removed after one hour.
CrowdSec provides curated, crowd-powered threat intelligence in the form of actionable blocklists intended to help security operations teams block malicious IPs. The site describes a global view of threat intelligence built from data from real users, servers and production environments, and lists blocklists covering aggressive IPs, specific industries and countries, and high background noise.
Crowdsec is a GitHub repository or organization with source code, releases, documentation, or project resources.
Cutter is a free and open-source reverse-engineering platform powered by Rizin, using Rizin as its core engine. It is built with Qt and C++ and provides access to Rizin features through a GUI or an integrated terminal. Its releases integrate the native Ghidra decompiler, and it includes a graph view, debugger (beta), hex editor, Python scripting engine and plugins.
Cybersecurity-Resources is a GitHub repository or organization with source code, releases, documentation, or project resources.
Cybersources is a GitHub repository or organization with source code, releases, documentation, or project resources.
DNS over HTTPS is a GitHub repository or organization with source code, releases, documentation, or project resources.
A free domain research tool that discovers hosts related to a domain and looks up DNS records. It presents visible hosts from an attacker's perspective for red and blue teams, and is intended for reconnaissance, penetration testing, bug bounties, threat analysis and network OSINT.
DNSPerf compares the speed and uptime of enterprise and commercial DNS services. It lists DNS providers sorted by DNSPerf rank based on data for the last 30 days, calculated using 40% performance, 45% uptime and 15% quality.
dnSpyEx is a GitHub repository or organization with source code, releases, documentation, or project resources.
DVIA-v2 is a GitHub repository or organization with source code, releases, documentation, or project resources.
Exploit-DB paper archive with security research, exploitation papers, and technical writeups.
Exploit-DB binary exploit archive for security research and controlled testing.
Fail2Ban is a GitHub repository or organization with source code, releases, documentation, or project resources.
Flare VM is a GitHub repository or organization with source code, releases, documentation, or project resources.
Frida is a dynamic instrumentation toolkit for developers, reverse-engineers and security researchers. It lets users inject their own scripts into black box processes to hook functions and trace application code, and it runs on Windows, macOS, GNU/Linux, iOS, watchOS, tvOS, Android, FreeBSD and QNX.
