ipmap

English readme • 简体中文 readme • 正體中文 readme • Lengua española readme • Deutsche readme • Svenska readme • 한국어 readme • Français readme • हिन्दी readme • Português readme • Italian readme • Русский readme • Indonesian readme • فارسی readme • عربي readme • Türkçe readme • Polskie readme يحدد تطبيق...

supply-chain-monitor

Supply Chain Monitor Automated monitoring of the top PyPI and npm packages for supply chain compromise. Polls both registries for new releases, diffs each release against its predecessor, and uses an LLM via Cursor Agent CLI to classify diffs as benign or malicious. Malicious findings trigger a...

Veritensor

🛡️ Veritensor: AI Data & Artifact Security Veritensor is the Anti-Virus for AI Artifacts and the ultimate Firewall for RAG pipelines. It secures the entire AI Supply Chain by scanning the artifacts that traditional SAST tools miss: Models, Datasets, RAG Documents, and Notebooks. Veritensor shift...

sashay

Sashay Introduction ℹ️ Sashay is an all in one automatic installer for useful Linux based tools.There are over 340 tools available. Installation⬇️ pip install -U sashay Tool Categories Information Gathering Vulnerability Scanner Exploitation Tools Wireless Testing Forensics Tools Web Hacking Stress...

harpoon

Harpoon OSINT / Threat Intel CLI tool. Install Requirements As a pre-requesite for Harpoon, you need to install lxml requirements, on Debian/Ubuntu : sudo apt-get install libxml2-dev libxslt-dev python3-dev. On Fedora: sudo dnf install sqlite-devel automake bzip2 bzip2-devel bzip2-lib cython g++...

bomber

bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...

safe-chain

Aikido Safe Chain ✅ Block malware on developer laptops and CI/CD ✅ Supports npm and PyPI more package managers coming ✅ Blocks packages newer than 48 hours without breaking your build ✅ Tokenless, free, no build data shared Need protection beyond npm & PyPI? Aikido Device Protection builds on Saf...

confused

Confused A tool for checking for lingering free namespaces for private package names referenced in dependency configuration for Python pypi requirements.txt, JavaScript npm package.json, PHP composer composer.json or MVN maven pom.xml. What is this all about? On 9th of February 2021, a security...

InstaLooter

InstaLooter |starme| .. |starme| image:: https://img.shields.io/github/stars/althonos/InstaLooter.svg?style=social&label=Star :target: https://github.com/althonos/InstaLooter Not all treasure's silver and gold, mate. |build| |repo| |versions| |format| |coverage| |doc| |grade| |license|...

tartufo

!WARNING This project is not actively maintained anymore. tartufo searches through git repositories for secrets, digging deep into commit history and branches. This is effective at finding secrets accidentally committed. tartufo also can be used by git pre-commit scripts to screen changes for...

pwntools

pwntools - CTF toolkit Pwntools is a CTF framework and exploit development library. Written in Python, it is designed for rapid prototyping and development, and intended to make exploit writing as simple as possible. from pwn import contextarch = 'i386', os = 'linux' r =...

HiddenEyeReborn

Introduction The HiddenEye: Reborn tool is a project aimed at exploiting human error. As my second attempt at creating a comprehensive tool for this purpose, it presently has numerous phishing features. We intend to add more functionality soon. Keep up with our progress by checking out our roadma...

aura

.. image:: https://cdn.sourcecode.ai/imgs/logotype.png :target: https://aura.sourcecode.ai/ ====== .. class:: center |homepageflair| |docsflair| |dockerflair| |licenseflair| |travisflair| |pypiflair| Source code auditing and static code analysis Aura is a static analysis framework developed as a...

chepy

Chepy Chepy is a python library with a handy cli that is aimed to mirror some of the capabilities of CyberChef. A reasonable amount of effort was put behind Chepy to make it compatible to the various functionalities that CyberChef offers, all in a pure Pythonic manner. There are some key advantag...

pip-audit

pip-audit pip-audit एक उपकरण है जो Python वातावरणों को ज्ञात कमजोरियों वाले पैकेजों के लिए स्कैन करता है। यह कमजोरी रिपोर्ट के स्रोत के रूप में PyPI JSON API के माध्यम से Python Packaging Advisory Database https://github.com/pypa/advisory-database का उपयोग करता है। यह परियोजना आंशिक रूप से Trail ...

hijagger

hijagger - تحقّق من سجلات الحزم بحثًا عن حزم قابلة للاختطاف تفحص هذه الأداة كل مُشرف maintainer في كل حزمة داخل سجلّي NPM و Python Pypi بحثًا عن نطاقات غير مسجّلة أو سجلات MX غير مسجّلة على تلك النطاقات. إذا كان النطاق غير مسجّل، يمكنك الاستيلاء على النطاق وبدء إعادة تعيين كلمة المرور للحساب إذا ...

deepsecrets

DeepSecrets - a better tool for secret scanning !WARNING Active development was switched to the creator's fork at https://github.com/ntoskernel/deepsecrets. This repository will not receive any updates...

bscan

:mag: an asynchronous target enumeration tool :magright: Synopsis bscan is a command-line utility to perform active information gathering and service enumeration. At its core, bscan asynchronously spawns processes of well-known scanning utilities, repurposing scan results into highlighted console...

magika

Magika Magika एक नवीन AI-संचालित फ़ाइल प्रकार पहचान उपकरण है जो सटीक पहचान प्रदान करने के लिए डीप लर्निंग की हालिया प्रगति पर निर्भर करता है। अंदरूनी तौर पर, Magika एक कस्टम, अत्यधिक अनुकूलित मॉडल का उपयोग करता है जिसका वज़न केवल कुछ MBs होता है, और यह एकल CPU पर चलने पर भी मिलीसेकंड के भीतर सटीक...

stumpy

|إصدار PyPI| |إصدار Conda Forge| |تنزيلات PyPI| |الترخيص| |حالة الاختبار| |تغطية الكود| |حالة RTD| |Binder| |JOSS| |NumFOCUS| .. |إصدار PyPI| image:: https://img.shields.io/pypi/v/stumpy.svg :target: https://pypi.org/project/stumpy/ :alt: PyPI Version .. |إصدار Conda Forge| image::...