SafeLine
chaitin/safelineSelf-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic…
anti-botapi-securityapi-security-testing+8
chaitin/safelineSelf-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic…
zaproxy/zaproxyOpen-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…
vicanso/pingapA reverse proxy like nginx, built on pingora, simple and efficient.
uwctcjnwlk/web3-decoderBurp Suite extension for decoding Ethereum JSON-RPC calls and smart contract interactions, supporting multiple chains and automatic ABI retrieval.
mitmproxy/mitmproxyAn interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
umputun/reproxyLightweight edge HTTP(S) server and reverse proxy with automatic SSL, Docker/Consul discovery, per-route authentication, rate limiting, and…
bytesizedmarius/rewerse-engineeringRewe API reverse engineering in Go
janusec/janusecUnified application gateway providing reverse proxy, WAF, CC defense, OAuth2 authentication, ACME certificate automation, and GSLB for secure,…
kaandemir993/-remcos-rat-fileless-svchost-injection-obfuscated-payload-analysis-"Reverse engineering analysis of a fileless Remcos RAT variant that injects into svchost.exe via Native API calls. Covers obfuscated payload…
gdatasoftwareag/vaasVerdict-as-a-Service SDKs: Analyze files for malicious content
kaysec/hybrid-submitA script that automatically submits files to Hybrid Analysis (API)
hasherezade/tiny_tracerIntel Pin-based tracer for API calls, syscalls, and instructions with anti-debug evasion, used for malware analysis and reverse engineering of packed…
shacode/olyx🔗 Lightweight security orchestrator mobile application for URI vetting, providing a unified, multi-engine interface to aggregate and validate link…
blackfan/bfscanTool for finding URLs, paths, secrets and generating raw HTTP requests and OpenApi specifications from config files and annotations used in JAR / WAR…
fevar54/cve-2025-4679-secureoauth-demo---enfoque-educativoIsolated educational lab simulating CVE-2025-4679 OAuth credential exposure. Learn offensive and defensive security through hands-on exercises,…
0xdad0/papimonitorFrida-based runtime API monitor for Android apps that logs invoked APIs, parameters, return values, and call origins across predefined or custom…
p0pr0ck5/lua-resty-wafHigh-performance WAF built on the OpenResty stack