Herman Slatman

A curated list of Awesome Threat Intelligence resources

A curated reference list of threat intelligence sources, tools, and data formats for cybersecurity professionals who track malicious IPs, malware, and attack patterns online.

A curated list of resources related to Industrial Control System (ICS) security.

A Caddy module that blocks malicious traffic based on decisions made by CrowdSec.

A curated list of awesome malware analysis tools and resources

A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.

A curated list of tools for incident response

Runs a Tailscale node on a Balena device

A collection of awesome penetration testing resources, tools and other shiny things

A curated list of awesome big data frameworks, ressources and other awesomeness.

Personal repository with handy cheatsheets.

A curated list of awesome forensic analysis tools and resources

Raspberry Pi 3 powered by Balena serving Tailscale mesh VPN node

A collection of tools developed by other researchers in the Computer Science area to process network traces. All the right reserved for the original authors.

🚗 A curated list of resources for learning about vehicle security and car hacking

A curated list of awesome social engineering resources.

A small POC using Caddy as a TLS-terminating MQTT proxy

A curated list of resources (books, tutorials, courses, tools and vulnerable applications) for learning about Exploit Development

A Caddy HTTP handler for validating requests and responses against an OpenAPI specification

A curated list of CTF frameworks, libraries, resources and softwares

A curated list of awesome threat detection and hunting resources

An awesome list of high-quality open datasets in public domains (on-going).

A curated list of awesome Machine Learning frameworks, libraries and software.

A MUD File Server for serving Manufacturer Usage Descriptions (RFC 8520) using the Caddy web server

A Caddy module providing Keyless SSL support

:memo: An awesome Data Science repository to learn and apply for real world problems.

Curated list of ransomware related material

Curating the best DevSecOps resources and tooling.

🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.

Repository for presentations

Outlook Add-In for reporting suspicious emails to the Dutch Fraudehelpdesk

Early POC (WIP) for detecting Verifone EFT systems on a (local) network

No description.

Attempting to build and maintain a list of awesome devsecops tools with the help of the community

🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.

Automagically reverse-engineer REST APIs via capturing traffic

A basic iOS Managed Device Attestation simulator

No description.

(Unofficial) Python API for https://dnsdumpster.com/

A Caddy module for issuing certificates using the Simple Certificate Enrollment Protocol (SCEP, RFC8894)

SpiderFoot, the open source footprinting and intelligence-gathering tool.

A library of modern monitoring tools

A curated list of amazingly awesome Hadoop and Hadoop ecosystem resources

Easily run Step CA as a Docker Desktop Extension

Docker Hacktoberfest 2022

A POC Encore application showcasing transactional email tracking

Collection of random Python snippets

A POC for using Symfony HttpCache with API Platform

The Swiss Army knife for 802.11, BLE and Ethernet networks reconnaissance and MITM attacks.

Grab a book from Packt Publishing for free every day

Classical, elegant, and automated thesis template

A curated list of awesome Go frameworks, libraries and software

A curated list of awesome Go storage projects and libraries

ev-id-tools

Automatic client and server certificate distribution and maintenance

Toolkit to manage keys and certificates in TPM2 chips

No description.

An example .mobileconfig signing utility in Go

No description.

mud-cli provides utilities for working with Manufacturer Usage Descriptions (RFC8520)

A POC Caddy module serving River UI

A small POC for using Bettercap with WebSockets in Python

Machine learning driven web application firewall to detect malicious queries with high accuracy.

This extension changes the default one page checkout into a version that functions in a more fashionable way.

No description.

mdmb is a tool for simulating Apple devices interacting with Apple MDM servers.

A fast and simple key-value store using netip.Addr and netip.Prefix as keys

A curated list of awesome projects related to eBPF.

PHP frontend for security.symfony.com

Detect potentially malicious PHP files

Pomerium is an identity-aware access proxy.

Bridge to Windows OpenSSH agent from Pageant. This means the openssh agent has the keys and this proxies pageant requests to it.

No description.

Keys and certificates for YubiKeys, written in Go

A basic dynamic SCEP webhook validation server example

Premier ACME client library for Go

Deployer Recipes

Generated Go code for working with Manufacturer Usage Descriptions (MUDs).

A Python-based network and host monitor

Python wrapper for tshark, allowing python packet parsing using wireshark dissectors

The OpenAPI Specification Repository

PacketFence running inside a dockercontainer

A Balena SDK in Go

Our IoT SDK in Python to enable any connected device to pay

WordPress plugin that blocks disposable email domains from registering.

GasPot Released at Blackhat 2015

A web UI and server for task based competitions employing Etherpad Lite.

A simple Symfony Console application using dependency injection

Open device management

webXray is a tool for detecting third-party HTTP requests and matching them to the companies which receive user data.

Web based Project Management tool for freelancers

pydig: a DNS query tool written in Python

A tool that bootstraps your dotfiles :zap:

:computer: :key: ssh-tpm-agent

No description.

custom local domain aliases for local dev servers

A toolkit with common assertions and mocks that plays nicely with the standard library

No description.

Container Signing

Tools for manipulating JSON Web Tokens, JWS, JWE, and JWK in Rust

Web based real-time log viewer. Stream ANY content to a web UI with autogenerated filters. Parse any format with TypeScript.

Google Cloud Client Libraries for Go.

High-Performance server for NATS.io, the cloud and edge native messaging system.

An example application showcasing parts of TPM KMS, TPM and TSS2 usage with mTLS.

bettercap official documentation and website contents

A framework for secure and scalable network traffic analysis - https://netcap.io

No description.

No description.

Fast, multi-platform web server with automatic HTTPS

Run the Rumble network scanner on a device managed by Balena

Personal dotfiles repository powered by dotbot

Free HTTPS certificates without having to trust the letsencrypt cli with sudo/root

Cross-language temporary (disposable/throwaway) email detection library. Covers 1979 fake email providers.

Generate Go client and server boilerplate from OpenAPI 3 specifications

A Caddy module for issuing certificates using Enrollment over Secure Transport (EST, RFC7030)

Go library for creating pkcs11 modules

Example goreleaser + github actions config with keyless signing and SBOM generation

No description.

Automatically generate Go test boilerplate from your source code.

Drop in replacement for https://golang.org/pkg/text/tabwriter with additional features

The Symfony CLI tool

No description.

The Go programming language

No description.

No description.

Go packages built on go-tpm providing a high-level API for using TPMs

Quick and dirty debugging output for tired Go programmers

Local OpenProject (https://www.openproject.org/) instance using Docker Compose

SEOstats is a powerful open source PHP library to request a bunch of SEO relevant metrics.

An iOS LAN Network Scanner library

bettercap's web UI

A simple and incomplete Fingerbank API client written in PHP

Odoo (formerly OpenERP). Open Source Apps To Grow Your Business.

XSS spider - 66/66 wavsep XSS detected

Adds comprehensive audit trail functionality to Loopback by keeping track of who created/modified/deleted data and when they did it, and adds a revisions model compatible with Sofa/Revisionable for PHP (https://github.com/jarektkaczyk/revisionable)

Extract GUIDs from .NET assemblies

This is a small Magento module that fixes the translation for selection of the shipping method

A Realm Object Server Web API Client written in PHP

No description.

A small POC illustrating .env and ENV VARs usage with PHP Archive (Phar)

Java client for ACME (Let's Encrypt)

Package attestation implements ASN.1 encoding/decoding of Android Key attestation extension.

perhaps the best CORS middleware library for Go

CrowdSec plugin for Ember

Ember is a real-time dashboard for Caddy & FrankenPHP

A Go web frontend framework

No description.

Get the unique machine id of any host (without admin privileges)

Go implementation of Tink

Fast key-value DB in Go.

No description.

No description.

A client for contacting a Frog server

Create beautiful applications using Go

A Certificate Transparency log implementation and monitoring API designed for scalability, ease of operation, and reduced cost.

No description.

Go SCEP server

New Relic Go Agent

No description.

Converts MySQL dump to SQLite3 compatible dump

Creates CycloneDX Software Bill of Materials (SBOM) from Go modules

A Progressive Web Application (PWA) that scans barcodes of various formats, using the Barcode Detection API.

Kadeessh (formerly Caddy-SSH) is a general-purpose, extensible, modular, memory-safe SSH server built in Go

TCTI like library for go-tpm

go library for CBOR Object Signing and Encryption (COSE)

Docker image for Golang cross-compiling with CGO

Structs and helpers for working with Apple Configuration Profiles in go

An in-memory CertMagic Storage implementation

A simple JavaScript library, to display a TreeView like in the windows filebrowser

SBOM Internet draft extension for MUD

No description.

🤵‍♂️Support for Linked CAs using protocol buffers and gRPC

Automatic HTTPS for any Go program: fully-managed TLS certificate issuance and renewal

Provides packet processing capabilities for Go

HTTP mocking for Golang

A Fingerbank API client for Go

A GreyNoise API client for Go

Fully featured and highly configurable SFTP server with optional FTP/S and WebDAV support - S3, Google Cloud Storage, Azure Blob

Unmarshal/Decode nested JSON by JSON Path

Fast IP to CIDR lookup in Golang

Layer 4 (TCP/UDP) app for Caddy

A YANG-centric Go toolkit - Go/Protobuf Code Generation; Validation; Marshaling/Unmarshaling

No description.

YANG parser and compiler to produce Go language objects

Symfony Swoole Bridge Bundle

A direct port of the Bleno bluetooth LE peripheral role library to Python2/3

Small driver for flashing a ws281x ledstrip using the Modbus protocol

Python library wrapping for the rpi-ws281x library

a mqtt client library for php

p0f unofficial git repo

How to implement Swift 4 Codable with Realm Database

Layers WordPress theme by Obox

A collection useful tips for the Swift language

Carbon mixin to handle business days

A simple demo bug tracker built using API Platform for the API and CockroachDB for persistence

A simple proof of concept with Debezium and API Platform

phpdhcpd provides a PHP based online interface for viewing the /var/lib/dhcp3/dhcpd.leases file used by DHCP servers.

A basic PHP SOAP client for the eVerbinding SOAP API

Create Phar of Composer based PHP application

Rotate pdf pages from command line.

GraphQL service for Realm Object Server 2.x