Search Results for "abuse"
Sort By:
Showing 92 open source projects for "abuse"
View related business solutions-
Ship Agents FasterGemini Enterprise Agent Platform lets you rapidly build, scale, govern and optimize production-ready agents grounded in your organization's data. The platform enables developers to build custom or pre-built agents for virtually any use case. New customers get $300 in free credits.
-
Host LLMs in Production With On-Demand GPUsDeploy your model, get an endpoint, pay only for compute time. No GPU provisioning or infrastructure management required.
-
1
Niubi Guard
Open-source GitHub repository abuse detection and response system
Niubi Guard is an open-source defense system for GitHub maintainers who need to detect and respond to repository abuse. It focuses on spam, harassment, coordinated attacks, suspicious issue activity, and bot-like comment patterns. The project gives maintainers control over rules, allowlists, detection signals, confidence thresholds, and response modes. It includes both a command-line workflow and a web console for configuring scans and reviewing results. -
2
JumpServer
Manage assets on different clouds at the same time
...Audit recordings are stored in the cloud and will never be lost. One system, is used by multiple subsidiaries and departments at the same time. Prevent identity fraud and reuse. Prevent internal misuse and permission abuse. Management of people and assets. Retrospective safeguards and basis for accident analysis. -
3
TikTok-ViewBot
ViewBot using requests updated 2025
...Because it touches on automation against a third-party service, responsible use and adherence to platform terms are emphasized; using such tools to manipulate metrics or violate policies is unethical and can be unlawful. From a security research perspective, understanding these patterns helps both defenders and platform engineers improve abuse detection. For developers, the repo also serves as a cautionary example of how brittle unofficial integrations can be and why resilient, compliant APIs matter. -
4
Mastodon
Self-hosted, globally interconnected microblogging community
...Mastodon isn’t a single website like Twitter or Facebook, it's a network of thousands of communities operated by different organizations and individuals that provide a seamless social media experience. Mastodon comes with effective anti-abuse tools to help protect yourself. Thanks to the network's spread out and independent nature there are more moderators who you can approach for personal help, and communities with strict codes of conduct. You have 500 characters. You can adjust the thumbnails of your pictures with focal points. You can use custom emojis, hide things behind spoiler warnings and choose who sees a given post. ... -
Train ML Models With SQL You Already KnowBuild and deploy ML models using familiar SQL. Automate data prep with built-in Gemini. Query 1 TB and store 10 GB free monthly.
-
5
RedSun
The Red Sun vulnerability repository
RedSun is a proof-of-concept security project that demonstrates a critical privilege escalation vulnerability in Microsoft Defender by exploiting unintended file-handling behavior. The tool leverages how Defender processes files tagged with cloud metadata, where instead of removing malicious files, the antivirus may rewrite them to their original location. By carefully manipulating this process, the exploit enables attackers to overwrite protected system files and gain SYSTEM-level... -
6
pikepdf
A Python library for reading and writing PDF, powered by QPDF
...Python + QPDF = “py” + “qpdf” = “pyqpdf”, which looks like a dyslexia test and is no fun to type. But say “pyqpdf” out loud, and it sounds like “pikepdf”. pikepdf is a library intended for developers who want to create, manipulate, parse, repair, and abuse the PDF format. It supports reading and write PDFs, including creating from scratch. Thanks to QPDF, it supports linearizing PDFs and access to encrypted PDFs. -
7
Express Rate Limit
Basic rate-limiting middleware for the Express web server
Express Rate Limit is a middleware for Express applications that helps prevent abuse by limiting repeated requests to public APIs and endpoints. -
8
tirith
Your browser catches homograph attacks
...It targets real-world attack classes like Unicode homograph URLs (lookalike domains), terminal injection tricks (ANSI escape sequences and bidi overrides), and “pipe-to-shell” installation patterns such as curl | bash that attackers frequently abuse. The project emphasizes local-only analysis with no telemetry and no background daemons, so it can run offline and keep sensitive command context on-device. It integrates into popular shells via hooks (zsh, bash, fish, and PowerShell), including paste-aware protections so hidden characters or malicious rewrites get caught at the moment they enter the terminal. -
9
Markdown package LaTeX
Package for converting and rendering markdown documents in TeX
...Unlike other convertors, the Markdown package does not require any external programs and makes it easy to redefine how each and every markdown element is rendered. Creative abuse of the markdown syntax is encouraged. -
Veeam Data Platform v13.1 - Get Your Free TrialTry Veeam Data Platform today. Experience the unified platform that's secure by design, portable by default, and proven to recover clean, fast, and anywhere.
-
10
JavaScript Obfuscator
A powerful obfuscator for JavaScript and Node.js
...It works with modern JavaScript syntax and integrates into build pipelines to protect selected bundles or modules automatically. Teams use it to deter casual inspection of proprietary logic, license checks, or anti-abuse heuristics shipped to the browser or Node targets. -
11
Cap CAPTCHA
The privacy-first, self-hosted CAPTCHA for the modern web
...The system can be deployed independently, giving developers full control over user data and verification processes. It integrates easily into web applications and focuses on maintaining usability while preventing automated abuse. Cap avoids reliance on centralized providers, reducing dependency on external services and improving privacy compliance. Its design reflects a shift toward decentralized, user-respecting security mechanisms. It is particularly suited for developers who want transparent and customizable bot protection. -
12
PIKAPIKA
A beautiful, easy-to-use and ad-free comic and game client
A beautiful, easy-to-use and ad-free manga client that can run on Windows/MacOS/Linux/Android/IOS. There are restricted levels of content in this APP (such as explicit/bloody/violent/drug abuse), users under the age of 18 must use it accompanied by a guardian, and please abide by local laws and regulations. Your star and issue are a great encouragement to developers, you can download the latest source code/installation package from the source warehouse, and express support/suggestions. VPN->Proxy->Distribution, if these three functions are set at the same time, you will access the proxy on your mobile phone's VPN, and use the proxy to request the diversion server. ... -
13
security-audit
A coding-agent skill for multi-phase security audits
...The workflow begins with reconnaissance, then moves into parallel hunting across attack classes such as injection, access control, business logic, cryptography, feature abuse, and chained attacks. Findings are then challenged through separate validation agents to reduce false positives. The skill produces human-readable reports, detailed finding traces, structured JSON output, and independent verification against the actual source code. Overall, it is designed to make AI-assisted security review more systematic, adversarial, and evidence-based. -
14
reCAPTCHA
PHP client library for reCAPTCHA, a free service
reCAPTCHA is Google’s human-verification system that helps websites distinguish real users from automated abuse while keeping friction low for legitimate traffic. The project bundles client and server examples, language-specific helpers, and documentation patterns for integrating reCAPTCHA v2 and v3 flows into web forms and APIs. Its design philosophy is “risk-based”: most users pass silently based on behavioral signals, while higher-risk interactions may be challenged with an image, checkbox, or other verification step. ... -
15
SafeLine
Serve as a reverse proxy to protect your web services from attacks
...It typically protects web apps from attacks such as SQL injection, XSS, code injection, os command injection, CRLF injection, LDAP injection, XPath injection, RCE, XXE, SSRF, path traversal, backdoor, brute force, HTTP-flood, bot abuse, among others. By deploying a WAF in front of a web application, a shield is placed between the web application and the Internet. While a proxy server protects a client machine’s identity by using an intermediary, a WAF is a type of reverse-proxy, protecting the server from exposure by having clients pass through the WAF before reaching the server. ... -
16
Docker Mailserver
Production-ready fullstack but simple mail server
...It bundles the core mail stack—Postfix for SMTP and Dovecot for IMAP/POP3—then layers in optional anti-spam and anti-virus services, DKIM/DMARC signing and verification, and rate-/abuse-protection tooling. The project emphasizes secure defaults while exposing configuration via environment variables and mounted files, allowing you to define users, aliases, domains, and sieve filters without rebuilding images. It integrates smoothly with Let’s Encrypt for TLS, supports LDAP and other auth backends, and ships with scripts to validate DNS records and common misconfigurations. ... -
17
PowerSharpPack
Offensive CSharp Projects wraped into Powershell for easy usage
PowerSharpPack is a consolidated offensive-security toolkit that wraps many standalone C# projects into an easy-to-use PowerShell loader. The author compiles, gzip-compresses and base64-encodes each C# binary, then dynamically loads the assemblies into the PowerShell process so operators can invoke powerful .NET tools without dropping executables on disk. The bundle exposes a single entry script (PowerSharpPack.ps1) with switches to select which embedded tool to run and an optional -Command... -
18
A.I.G (AI-Infra-Guard)
A full-stack AI Red Teaming platform securing AI ecosystems
...Its infrastructure scanner fingerprints AI services and checks them against a large library of known vulnerabilities. Agent and skill analysis detects risks involving malicious instructions, unsafe code execution, privilege abuse, compromised tools, and insecure dependencies. Jailbreak evaluation tests language models against multiple prompt-based attack methods and enables cross-model comparison. The platform also provides a web interface, standalone scanning tools, APIs, Docker deployment, and integrations for incorporating security checks into AI workflows. -
19
AI Logo Generator
A free + OSS logo generator powered by Flux on Together AI
...It integrates Clerk for authentication so users can sign in, save their logo history (planned via a dashboard), and potentially manage usage tied to their own API key. Upstash Redis is used for rate limiting, which is important for controlling API usage and preventing abuse when generating many images. Analytics and observability are baked in with Plausible and Helicone, so developers can monitor usage patterns and model behavior over time. -
20
ddclient
ddclient updates dynamic DNS entries for accounts
ddclient is a long-standing, Perl-based Dynamic DNS client that keeps DNS records updated when your public IP changes. It supports a wide roster of DNS providers and APIs, allowing both A and AAAA updates so IPv4 and IPv6 hosts remain reachable. The client can discover your current address via network interfaces or external check services, which is crucial for NAT’d home connections. It runs as a daemon or from cron, with configurable intervals, SSL/TLS for provider communication, and robust... -
21
SSPanel-UIM
Multi-purpose proxy service management system
...Administrators can configure SSR/V2Ray or other proxy backends and synchronize them with the panel, so nodes apply updates or bans uniformly. Because anonymity and reliability matter, SSPanel-UIM includes abuse checks like detection of reused accounts or suspicious traffic patterns. Many deployments are used in regions where open access is restricted and users rely on secure routing tools managed via such control planes to enforce policy and usage. -
22
tirreno
Security framework for devs and product teams
tirreno is a security framework. tirreno [tir.ˈrɛ.no] helps understand, monitor, and protect your product from threats, fraud, and abuse. While classic cybersecurity focuses on infrastructure and network perimeter, most breaches occur through compromised accounts and application logic abuse that bypasses firewalls, SIEM, WAFs, and other defenses. tirreno detects threats where they actually happen: inside your product. tirreno is a few-dependency, "low-tech" PHP/PostgreSQL application. ... -
23
PySilon Malware
Advanced RAT written in Python language
...The repository’s own disclaimer frames the material as educational while placing responsibility on the user. It is best categorized as malware for defensive analysis, threat research, and understanding abuse patterns, not as a normal administration tool. -
24
Shadow Network Fingerprinting Engine
SNF is a 100% offline, air-gap passive network intelligence engine
...SNF captures raw packets, reconstructs TCP/UDP flows, and runs them through 14 deterministic protocol analyzers. It detects C2 beacons, DGA domains, DNS tunnels, lateral movement, data exfiltration, and full ICS/SCADA protocol abuse across Modbus, S7comm, EtherNet/IP, PROFINET, and DNP3. Every run produces structured NDJSON with a determinism guarantee — same PCAP, same config, same version, SHA-256 identical output every time. Court-admissible evidence bundles built in. **Zero network calls. Ever. Not a setting. Architecture.** ## Validated Results - Emotet epoch 3 PCAP — 23 IOC hits, 52 threat matches - MAWI backbone — 14.9M packets, zero crashes, 332K graph nodes - nmap standard scan — 1,971 scan events detected ## Links - Website: https://shadownf.com - GitHub (open core): https://github.com/padigeltejas/snf-core -
25
Highly scalable/configurable Messaging Platform allowing users in a domain to be distributed on multiple hosts, has multiple queues. Provides virtual domains/users in MySQL. Modern MSP class qmail replacement with ESMTP, POP3/IMAP, QMTP, QMQP support