Open Source Python Security Software - Page 30

HTTP-Authorization via XMPP (JEP-70): an automatic login solution. Includes both client and server components.

Kadna is a small curses program written in Python that creates a secure and synchronizable database. This is intended for distributed password and small file (e.g. cryptographic keys) storage. This project in not longer maintained.

Libdejector is a database tool which defeats SQL injection attacks by performing context-free validation of queries. While written in C, SWIG wrappers exist for Python and other languages will be following soon.

Stop shipping unsafe AI output. Local-first verification, safety monitoring, and guardrails for any LLM 100% Local | No Telemetry | Privacy-First | 500 free calls/day Links Product Page: subodhkc.com/products/llmverify npm: npmjs.com/package/llmverify GitHub: github.com/subodhkc/llmverify-npm Python Package (PyPI): github.com/subodhkc/llmverify Author: Subodh KC — AI governance, compliance, and security leader Feature One-liner What it catches Verify output await verify(aiResponse) Hallucinations, harmful content, quality issues Block injections isInputSafe(userMessage) Prompt injection, jailbreaks, malicious input Redact PII redactPII(text) Emails, phones, SSNs, credit cards, API keys Fix broken JSON repairJSON(broken) Missing brackets, trailing commas, unquoted keys Monitor health monitorLLM(client) Latency spikes, token drift, behavioral changes Sentinel tests sentinel.quick(client, model) LLM regressions b

mailrelaytester is used to check a smtp server if it accepts relays. It checks the same tests as http://www.abuse.net/relay.html

Hosting exploit/backdoor detection daemon.It's written in python , and uses inotify (pyinotify) to monitor file system activity.It checks files smaller then some size,compares their md5sum and hex signatures against DBs with known exploits/backdoor.

A lightweight, responsive, adaptive firewall intended for small netoworks and workstations. This project takes advantage of existing Open Source material to create a greater, more cohecive whole.

EaseFilter File System Filter Driver Framework is a set of file system filter driver software development kit which includes file monitor filter driver, file access control filter driver, transparent file encryption filter driver, process filter driver and registry filter driver. The File Security Solution with the EaseFilter Comprehensive File Security SDK encompasses file security, digital rights management, encryption, file monitoring, file auditing, file tracking, data loss prevention, process monitoring and protection, and system configuration protection. EaseFilter file system filter driver is a kernel-mode component that runs as part of the Windows executive above the file system. The EaseFilter file system filter driver can intercept requests targeted at a file system or another file system filter driver. By intercepting the request before it reaches its intended target, the filter driver can extend or replace functionality provided by the original target of the request.

This program is a password generator. It uses a hashing algorithm to transform a master password into unique and complex site or service specific passwords. It's written in Python and runs either in GUI mode (using GTK+) or in text console.

mongoaudit is a CLI tool for auditing MongoDB servers, detecting poor security settings and performing automated penetration testing. It is widely known that there are quite a few holes in MongoDB's default configuration settings. This fact, combined with abundant lazy system administrators and developers, has led to what the press has called the MongoDB apocalypse. mongoaudit not only detects misconfigurations, known vulnerabilities and bugs but also gives you advice on how to fix them, recommends best practices and teaches you how to DevOp like a pro! MongoDB listens on a port different to default one. Server only accepts connections from whitelisted hosts / networks. MongoDB HTTP status interface is not accessible on port 28017. MongoDB is not exposing its version number. MongoDB version is newer than 2.4. TLS/SSL encryption is enabled. Authentication is enabled. SCRAM-SHA-1 authentication method is enabled.

mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. The first step is to execute code in the SQL Server process context. As extended stored procedures are going to be deprecated in future versions of MSSQL, we pay attention to Microsoft recommendations and thus, use CLR assemblies instead.

A python interface for nmap. Allows you to get information about your local network and conduct nmap scans and read the results from a python application or interpreter. Currently tested (lightly) under Windows XP, Mac OS 10.5.5 and Ubuntu 8.04 and 8.10.

The National Institutes of Science and Technology maintains the National Software Reference Library. As part of this, they keep track of SHA-1 hashes of millions of known pieces of software (the "Reference Data Set"). Unfortunately, there are very few tools to help users query the NSRL RDS. That's where nsrlquery comes in.

pam_duration provides a module for the Pluggable Authentication Module (PAM) authorization framework that sets per-day limits on total usage by particular Linux/Unix users on a single system. Limits can be configured by day of the week, so, for example, weekend limits can be different from weekdays. It also provides a service to ensure logout when the specified time limit expires.

Utility for facebook memory forensics.

phpbb forum login brute force

Polydish is a polymorphic Internet server capable of accepting pluggable protocols (written in Python or Ruby), and can thereby serve any type of content imaginable. The backend code is a fast, secure, C-based server, employing thread pools and OpenSSL.

The tool is useful when you want to encrypt and decrypt texts with password. Encrypted text can be posted online, and can only be decrypted back when correct password is entered.

This program is a graphical user interface for checking pwned passwords, it's writen with python and pyQT4. Program calculates password hash and then searches for matches with first 5 symbols (prefix) in https://api.pwnedpasswords.com, then full hash match is found localy on users PC.

An attempt to send a full flagged MIME based email using open relay mail servers (authentication not required). Written in Python3. Using smtplib and email liabraries TODO: Bruteforce the SMTP authentication. Support TLS.

A firewall knocking mechanism that is loosely based on tumbler (tumbler.sourceforge.net) instead it is written in python. A focus of this implementation will be on multiple client implementations (OSX Widget, XP taskbar, etc.)

Python module for secure file erase as the DoD 5220.22-M standard

Python extension module to allow access to Aladdin's hasp dongle.