Duo Labs (@duo-labs)

Top repositories

1

cloudmapper

CloudMapper helps you analyze your Amazon Web Services (AWS) environments.
JavaScript
5,911
star
2

webauthn

WebAuthn (FIDO2) server library written in Go
Go
1,025
star
3

parliament

AWS IAM linting library
Python
1,003
star
4

cloudtracker

CloudTracker helps you find over-privileged IAM users and roles by comparing CloudTrail logs with current IAM policies.
Python
879
star
5

py_webauthn

Pythonic WebAuthn
Python
829
star
6

webauthn.io

The source code for webauthn.io, a demonstration of WebAuthn.
Python
636
star
7

EFIgy

A small client application that uses the Duo Labs EFIgy API to inform you about the state of your Mac EFI firmware
Python
507
star
8

dlint

Dlint is a tool for encouraging best coding practices and helping ensure we're writing secure Python code.
Python
330
star
9

markdown-to-confluence

Syncs Markdown files to Confluence
Python
299
star
10

isthislegit

Dashboard to collect, analyze, and respond to reported phishing emails.
Python
284
star
11

idapython

A collection of IDAPython modules made with πŸ’š by Duo Labs
Python
278
star
12

chrome-extension-boilerplate

Boilerplate code for a Chrome extension using TypeScript, React, and Webpack.
TypeScript
208
star
13

secret-bridge

Monitors Github for leaked secrets
Python
186
star
14

apple-t2-xpc

Tools to explore the XPC interface of Apple's T2 chip
Python
155
star
15

twitterbots

The code used in the "Don't @ Me: Hunting Twitter Bots at Scale" Black Hat presentation
Python
152
star
16

cloudtrail-partitioner

Python
148
star
17

phish-collect

Python script to hunt phishing kits
Python
136
star
18

phinn

A toolkit to generate an offline Chrome extension to detect phishing attacks using a bespoke convolutional neural network.
JavaScript
130
star
19

xray

X-Ray allows you to scan your Android device for security vulnerabilities that put your device at risk.
Java
122
star
20

android-webauthn-authenticator

A WebAuthn Authenticator for Android leveraging hardware-backed key storage and biometric user verification.
Java
110
star
21

appsec-education

Presentations, training modules, and other education materials from Duo Security's Application Security team.
JavaScript
68
star
22

mysslstrip

CVE-2015-3152 PoC
Python
43
star
23

EFIgy-GUI

A Mac app that uses the Duo Labs EFIgy API to inform you about the state of your EFI firmware.
Objective-C
40
star
24

lookalike-domains

generate lookalike domains using a few simple techniques (homoglyphs, alt TLDs, prefix/suffix)
Python
31
star
25

srtgen

Automatic '.srt' subtitle generator
Python
22
star
26

apk2java

Automatically decompile APK's using Docker
Dockerfile
22
star
27

journal

The boilerplate for a new Journal site
21
star
28

neustar2mmdb

Tool to convert Neustar's GeoPoint data to Maxmind's GeoIP database format for ease of use.
Python
19
star
29

markflow

Make your Markdown sparkle!
Python
19
star
30

narrow

Low-effort reachability analysis for third-party code vulnerabilities.
Python
18
star
31

tutorials

Python
15
star
32

datasci-ctf

A capture-the-flag exercise based on data analysis challenges
Jupyter Notebook
15
star
33

sharedsignals

Python tools for using OpenID's Shared Signals Framework (including CAEP)
15
star
34

duo-blog-going-passwordless-with-py-webauthn

Python
14
star
35

chain-of-fools

A set of tools that allow researchers to experiment with certificate chain validation issues
Python
13
star
36

journal-cli

The command-line client for Journal
Jupyter Notebook
12
star
37

unmasking_data_leaks

The code from the talk "Unmasking Data Leaks: A Guide to Finding, Fixing, and Prevention" given at BSides SATX 2019.
Python
7
star
38

journal-theme

The Hugo theme that powers Journal
HTML
7
star
39

golang-workshop

Source files for a Golang Workshop
Go
5
star
40

journal-docs

The documentation for Journal
2
star
41

dlint-plugin-example

An example plugin for dlint
Python
2
star
42

vimes

A local DNS proxy based on CoreDNS.
Python
2
star
43

twitterbots-wallpapers

Wallpapers created from the crawlers in our "Don't @ Me" technical research paper
1
star
44

holidayhack-2019

Scripts and artifacts used to solve the 2019 SANS Holiday Hack Challenge
Python
1
star