Awesome GitHub RepositoriesObject Store Encryption

LanceDB is a vector database and columnar data store designed to function as a versioned dataset manager and vector search engine. It serves as a high-performance backend for indexing and retrieving high-dimensional embeddings, providing the foundation for machine learning data pipelines. The system distinguishes itself through a combination of cloud-native object storage and immutable version tracking, allowing for data time-travel and reproducible AI experiments. It integrates hybrid search capabilities, merging dense vector similarity with BM25 full-text search and SQL-like scalar filters

OrbitDB is a decentralized data storage system that enables the creation of serverless databases residing across a network of peers. It functions as a peer-to-peer database that integrates with a content-addressed storage layer to distribute and replicate data without a central server. The system utilizes conflict-free replicated data types to ensure eventual consistency and state convergence across distributed nodes. It maintains an immutable record of updates using a directed acyclic graph to preserve causal ordering and cryptographic integrity. Access is managed through a decentralized ide

Solid is a protocol and ecosystem for decentralized web applications that separates application logic from data storage. It enables users to store and control their personal information in personal online data stores, known as Pods, ensuring that individuals own their data rather than the applications they use. The project provides a framework for decentralized identity and authentication using WebID and OpenID Connect, decoupling identity from central providers. It implements a resource-level permission system via Web Access Control, allowing users to grant or deny read, write, and append ac

Tutanota is an end-to-end encrypted email client and privacy-focused mail server. It functions as a cross-platform secure messaging application that provides encrypted email and calendar synchronization across desktop and mobile devices. The system ensures that only the sender and recipient can read messages by implementing a zero-knowledge architecture, where the service provider cannot access user private keys or cleartext data. This is achieved through client-side encryption and the use of asymmetric key exchange to share encrypted messages without prior secret key exchange. The platform

The AWS SDK for PHP is a software development kit that provides HTTP client classes for every supported Amazon Web Service, enabling PHP applications to send authenticated requests and receive structured, typed response objects. It includes a credential resolution chain that automatically locates credentials from environment variables, instance profiles, or configuration files, and supports promise-based asynchronous execution for running multiple API calls concurrently to improve throughput. The SDK distinguishes itself through a middleware pipeline architecture that allows interception and

CppGuide is a curated collection of educational resources and practical guides focused on C++ server development, Linux kernel internals, concurrent programming, network protocols, and security exploitation. It provides structured learning paths for backend developers, covering everything from interview preparation to building high-performance network servers and understanding operating system fundamentals. The guide distinguishes itself by offering in-depth, hands-on tutorials that walk through real-world implementations, including building a Redis-like server from scratch, designing custom

Cortex is an open-source, horizontally scalable metrics platform that ingests, stores, and queries Prometheus-compatible time-series data with multi-tenant isolation. It accepts metrics via Prometheus remote write and OpenTelemetry, executes PromQL queries against both recent and historical data, and provides a Prometheus-compatible alerting and recording rule engine with an integrated Alertmanager. The system is built as a set of independently scalable microservices that use hash-ring-based sharding, gossip-based cluster membership, and tenant-aware object storage to distribute workloads acro

This project is a red teaming knowledge base and offensive security playbook designed to simulate adversary behavior. It serves as a comprehensive collection of technical guides and tactics for executing red team operations. The repository provides detailed instructions for Active Directory exploitation, including Kerberos abuse and domain privilege escalation. It covers defense evasion through API unhooking and payload obfuscation, as well as Windows internals research involving the manipulation of kernel objects and system memory. The capability surface extends to network penetration testi

snarkOS es un entorno de ejecución distribuido y blockchain de prueba de conocimiento cero (zero-knowledge proof) diseñado para desplegar y gestionar aplicaciones que dependen de primitivas criptográficas de conocimiento cero. Funciona como un libro mayor descentralizado que utiliza pruebas de conocimiento cero para verificar transiciones de estado y transacciones sin revelar datos privados. El sistema utiliza una red de consenso de cuentas vinculadas donde los validadores bloquean activos como garantía para asegurar un estado global. Cuenta con un libro mayor de estado cifrado para rastrear datos de la aplicación de forma privada y un probador acelerado por GPU que descarga cálculos criptográficos pesados al hardware gráfico para aumentar la velocidad de prueba. El proyecto proporciona una jerarquía de nodos basada en roles que consiste en nodos validadores, centrales y probadores. Su superficie de capacidades cubre la operación de nodos descentralizados, sincronización de red peer-to-peer y la gestión del estado cifrado de la aplicación. Herramientas adicionales incluyen una interfaz de línea de comandos para el control de nodos, telemetría para monitorear la participación en el consenso y la capacidad de arrancar redes de desarrollo locales.

Donut is a toolset for loading and executing payloads in memory, featuring a position-independent shellcode generator, an in-memory payload injector, and a .NET assembly loader. It is designed to convert executable files and scripts into shellcode that can be executed within the memory space of a remote process without writing files to disk. The project specializes in security evasion through memory-based patching and payload obfuscation using symmetric block ciphers and compression. It includes a remote payload stager to retrieve encrypted modules from HTTP or DNS servers during runtime, red

EQGRP es un framework de troyano de acceso remoto y kit de herramientas de post-explotación. Proporciona una infraestructura centralizada de comando y control para desplegar implantes persistentes y gestionar agentes remotos en diversos sistemas operativos. El proyecto incluye herramientas para la evasión forense digital, como la modificación de registros del sistema y marcas de tiempo del sistema de archivos para eliminar rastros de ejecución. Cuenta con un sistema de interceptación de red para capturar y reconstruir flujos de datos mediante hooks en el root del sistema, así como exploits diseñados para la escalada de privilegios del kernel para elevar los permisos de proceso a root administrativo. El kit de herramientas cubre una amplia gama de capacidades, incluyendo ejecución remota de código, empaquetado de shellcode para evasión de firmas, y la exfiltración y análisis de registros de dispositivos móviles y registros de telecomunicaciones. También proporciona utilidades para enlazar puertos de red y navegar por archivos descifrados.

Veil is a payload generation framework and a suite of tools designed to automate the creation of obfuscated binaries and encoded shellcode. It functions as an anti-virus evasion tool that transforms binary code to bypass security scanners and endpoint detection software. The framework utilizes multi-language payload generation, employing various programming language compilers to create executables that evade signature-based detection. It includes an evasive shellcode encoder to remove forbidden characters and apply obfuscation techniques to hide payload logic. The project covers the generati

Open Health is a secure health data platform and personal health record manager designed to collect and store disparate medical histories in a single centralized location. It functions as an AI-powered medical conversation tool and data parser that transforms unstructured health documents into structured files for analysis and processing. The platform integrates large language models to provide personalized health guidance by injecting structured personal medical records into the model context. This allows for the generation of tailored medical responses based on the user's specific health da

s5cmd is a command line interface for high-performance data transfers and management tasks across S3 compatible storage services. It functions as a parallel data transfer tool and bucket synchronization utility, designed to accelerate the uploading and downloading of large volumes of files using concurrent workers. The tool acts as a batch command processor capable of executing thousands of object management operations in parallel from command files or piped streams. It also serves as an S3 Select query client, allowing the execution of SQL expressions against stored JSON records to retrieve

OffensiveRust is a red team toolkit and malware development kit written in Rust. It serves as an evasion framework and post-exploitation library, providing a collection of offensive security primitives and a Windows API wrapper for interacting with low-level system functions and undocumented APIs. The project focuses on bypassing security software through direct system calls, memory obfuscation, and stealthy payload execution. It implements techniques to defeat static binary analysis via compile-time string encryption and payload obfuscation, while avoiding detection using parent process ID s

Este proyecto es un recurso educativo curado diseñado para ayudar a los desarrolladores a practicar el desarrollo web frontend a través de una colección de cincuenta desafíos de codificación distintos. Proporciona un plan de estudios estructurado enfocado en construir aplicaciones funcionales utilizando React y tecnologías web estáticas modernas, ofreciendo resúmenes de proyectos y planos que guían a los estudiantes a través de la implementación de diversas interfaces web. La colección se distingue por enfatizar el prototipado full-stack y los patrones de integración del mundo real. En lugar de centrarse en elementos de UI aislados, los proyectos requieren la integración de servicios externos, incluyendo sistemas de gestión de contenido headless, APIs de terceros y bases de datos en la nube. Al replicar la funcionalidad de plataformas populares y construir herramientas interactivas, los desarrolladores adquieren experiencia en la gestión de estados complejos, autenticación y sincronización de datos entre sesiones. El plan de estudios cubre una amplia superficie técnica, incluyendo arquitectura basada en componentes, manejo declarativo de formularios y generación de sitios estáticos. También incorpora tareas prácticas como visualización de datos geoespaciales, gestión de activos multimedia, procesamiento de pagos y la implementación de funcionalidad de búsqueda. Estos ejercicios están diseñados para simular flujos de trabajo de desarrollo profesional, incluyendo el uso de generación de datos mock y pruebas automatizadas para garantizar la fiabilidad de la aplicación. El repositorio sirve como una guía completa para aquellos que buscan construir portafolios profesionales documentando desafíos técnicos y resultados. Está estructurado para ayudar a los programadores a transicionar desde el diseño de UI básico hacia aplicaciones web complejas y basadas en datos.