Skip to content

@duo-labs Duo Labs

Change the repository type filter

All

    Repositories list

    47 repositories

    • webauthn.io

      Public
      The source code for webauthn.io, a demonstration of WebAuthn.
      pythonsecuritydemoauthenticationwebauthnpasskeys
      Python
      •
      BSD 3-Clause "New" or "Revised" License
      •122•668•2•0•Updated Dec 5, 2024Dec 5, 2024

    • py_webauthn

      Public
      Pythonic WebAuthn 🐍
      pythonsecuritypypipython3pipduowebauthnfido2
      Python
      •
      BSD 3-Clause "New" or "Revised" License
      •174•875•3•1•Updated Dec 5, 2024Dec 5, 2024

    • journal-cli

      Public
      The command-line client for Journal
      Jupyter Notebook
      •
      BSD 3-Clause "New" or "Revised" License
      •4•12•0•1•Updated Oct 26, 2024Oct 26, 2024

    • secret-bridge

      Public
      Monitors Github for leaked secrets
      securitysecretssecrets-detection
      Python
      •
      BSD 3-Clause "New" or "Revised" License
      •43•191•6•7•Updated Oct 25, 2024Oct 25, 2024

    • markdown-to-confluence

      Public
      Syncs Markdown files to Confluence
      markdownconfluence
      Python
      •
      Apache License 2.0
      •69•308•7•2•Updated Aug 21, 2024Aug 21, 2024

    • parliament

      Public
      AWS IAM linting library
      Python
      •
      BSD 3-Clause "New" or "Revised" License
      •95•1.1k•39•4•Updated Jul 26, 2024Jul 26, 2024

    • sharedsignals

      Public
      Python tools for using OpenID's Shared Signals Framework (including CAEP)
      BSD 3-Clause "New" or "Revised" License
      •9•15•2•2•Updated Jul 22, 2024Jul 22, 2024

    • cloudmapper

      Public
      CloudMapper helps you analyze your Amazon Web Services (AWS) environments.
      awssecuritydiagramcytoscape
      JavaScript
      •
      BSD 3-Clause "New" or "Revised" License
      •815•6k•190•19•Updated Jul 15, 2024Jul 15, 2024

    • duo-blog-going-passwordless-with-py-webauthn

      Public
      Python
      •9•15•0•0•Updated Mar 7, 2024Mar 7, 2024

    • lookalike-domains

      Public
      generate lookalike domains using a few simple techniques (homoglyphs, alt TLDs, prefix/suffix)
      Python
      •12•31•0•1•Updated Sep 15, 2023Sep 15, 2023

    • isthislegit

      Public
      Dashboard to collect, analyze, and respond to reported phishing emails.
      securityphishinginfosecsecurity-automationsecurity-toolsphishing-reports
      Python
      •
      BSD 3-Clause "New" or "Revised" License
      •50•285•24•38•Updated Aug 1, 2023Aug 1, 2023

    • unmasking_data_leaks

      Public
      The code from the talk "Unmasking Data Leaks: A Guide to Finding, Fixing, and Prevention" given at BSides SATX 2019.
      Python
      •
      BSD 3-Clause "New" or "Revised" License
      •3•7•0•3•Updated Jul 25, 2023Jul 25, 2023

    • phish-collect

      Public
      Python script to hunt phishing kits
      pythonphishinginfosec
      Python
      •30•136•1•4•Updated Jul 25, 2023Jul 25, 2023

    • narrow

      Public
      Low-effort reachability analysis for third-party code vulnerabilities.
      Python
      •
      Apache License 2.0
      •4•20•7•0•Updated Jul 11, 2023Jul 11, 2023

    • cloudtrail-partitioner

      Public
      Python
      •
      BSD 3-Clause "New" or "Revised" License
      •25•152•5•13•Updated Jul 8, 2023Jul 8, 2023

    • webauthn

      Public archive
      WebAuthn (FIDO2) server library written in Go
      securityauthenticationu2ffido2webauthnwebauthn-library
      Go
      •
      BSD 3-Clause "New" or "Revised" License
      •162•1k•0•0•Updated Dec 5, 2022Dec 5, 2022

    • markflow

      Public
      Make your Markdown sparkle!
      Python
      •
      Apache License 2.0
      •5•20•10•1•Updated May 2, 2022May 2, 2022

    • idapython

      Public
      A collection of IDAPython modules made with 💚 by Duo Labs
      Python
      •
      BSD 3-Clause "New" or "Revised" License
      •63•287•0•2•Updated Jan 26, 2022Jan 26, 2022

    • android-webauthn-authenticator

      Public
      A WebAuthn Authenticator for Android leveraging hardware-backed key storage and biometric user verification.
      androidandroid-libraryandroid-securitywebauthnfido2webauthn-library
      Java
      •
      BSD 3-Clause "New" or "Revised" License
      •20•112•5•0•Updated Dec 17, 2021Dec 17, 2021

    • EFIgy

      Public
      A small client application that uses the Duo Labs EFIgy API to inform you about the state of your Mac EFI firmware
      macossecurityfirmwareefi
      Python
      •
      BSD 3-Clause "New" or "Revised" License
      •39•513•3•0•Updated Dec 17, 2021Dec 17, 2021

    • cloudtracker

      Public
      CloudTracker helps you find over-privileged IAM users and roles by comparing CloudTrail logs with current IAM policies.
      Python
      •
      BSD 3-Clause "New" or "Revised" License
      •111•890•21•0•Updated Dec 17, 2021Dec 17, 2021

    • appsec-education

      Public
      Presentations, training modules, and other education materials from Duo Security's Application Security team.
      educationtraining-materialsappsec
      JavaScript
      •
      BSD 3-Clause "New" or "Revised" License
      •15•71•1•1•Updated Jul 15, 2021Jul 15, 2021

    • vimes

      Public
      A local DNS proxy based on CoreDNS.
      Python
      •
      Apache License 2.0
      •1•1•0•0•Updated Aug 5, 2020Aug 5, 2020

    • srtgen

      Public
      Automatic '.srt' subtitle generator
      Python
      •
      Apache License 2.0
      •6•21•1•0•Updated Jul 23, 2020Jul 23, 2020

    • twitterbots

      Public
      The code used in the "Don't @ Me: Hunting Twitter Bots at Scale" Black Hat presentation
      Python
      •
      BSD 3-Clause "New" or "Revised" License
      •26•151•1•1•Updated May 14, 2020May 14, 2020

    • apk2java

      Public
      Automatically decompile APK's using Docker
      Dockerfile
      •
      BSD 3-Clause "New" or "Revised" License
      •8•22•0•1•Updated May 8, 2020May 8, 2020

    • dlint

      Public archive
      Dlint is a tool for encouraging best coding practices and helping ensure we're writing secure Python code.
      pythonlinterstatic-analysis
      Python
      •
      BSD 3-Clause "New" or "Revised" License
      •14•331•2•0•Updated Feb 19, 2020Feb 19, 2020

    • datasci-ctf

      Public
      A capture-the-flag exercise based on data analysis challenges
      data-sciencectf
      Jupyter Notebook
      •
      Creative Commons Attribution 4.0 International
      •8•18•0•0•Updated Jan 30, 2020Jan 30, 2020

    • holidayhack-2019

      Public
      Scripts and artifacts used to solve the 2019 SANS Holiday Hack Challenge
      Python
      •
      Apache License 2.0
      •1•1•0•0•Updated Jan 13, 2020Jan 13, 2020

    • chain-of-fools

      Public
      A set of tools that allow researchers to experiment with certificate chain validation issues
      Python
      •
      BSD 3-Clause "New" or "Revised" License
      •5•13•0•0•Updated Dec 4, 2019Dec 4, 2019