47,133 repositories indexed
241–264 of 317 · Most stars
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
Words list generator to crack security tokens
Security-hardened MCP server for Docker with read-only defaults, restart deny-lists, and secret redaction
Mobile runtime detection workbench for AI (iOS and Android)
This repository contains reverse engineering results and resources for a few specific car models of a very specific car manufacturer. Please don't sue.
Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
Dependency Combobulator
Fast Fourier transform in MicroPython's inline ARM Thumb V7 assembler (STM32, RP2350 etc.).
AI-powered SDK featuring algorithmic trading, backtesting, deployment on 100+ exchanges, and multiple optimization engines.
Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and auto-completion to your preferred editor once it is configured.
Potiron - Normalize, Index and Visualize Network Capture
A docker container to simplify and secure the use of Infrastructure as Code (IaC)
Framework agnostic set of sqlalchemy classes that make building applications that require permissions an easy task.
RDP honeypot
Security and Hacking Tools, Exploits, Proof of Concepts, Shellcodes, Scripts.
Open standard for Provenance & Intent Contracts (PIC) in AI agents. Verify intent, provenance, and evidence before high-impact tool calls.
Gestionnaire de contenu permettant de créer et gérer un site internet basé sur le Système de design de l'État, accessible et sécurisé. Basé sur Wagtail CMS
The Security Analyst’s Guide to Suricata
Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents
drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates
Find which of your direct GitHub dependencies is susceptible to RepoJacking attacks