Randomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.
Repository Index
47,133 repositories indexed
337–360 of 503 · Most stars
Mock an SSH server and define all commands it supports (Python, Twisted)
Local-only browser fingerprint & identity rotation toolkit for authorized security testing. Tor/obfs4, coherent profiles, WebRTC/DNS leak protection.
- browser-privacy
- cli
- fingerprinting
- identity-rotation
TR-069 Honeypot
Writeups of Capture The Flag Competitions
- ctf
- picoctf
- writeups
- glug
High-Fidelity AI-Assisted Deterministic Reverse Engineering FastMCP Server
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
- exploit
- php
- php2shell
- php2shell-cve
A modular Python application to pull intelligence about malicious files
- malware-analysis
- malware-research
- investigation
- cybersecurity
Automated malware unpacker
Open-source agentic security operations platform:
- agentic-ai
- agentic-security
- agentic-workflow
- cyber-security
A CTF framework to create, build, deploy and monitor challenges
- ctf-tools
- ctf-framework
Simple framework to extract "actionable" data from Android malware (C&Cs, phone numbers etc.)
Swagger/YApi convert jmx tool.
- swagger-ui
- jmeter
- jmx
- convert
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
- cve-2026-109618
- cve-2026-109619
- exploit
- memory-corruption
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
- audit
- cognito
- cybersecurity
- scanner
Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
- crtsh
- cve
- cve-2026-109618
- cve-2026-109619
Words list generator to crack security tokens
Malware/IOC ingestion and processing engine
Mobile runtime detection workbench for AI (iOS and Android)
- frida
- reverse-engineering
- android-security-tools
- frida-gadget
Open Source Telnet Honeypot
This repository contains reverse engineering results and resources for a few specific car models of a very specific car manufacturer. Please don't sue.
- car-hacking
- automotive-security
Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.
- cybersecurity
- hacking
- iast
- dast
The NoSQL Honeypot Framework
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.