quick and dirty canbus h4xing framework
- automotive-security
- canbus
- car-hacking
Repository Index
47,133 repositories indexed
193–216 of 257 · Most stars
Spot vulnerabilities in postgres SQL scripts
- postgresql
- security
- python
Autonomous desktop intelligence with MCU Ultron persona, mood-aware workspace orchestration, cyber security sentry, and full PC control.
- aegnts
- ai
- jarvis
- jarvis-ai
Security linter for AI-generated code: catches the exact vulnerabilities Copilot, Cursor and ChatGPT repeatedly produce. SQL injection, hardcoded secrets, JWT bypass, command injection and 15+ more rules. Grade A–F. Zero config. CI/CD ready.
Mock an SSH server and define all commands it supports (Python, Twisted)
Local-only browser fingerprint & identity rotation toolkit for authorized security testing. Tor/obfs4, coherent profiles, WebRTC/DNS leak protection.
- browser-privacy
- cli
- fingerprinting
- identity-rotation
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
- exploit
- php
- php2shell
- php2shell-cve
A modular Python application to pull intelligence about malicious files
- malware-analysis
- malware-research
- investigation
- cybersecurity
Open-source agentic security operations platform:
- agentic-ai
- agentic-security
- agentic-workflow
- cyber-security
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
- cve-2026-109618
- cve-2026-109619
- exploit
- memory-corruption
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
- audit
- cognito
- cybersecurity
- scanner
Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
- crtsh
- cve
- cve-2026-109618
- cve-2026-109619
Words list generator to crack security tokens
Security-hardened MCP server for Docker with read-only defaults, restart deny-lists, and secret redaction
Mobile runtime detection workbench for AI (iOS and Android)
- frida
- reverse-engineering
- android-security-tools
- frida-gadget
This repository contains reverse engineering results and resources for a few specific car models of a very specific car manufacturer. Please don't sue.
- car-hacking
- automotive-security
Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.
- cybersecurity
- hacking
- iast
- dast
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
Dependency Combobulator
- security
- secure-coding
- sdlc
- dependency-confusion
Potiron - Normalize, Index and Visualize Network Capture
- tshark
- network-capture
- graph
- pcap
A docker container to simplify and secure the use of Infrastructure as Code (IaC)
Framework agnostic set of sqlalchemy classes that make building applications that require permissions an easy task.
- python
- pyramid
- flask
- sqlalchemy
Security and Hacking Tools, Exploits, Proof of Concepts, Shellcodes, Scripts.
Open standard for Provenance & Intent Contracts (PIC) in AI agents. Verify intent, provenance, and evidence before high-impact tool calls.
- action-proposals
- agentic-ai
- agents
- ai