A PoC that the USB port is an attack surface for a Mazda car's infotainment system and how Mazda hacks are made
Repository Index
47,133 repositories indexed
217–240 of 344 · Most stars
Elixir Plug to easily add HTTP basic authentication to an app
Harden Your Security Headers For Vapor
- brokenhands
- swift
- vapor
- server-side-swift
A platform to develop, run and administer CTF competitions. This is the online echoCTF.RED platform source code
- ctf
- echoctf
- cybersecurity
- hacking
Scalable Binary Data Extraction in Hadoop
Hush is a runtime configuration loader for Elixir applications
- elixir
- aws
- hush
- secret-management
Validates passwords against PHP's password_hash function using PASSWORD_DEFAULT. Will rehash when needed, and will upgrade legacy passwords with the Upgrade decorator.
SPARK 2014 re-implementation of the TweetNaCl crypto library
A mysqldump anonymizer
- mysqldump
- anonymizer
- database-anonymizer
- rgpd
php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.
- cve
- hestiacp
- opencart
- php
Local-only browser fingerprint & identity rotation toolkit for authorized security testing. Tor/obfs4, coherent profiles, WebRTC/DNS leak protection.
- browser-privacy
- cli
- fingerprinting
- identity-rotation
Randomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.
A simple capture the flag framework.
A blade runner for your network. Detects shadow AI agents before they go rogue.
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
- cve-2026-109618
- cve-2026-109619
- exploit
- memory-corruption
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
- audit
- cognito
- cybersecurity
- scanner
Add a layer of active defense to your cloud applications.
- cybersecurity
- deception
- decoy
- honeytoken
Collection of ssl verification functions for Erlang
Mobile runtime detection workbench for AI (iOS and Android)
- frida
- reverse-engineering
- android-security-tools
- frida-gadget
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
Authenticated encrypted API tokens (IETF XChaCha20-Poly1305 AEAD) for Golang
- golang
- tokens
- branca
- jwt
A low-to-medium interaction SSH Honeypot with features to capture terminal activity and upload to asciinema.org
:evergreen_tree: Merkle Tree implementation in pure Elixir
- elixir
- merkle-tree
Python API Monitor for Android apps
- android
- frida
- api
- monitoring