Repository Index

A login service based on mobile phone number for Meteor

Authentication plugin for CakePHP. Can also be used in PSR7 based applications.

• php
• cakephp
• cakephp-plugin
• authentication

Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.

• crtsh
• cve
• cve-2026-109618
• cve-2026-109619

This repository contains reverse engineering results and resources for a few specific car models of a very specific car manufacturer. Please don't sue.

• car-hacking
• automotive-security

Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.

• cybersecurity
• hacking
• iast
• dast

Rule based authorization for Elixir

TranslatedActionScript (AS3) library for processing binary data. This library contains MD5, SHA-1, SHA-2 ( SHA-224 and SHA-256 ), Base64, CRC32 algorithms, JSON encoder & decoder as well as PNG and JPEG encoders.

• actionscript
• jpeg
• png
• md5

Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.

Digital Forensics Artifacts Knowledge Base

SSH, FTP and Telnet honeypots based on Twisted

• honeypot
• python
• twisted
• ssh

Quick ORM RestServer and RestClient based on mORMot framework

• orm
• mormot
• restserver
• restclient

Middleware based authorization for Absinthe GraphQL powered by Bodyguard

analyze a web-based network traffic 🕶 to detect central command and control servers

• squid
• network-traffic
• proxy-server
• incident-response

eBPF Security Monitoring and Sandboxing Agent Based on Aya

• aya
• bpf
• ebpf
• security

AI-powered platform for OSINT intelligence analysis. Features archive discovery with hypothesis-driven investigation, GLiNER entity extraction, Mapbox geospatial visualization, network analysis, and document processing. Built with FastAPI, Next.js, Weaviate, and DSPy.

• ai-agents
• document-processing
• dspy
• entity-extraction

Time-Based One-Time Password (TOTP) and HMAC-Based One-Time Password (HOTP) library for Go.

• hotp
• totp
• totp-codes
• authenticator

Struts Apache 2 based honeypot as well as a detection module for Apache 2 servers

🚀 Production-ready AI-friendly Go REST API boilerplate with Clean Architecture, JWT auth, RBAC, PostgreSQL migrations, and highly tested. AI-optimized with built-in guidelines for most used IDEs. Docker hot-reload, Swagger docs, one-command setup. Build production APIs in minutes, not weeks.

• api
• api-documentation
• authentication
• backend

Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection

• docker-image
• executable-packing
• malware-packers
• research-platform

A basic flask based Outlook Web Honey pot

• owa
• honeypot

NullKia Mobile Security Framework - Tools in Nim, Crystal, V, D, Red, Odin, Haxe, Zig, Kotlin, Lua, PHP, Python | bad-antics | github.com/bad-antics

• android-hacking
• baseband
• bootloader-unlock
• checkm8

Secure diceware passphrase generator

• electron
• electron-app
• desktop-application
• desktop

NTP, DNS, SSDP, Chargen and generic UDP-based amplification DDoS honeypot

Markov-chains for linguistically-correct password cracking