Repository Index

Stream encryption & decryption with libsodium and protobuf

• crypto
• cryptography
• protobuf
• libsodium

A free, public vulnerability feed: CVE, GHSA, OSV, CISA KEV and EPSS merged into one entry per vulnerability. RSS, JSON API and MCP. Docs and issues only.

• cisa-kev
• cve
• mcp
• osv

TranslatedCyclops is a browser with XSS detection capabilities

• security
• xss
• taint-tracking
• vulnerability

Mac browser for Mach-O binaries (macOS, iOS, watchOS, and tvOS)

• macos
• abi
• mach
• mach-o

A login service based on mobile phone number for Meteor

NTFUZZ: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis (IEEE S&P '21)

• fuzzer
• fuzzing
• kernel-fuzzer
• windows-kernel

Run basic functions from stripped binaries cross platform

Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.

• crtsh
• cve
• cve-2026-109618
• cve-2026-109619

An ActionScript 3 library for interfacing with OAuth 2.0 services.

Mobile runtime detection workbench for AI (iOS and Android)

• frida
• reverse-engineering
• android-security-tools
• frida-gadget

Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.

• cybersecurity
• hacking
• iast
• dast

Run arbitrary code by patching OAT files

• android
• android-app
• kotlin
• kotlin-android

The MPT (Mobile Pentest Toolkit) is a must-have solution for your android penetration testing workflow.

• android
• android-pentesting
• mobile
• mobile-pentest

The opposite of Ruler, provides blue teams with the ability to detect Ruler usage against Exchange.

• blue-team
• security-tools
• security-audit

TranslatedActionScript (AS3) library for processing binary data. This library contains MD5, SHA-1, SHA-2 ( SHA-224 and SHA-256 ), Base64, CRC32 algorithms, JSON encoder & decoder as well as PNG and JPEG encoders.

• actionscript
• jpeg
• png
• md5

Go client for the GeoServer REST API — workspaces, datastores, layers, styles, security, ACL, GeoWebCache, Importer, plus OWS GetCapabilities/Describe. Tested against GeoServer 2.27 LTS and 2.28 stable.

• geoserver
• gis
• mapping
• golang

A honeypot for the Log4Shell vulnerability (CVE-2021-44228).

Vulnerable Web applications Generator

• vulnerabilities
• docker
• python
• generator

Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.

eBPF Security Monitoring and Sandboxing Agent Based on Aya

• aya
• bpf
• ebpf
• security

Tool used for dumping memory from Android devices

Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise

• detection
• splunk
• bpfdoor
• vulnerability

A collection of authentication-related plugs

Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection

• docker-image
• executable-packing
• malware-packers
• research-platform