Non-custodial, encrypted file storage & sharing platform with Stellar payments and on-chain file notarization
- blockdag
- encryption
- file-storage
- freighter
Repository Index
63,269 visible repositories in the index
217–240 of 289 · Most stars
:sunglasses:Package captcha provides an easy to use, unopinionated API for captcha generation
- golang
- captcha
- captcha-generator
- image-captcha
GasPot originally released at Blackhat 2015 - Updated for the same stuff 2026
VirtualPhoneNumber: Contributed Virtual Number Generation Desktop Tool
- activator
- allhackingtools
- hacking-tool
- linux
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
- exploit
- php
- php2shell
- php2shell-cve
Minimal, consistent Python API for building integrations with malware sandboxes.
- sandbox
- malware-analysis
- api-client
- library
Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.
- networking
- udp
- ipv6
- ipv4
Sym is a command line utility and a Ruby API that makes it trivial to encrypt and decrypt sensitive data. Unlike many other existing encryption tools, sym focuses on usability and streamlined interface (CLI), with the goal of making encryption easy and transparent. The result? There is no excuse for keeping your application secrets unencrypted :)
UnTangled — the easy, modern web interface for OpenWRT. A friendly LuCI alternative: Network Map, Mesh Wi-Fi, parental controls, VPN, QoS. ~75 KB, offline-first, runs alongside LuCI.
- apk
- dashboard
- firewall
- home-network
php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.
- cve
- hestiacp
- opencart
- php
High-Fidelity AI-Assisted Deterministic Reverse Engineering FastMCP Server
An integrated security system for applications built on component
A collection of hash functions, ciphers, tools, libraries, and materials related to cryptography & security. :closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key: (project was renamed, libchaos is main)
Automated malware unpacker
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
- cve-2026-109618
- cve-2026-109619
- exploit
- memory-corruption
Flexible OpenID Connect and OAuth 2.0 server-side implementation for modern ASP.NET projects
- authentication
- authorization
- identity-management
- oauth2
Kustomize generator plugin that generates Secrets from sops-encrypted files
Deprecated repo for PANDA 1.0 – see PANDA 2.0 repository
Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.
- cybersecurity
- hacking
- iast
- dast
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
DEPRECATED - Phoenix Authentication library that wraps Guardian for extra functionality
- elixir
- phoenix-framework
- guardian
- authentication
Universal script packer-- transforms any type of script into a protected ELF executable, encrypted with anti-debugging.
A library designed to generate cryptographically strong random numbers suitable for managing data such as passwords, account authentication, security tokens, and related secrets.
Authenticated encrypted API tokens (IETF XChaCha20-Poly1305 AEAD) for Golang
- golang
- tokens
- branca
- jwt