preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.
Repository Index
72,862 visible repositories in the index
241–264 of 311 · Most stars
Deploy a Cloudflare Worker to sanely score users' new passwords with zxcvbn AND check for matches against haveibeenpwned's 10+ billion breached accounts
- haveibeenpwned
- cloudflare
- zxcvbn
- serverless
tr4mpass: Multi-path iOS exploitation framework for A5-A17 with checkm8/checkm9 and forensic gatheri
- a12-bypass
- activator
- bypassing
- checkm8
GasPot originally released at Blackhat 2015 - Updated for the same stuff 2026
Breaks Seewo Whiteboard 3's 15-day trial limit; a game enhancement tool by HuskeyDev.
- activate
- activator
- easinote
- seewo
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
A Python library and command line tools to provide interactive log visualization.
- cybersecurity
- investigation
- malware-analysis
- malware-research
Scalable Binary Data Extraction in Hadoop
An Elixir implementation of the JSON Web Token (JWT) Standard, RFC 7519
Validates passwords against PHP's password_hash function using PASSWORD_DEFAULT. Will rehash when needed, and will upgrade legacy passwords with the Upgrade decorator.
Detect hidden files and text in images
- steganography
- ctf
- stego
- capture-the-flag
BLA blinds your agent. LASIK gives it its sight back. Static de-blinding CLI + MCP server that undoes BLA (Blind LLM Agents) hardening so coding agents and REA can read the real code again. Never executes the target.
- ai-agents
- anti-bla
- bla
- claude-code
[INACTIVE] TLS 1.2 implementation in Rust
Autonomous DFIR agent: point it at disk images, memory dumps or log exports and get back an investigation that shows its work. Volatility 3, Plaso, YARA and any OpenAI-compatible LLM.
acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.
A modular Python application to pull intelligence about malicious files
- malware-analysis
- malware-research
- investigation
- cybersecurity
Go session management for web servers (including support for Google App Engine - GAE).
- gae
- http-session
- session-management
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
- cve-2026-109618
- cve-2026-109619
- exploit
- memory-corruption
Mobile runtime detection workbench for AI (iOS and Android)
- frida
- reverse-engineering
- android-security-tools
- frida-gadget
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
A honeypot for malware that propagates via USB storage devices
The opposite of Ruler, provides blue teams with the ability to detect Ruler usage against Exchange.
Go client for the GeoServer REST API — workspaces, datastores, layers, styles, security, ACL, GeoWebCache, Importer, plus OWS GetCapabilities/Describe. Tested against GeoServer 2.27 LTS and 2.28 stable.
- geoserver
- gis
- mapping
- golang
OPNSense's Suricata IDS/IPS Detection Rules Against NMAP Scans
- crowdsec
- intrusion-detection
- intrusion-detection-system
- intrusion-prevention