Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.
Repository Index
47,133 repositories indexed
241–264 of 715 · Most stars
TranslatedDeepSeek Harness integrated armor-breaking security analysis plugin: aggregating all domains of Android · Web · Native · Protocol · Malware · AI-Security (9 bundles + 1 preset)
in-toto is a framework to protect supply chain integrity.
- supply-chain
- security
- new-york-university
- secure-systems-lab
Simple yet powerful authorization / authentication client library for Python web applications.
- python
- authentication
- oauth2-client
- oauth-client
Limit access to your Laravel applications by using invite codes
- php
- laravel
- laravel-package
- doorman
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
Find exploit tool
- exploit-database
- python
- pentest-tool
- exploits
The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.
A collection of android Exploits and Hacks
Ultimate Javascript Object Signing and Encryption (JOSE), JSON Web Token (JWT) and Json Web Keys (JWK) Implementation for .NET and .NET Core
- jose
- jwt
- json
- jwa
cppcryptfs is an implementation of the gocryptfs encrypted overlay filesystem in C++ for Windows.
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
- golang
- http-server
- https-server
- ctf
OAuth 1 Client
Detect deauthentication frames using an ESP8266
Audit AI chat exports locally before sharing or migration. Find possible secrets, personal-data patterns, broken JSON/JSONL, SQLite issues, and scan gaps—without uploading the archive.
- chat-archive
- python
- secret-scanning
- sqlite
Ephemeral root via the CVE-2026-43284 page-cache exploit
Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)
A Simple Ransomware Vaccine
A friendly car security exploration tool for the CAN bus
- python
- can-bus
- security-scanner
- security-testing
Audited & minimal JS implementation of elliptic curve cryptography.
- crypto
- cryptography
- ecdsa
- ed25519
Nintendo Switch library manager, with automated management tasks, serving your library to multiple supported clients on your Switch, with shop customization and multi user authentication.
- tinfoil
- atmosphere
- homebrew
- switch
:camera: PictShare is an open source image, mp4, pastebin hosting service with a simple resizing and upload API that you can host yourself. :rice_scene:
- docker
- images
- selfhosted
- picture
Audited & minimal JS implementation of hash functions, MACs and KDFs.
Decrypt IPA's on MacOS