Repository Index

A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.

• in-toto
• software-supply-chain
• security

ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits

• linux
• security
• kernel
• rootkit

unXOR will search a XORed file and try to guess the key using known-plaintext attacks.

Validates passwords against PHP's password_hash function using PASSWORD_DEFAULT. Will rehash when needed, and will upgrade legacy passwords with the Upgrade decorator.

NeuraVision — AI content generation platform (PHP backend engine: auth, credits, generation, analytics)

• ab-testing
• ai-platform
• analytics
• backend-api

Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design

• exploit
• php
• php2shell
• php2shell-cve

Scans SPF and DMARC records for issues that could allow email spoofing.

The fastest 128-bit and 256-bit hash, passes all tests, and under 140 source lines of code. API library and CLI tool in C++ and NodeJS/Wasm

• call-for-papers
• cryptanalysis
• cryptanalysis-tasks
• cryptography

The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.

• ai-agents
• bug-bounty
• electron
• offensive-security

Straightforward HTTP session management

• session-management
• session
• http
• golang

Open-source agentic security operations platform:

• agentic-security
• cyber-security
• cyber-threat-intelligence
• cybersecurity

A blade runner for your network. Detects shadow AI agents before they go rogue.

TranslatedCyclops is a browser with XSS detection capabilities

• security
• xss
• taint-tracking
• vulnerability

High-Fidelity AI-Assisted Deterministic Reverse Engineering FastMCP Server

A flexible playground for Android CTF challenges.

• android
• ctf
• cybersecurity
• playground

acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.

A collection of hash functions, ciphers, tools, libraries, and materials related to cryptography & security. :closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key: (project was renamed, libchaos is main)

PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12

• cve-2026-109618
• cve-2026-109619
• exploit
• memory-corruption

NTFUZZ: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis (IEEE S&P '21)

• fuzzer
• fuzzing
• kernel-fuzzer
• windows-kernel

TranslatedFush Vue MCP — Vue frontend reverse engineering + web security testing tool (Chrome extension + MCP server, 91 tools)

• ai-agents
• anti-debug
• chrome-extension
• mcp

Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.

• crtsh
• cve
• cve-2026-109618
• cve-2026-109619

TranslatedAn AI multi-agent security testing platform for authorized security testing and local research.

eBPF Information Flow Enforcement for AI Agent safety, security and effectiveness

• ebpf
• harness
• ifc
• policy-engine

The repository host gives no description.