Repository Index

Reverse engineering tool for virtualization wrappers

A Python library and command line tools to provide interactive log visualization.

• cybersecurity
• investigation
• malware-analysis
• malware-research

Content discovery and fuzzing with HTTP/3 support (100k requests per second)

Spam Honeypot with Intelligent Virtual Analyzer

Haskell oauth2 binding

• oauth2
• oauth2-client
• haskell
• identity

Security library for Vert.x: OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...

• java
• vertx
• security
• authentication

A mysqldump anonymizer

• mysqldump
• anonymizer
• database-anonymizer
• rgpd

CakePHP TinyAuth plugin for an easy and fast user authentication and authorization. Single or multi role. DB or config file based.

• cakephp-plugin
• acl
• multi-role
• php

Ziti SDK for Golang

• golang
• networking
• sdk
• zero-trust

Local-only browser fingerprint & identity rotation toolkit for authorized security testing. Tor/obfs4, coherent profiles, WebRTC/DNS leak protection.

• browser-privacy
• cli
• fingerprinting
• identity-rotation

BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)

• malware-analysis
• reverse-engineering
• debugger
• malware

A free, public vulnerability feed: CVE, GHSA, OSV, CISA KEV and EPSS merged into one entry per vulnerability. RSS, JSON API and MCP. Docs and issues only.

• cisa-kev
• cve
• mcp
• osv

[INACTIVE] TLS 1.2 implementation in Rust

Writeups of Capture The Flag Competitions

• ctf
• picoctf
• writeups
• glug

A collection of hash functions, ciphers, tools, libraries, and materials related to cryptography & security. :closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key: (project was renamed, libchaos is main)

windows pe packing

Go session management for web servers (including support for Google App Engine - GAE).

• gae
• http-session
• session-management

Standardized multi-provider OAuth authentication

• oauth2
• omniauth
• multiauth
• crystal-lang

Simple framework to extract "actionable" data from Android malware (C&Cs, phone numbers etc.)

Flexible OpenID Connect and OAuth 2.0 server-side implementation for modern ASP.NET projects

• authentication
• authorization
• identity-management
• oauth2

NTFUZZ: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis (IEEE S&P '21)

• fuzzer
• fuzzing
• kernel-fuzzer
• windows-kernel

Kustomize generator plugin that generates Secrets from sops-encrypted files

TranslatedAn AI multi-agent security testing platform for authorized security testing and local research.

Words list generator to crack security tokens