Extract the information needed from the Manifest.plist files to convert it to hashes compatible with hashcat
Repository Index
56,139 visible repositories in the index
313–336 of 452 · Most stars
Detect and log CVE-2019-19781 scan and exploitation attempts.
A LinkedIn OAuth2 strategy for OmniAuth.
Standardized multi-provider OAuth authentication
- oauth2
- omniauth
- multiauth
- crystal-lang
A process monitoring tool that tries to detect exploitation
NTFUZZ: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis (IEEE S&P '21)
- fuzzer
- fuzzing
- kernel-fuzzer
- windows-kernel
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
- cve-2026-109618
- cve-2026-109619
- exploit
- memory-corruption
Flexible OpenID Connect and OAuth 2.0 server-side implementation for modern ASP.NET projects
- authentication
- authorization
- identity-management
- oauth2
Read-only check for traces of the November 2026 NIKKE PC launcher compromise. Windows, Linux (Proton, Steam Deck) and macOS.
- iced
- incident-response
- indicators-of-compromise
- infostealer
Compute message digest for large files in Go
- go
- golang
- checksum
- message-digest
Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
- crtsh
- cve
- cve-2026-109618
- cve-2026-109619
An ActionScript 3 library for interfacing with OAuth 2.0 services.
TranslatedFush Vue MCP — Vue frontend reverse engineering + web security testing tool (Chrome extension + MCP server, 91 tools)
Deprecated repo for PANDA 1.0 – see PANDA 2.0 repository
Mobile runtime detection workbench for AI (iOS and Android)
- frida
- reverse-engineering
- android-security-tools
- frida-gadget
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
Reverse proxy with automatically obtains TLS certificates from Let's Encrypt
Web interface to explore Suricata EVE outputs
- attack-defense-ctf
- ctf
- network-monitor
- suricata
Authenticated encrypted API tokens (IETF XChaCha20-Poly1305 AEAD) for Golang
- golang
- tokens
- branca
- jwt
Library for working with OpenID Connect and implementing clients.
Simple hash algorithms in OCaml
- hash
- ocaml
- sha1
- sha256
TranslatedActionScript (AS3) library for processing binary data. This library contains MD5, SHA-1, SHA-2 ( SHA-224 and SHA-256 ), Base64, CRC32 algorithms, JSON encoder & decoder as well as PNG and JPEG encoders.
Go client for the GeoServer REST API — workspaces, datastores, layers, styles, security, ACL, GeoWebCache, Importer, plus OWS GetCapabilities/Describe. Tested against GeoServer 2.27 LTS and 2.28 stable.
- geoserver
- gis
- mapping
- golang
A honeypot for the Log4Shell vulnerability (CVE-2021-44228).