Repository Index

Incident Response Triage - Windows Evidence Collection for Forensic Analysis

php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.

• cve
• hestiacp
• opencart
• php

Sym is a command line utility and a Ruby API that makes it trivial to encrypt and decrypt sensitive data. Unlike many other existing encryption tools, sym focuses on usability and streamlined interface (CLI), with the goal of making encryption easy and transparent. The result? There is no excuse for keeping your application secrets unencrypted :)

A mysqldump anonymizer

• mysqldump
• anonymizer
• database-anonymizer
• rgpd

Security library for Vert.x: OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...

• java
• vertx
• security
• authentication

OmniAuth Oauth2 strategy for weibo.com.

Simple JWT Golang

• jwt
• golang
• authentication
• simple

Tools to make Plug, and Phoenix authentication simple and flexible.

A collection of hash functions, ciphers, tools, libraries, and materials related to cryptography & security. :closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key: (project was renamed, libchaos is main)

A LinkedIn OAuth2 strategy for OmniAuth.

Standardized multi-provider OAuth authentication

• oauth2
• omniauth
• multiauth
• crystal-lang

Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.

• crtsh
• cve
• cve-2026-109618
• cve-2026-109619

eBPF Information Flow Enforcement for AI Agent safety, security and effectiveness

• ebpf
• harness
• ifc
• policy-engine

Beacon Object File (BOF) to coerce machine account auth via IPP.

Open Source Telnet Honeypot

Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.

• cybersecurity
• hacking
• iast
• dast

Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.

• ai-agents
• authentication
• cli
• headless

DEPRECATED - Phoenix Authentication library that wraps Guardian for extra functionality

• elixir
• phoenix-framework
• guardian
• authentication

A honeypot for malware that propagates via USB storage devices

Run arbitrary code by patching OAT files

• android
• android-app
• kotlin
• kotlin-android

High-interaction Honeypot for PLCs and Industrial Control Systems

Authenticated encrypted API tokens (IETF XChaCha20-Poly1305 AEAD) for Golang

• golang
• tokens
• branca
• jwt

:evergreen_tree: Merkle Tree implementation in pure Elixir

• elixir
• merkle-tree

Authenticate users in your Symfony app via a single query parameter (e.g. email and newsletter links).