Repository Index

Wavestone's web interface for password cracking with hashcat

• pentest
• password

⚡️ SharePoint SDK for Go

• sharepoint
• sharepoint-online
• golang
• go

TranslatedPassword generation tool: flexible and scriptable password dictionary generator which can support brute-force, combination, complex rule mode etc...

• password-generator
• password-dictionaries
• wordlist-generator
• brute-force

A PoC that the USB port is an attack surface for a Mazda car's infotainment system and how Mazda hacks are made

Generate graphs and charts based on password cracking result

• cracking
• hashcat
• matplotlib
• password

Latest hashcat docker for CUDA, OpenCL, and POCL. Deployed on Vast.ai

• hashcat
• docker
• cuda
• opencl

Cross-platform, open-source shellbag parser

Deploy a Cloudflare Worker to sanely score users' new passwords with zxcvbn AND check for matches against haveibeenpwned's 10+ billion breached accounts

• haveibeenpwned
• cloudflare
• zxcvbn
• serverless

x86 emulation and shellcode detection

quick and dirty canbus h4xing framework

• automotive-security
• canbus
• car-hacking

Invoke-LiveResponse

• ir
• dfir
• winrm
• liveresponse

A docker based honeypot.

Hush is a runtime configuration loader for Elixir applications

• elixir
• aws
• hush
• secret-management

Validates passwords against PHP's password_hash function using PASSWORD_DEFAULT. Will rehash when needed, and will upgrade legacy passwords with the Upgrade decorator.

Highly modular & configurable hash & crypto library

• octavo
• crypto-library
• rust
• crypto

Spam Honeypot with Intelligent Virtual Analyzer

The VBCorLib framework brings many of the powerful .NET classes to VB6.

• collections
• hashing
• biginteger
• encoding

Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design

• exploit
• php
• php2shell
• php2shell-cve

Detect hidden files and text in images

• steganography
• ctf
• stego
• capture-the-flag

The fastest 128-bit and 256-bit hash, passes all tests, and under 140 source lines of code. API library and CLI tool in C++ and NodeJS/Wasm

• call-for-papers
• cryptanalysis
• cryptanalysis-tasks
• cryptography

php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.

• cve
• hestiacp
• opencart
• php

Local-only browser fingerprint & identity rotation toolkit for authorized security testing. Tor/obfs4, coherent profiles, WebRTC/DNS leak protection.

• browser-privacy
• cli
• fingerprinting
• identity-rotation

Stream encryption & decryption with libsodium and protobuf

• crypto
• cryptography
• protobuf
• libsodium

Hashcat wrapper to help automate the cracking process