preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.
Repository Index
47,133 repositories indexed
337–360 of 489 · Most stars
quick and dirty canbus h4xing framework
- automotive-security
- canbus
- car-hacking
Tools for the Computer Incident Response Team :computer:
- dfir
- python
- carbonblack
- malware-analysis
Python implementation of the Packed Executable iDentifier (PEiD)
- peid
- peid-signature
- pe-file
- pe-files
A platform to develop, run and administer CTF competitions. This is the online echoCTF.RED platform source code
- ctf
- echoctf
- cybersecurity
- hacking
Generate Keyboard Walk Dictionaries for cracking
GasPot originally released at Blackhat 2015 - Updated for the same stuff 2026
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
unXOR will search a XORed file and try to guess the key using known-plaintext attacks.
NeuraVision — AI content generation platform (PHP backend engine: auth, credits, generation, analytics)
- ab-testing
- ai-platform
- analytics
- backend-api
Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.
- networking
- udp
- ipv6
- ipv4
RSA public/private key encryption, private key signing and public key verification in Swift using the Swift Package Manager. Works on iOS, macOS, and Linux (work in progress).
- swift
- rsa-cryptography
- rsa-signature
- macos
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
- exploit
- php
- php2shell
- php2shell-cve
php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.
- cve
- hestiacp
- opencart
- php
Open-source agentic security operations platform:
- agentic-security
- cyber-security
- cyber-threat-intelligence
- cybersecurity
BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)
Hashcat wrapper to help automate the cracking process
Scan your computer for applications that are either susceptible to dylib hijacking or have been hijacked.
Command line utility and Python package to ease the (un)mounting of forensic disk images
TranslatedCyclops is a browser with XSS detection capabilities
- security
- xss
- taint-tracking
- vulnerability
Extract the information needed from the Manifest.plist files to convert it to hashes compatible with hashcat
Automated malware unpacker
windows pe packing
Machine-learn password mangling rules