Read-only check for traces of the November 2026 NIKKE PC launcher compromise. Windows, Linux (Proton, Steam Deck) and macOS.
- iced
- incident-response
- indicators-of-compromise
- infostealer
Repository Index
61,275 visible repositories in the index
337–360 of 426 · Most stars
Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
- crtsh
- cve
- cve-2026-109618
- cve-2026-109619
An ActionScript 3 library for interfacing with OAuth 2.0 services.
A library of cryptographic primitives (ciphers, hashes, etc) for OCaml
Beacon Object File (BOF) to coerce machine account auth via IPP.
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
A honeypot for malware that propagates via USB storage devices
Run arbitrary code by patching OAT files
- android
- android-app
- kotlin
- kotlin-android
A low-to-medium interaction SSH Honeypot with features to capture terminal activity and upload to asciinema.org
🦅 EACL: Enterprise Access ControL is a ReBAC Authorization library inspired by SpiceDB, built in Clojure and backed by Datomic Pro, Datahike, Datalevin or DataScript.
- access-control
- clojure
- datalog
- authorization
The opposite of Ruler, provides blue teams with the ability to detect Ruler usage against Exchange.
Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.
The current repository contains all the scripts needed to build kernel-mode mac-a-mal malicious activity hooking on macOS.
This project is obsolete is no longer developed, maintained or serviced!
Authenticate users in your Symfony app via a single query parameter (e.g. email and newsletter links).
🔑 NaCl.Core, a cryptography library for .NET
- dotnet
- netstandard
- dotnet-core
- chacha20-poly1305
A set of Maltego transforms for VirusTotal Public API v2.0. This set has the added functionality of caching queries on a daily basis to speed up resolutions.
AI-powered platform for OSINT intelligence analysis. Features archive discovery with hypothesis-driven investigation, GLiNER entity extraction, Mapbox geospatial visualization, network analysis, and document processing. Built with FastAPI, Next.js, Weaviate, and DSPy.
- ai-agents
- document-processing
- dspy
- entity-extraction
Package passwap provides a unified implementation between different password hashing algorithms. It allows for easy swapping between algorithms, using the same API for all of them.
- argon2
- bcrypt
- go
- hashing
Simplified CA and device cert manager for strongSwan VPN
Tool used for dumping memory from Android devices
provides a full user authentication experience for an API. Includes login,logout,register,forgot password, forgot username, confirmation email and all that other good stuff. Includes plug for checking for authenticated users and macro for generating the required routes.
A full-featured Swift library for JOSE standards with first-class support for CryptoKit keys, providing JWS, JWT, SD-JWT, and JWE with signing, encryption, and JWK key management.
- jsonwebtoken
- jws
- jwt
- json-web-key
EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.