A modular Python application to pull intelligence about malicious files
- malware-analysis
- malware-research
- investigation
- cybersecurity
Repository Index
47,133 repositories indexed
361–384 of 533 · Most stars
Automated malware unpacker
Open-source agentic security operations platform:
- agentic-ai
- agentic-security
- agentic-workflow
- cyber-security
A CTF framework to create, build, deploy and monitor challenges
- ctf-tools
- ctf-framework
Simple framework to extract "actionable" data from Android malware (C&Cs, phone numbers etc.)
Swagger/YApi convert jmx tool.
- swagger-ui
- jmeter
- jmx
- convert
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
- cve-2026-109618
- cve-2026-109619
- exploit
- memory-corruption
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
- audit
- cognito
- cybersecurity
- scanner
Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
- crtsh
- cve
- cve-2026-109618
- cve-2026-109619
Words list generator to crack security tokens
Malware/IOC ingestion and processing engine
Mobile runtime detection workbench for AI (iOS and Android)
- frida
- reverse-engineering
- android-security-tools
- frida-gadget
Open Source Telnet Honeypot
This repository contains reverse engineering results and resources for a few specific car models of a very specific car manufacturer. Please don't sue.
- car-hacking
- automotive-security
Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.
- cybersecurity
- hacking
- iast
- dast
The NoSQL Honeypot Framework
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
The MPT (Mobile Pentest Toolkit) is a must-have solution for your android penetration testing workflow.
2 Factor Authentication for Wagtail
Code for our DLS'21 paper - BODMAS: An Open Dataset for Learning based Temporal Analysis of PE Malware. BODMAS is short for Blue Hexagon Open Dataset for Malware AnalysiS.
- malware
- pe-malware
- malware-dataset
- malware-research
Dependency Combobulator
- security
- secure-coding
- sdlc
- dependency-confusion
The ScrambleSuit traffic obfuscation protocol.
- censorship-circumvention
- python
- tor
- encryption
Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.
A honeypot for the Log4Shell vulnerability (CVE-2021-44228).