Repository Index

Package gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services 🔒

• csrf-protection
• gorilla
• middleware
• golang

PE Tools - Portable executable (PE) manipulation toolkit

• pefile
• hex-editor
• disassembler
• entropy

Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.

• digital-security
• forensics
• incident-response
• ioc

PHP library for Two Factor Authentication (TFA / 2FA)

• qrcode
• php
• two-factor
• twofactorauth

Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0

• android-unpacker
• gdb
• qemu
• reverse-engineering

A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis

• mobile-security
• android
• malware-analyzer
• penetration-testing

Malcom - Malware Communications Analyzer

• malware
• network-traffic
• pcap
• threat-intelligence

HellPot is a cross-platform portal to endless suffering meant to punish unruly HTTP bots.

• honeypot
• http
• web
• deception

A pure Python HTML5 parser that just works. No C extensions to compile. No system dependencies to install. No complex API to learn.

• html5
• parser
• python
• html

TranslatedA lightweight DDD forward/reverse business modeling framework that supports the architectural evolution of complex business systems!

• ddd
• extension
• ddd-architecture
• clean-architecture

An information security preparedness tool to do adversarial simulation.

• uber
• vagrant
• yaml
• celery

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

• cybersecurity
• threat
• ioc
• malware

An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction

• crypto
• cryptography
• encryption
• security

🕵️ Tool to reverse-engineer Protocol Buffers with unknown definition

• reverse-engineering
• protocol-buffers
• serialization

Laravel Ban simplify blocking and banning Eloquent models.

• laravel
• eloquent
• cog
• trait

Protect against malicious open source packages 🤖

• devsecops
• security
• supply-chain-security
• policy-as-code

A Rust implementation of the Noise Protocol Framework

• cryptography
• crypto
• noise-protocol-framework
• noise-protocol

SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.

• sip
• voip
• password-cracker
• svwar

Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.

Wordlist, rules and masks from Kaonashi project (RootedCON 2019)

• wordlist
• password
• password-strength
• password-safety

Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.

• cve-scanning
• pentesting-tools
• rust
• vulnerability-scanners

OpenID Certified™ OpenID Connect and FAPI 2 Relying Party module for Apache HTTPd

• apache-httpd
• openid-connect
• openidconnect-client
• openidc

A linux utility for generating 2FA codes for Steam and managing Steam trade, market, and other confirmations.

• steam
• steamguard-cli
• linux-utility
• sda

Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.