Repository Index

Defanged Indicator of Compromise (IOC) Extractor.

• ioc
• indicators-of-compromise
• library
• ioc-extractor

bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.

• xss
• bxss
• security
• bugbounty

AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.

• ai
• attack-surface-management
• bbot
• cybersecurity

Malware exploits

Paaster is a secure and user-friendly pastebin application that prioritizes privacy and simplicity. With end-to-end encryption and paste history, Paaster ensures that your pasted code remains confidential and accessible.

• pastebin
• paaster
• e2ee
• paste

Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness

Catch risky npm dependency changes before they merge.

• dependency-analysis
• devsecops
• github-actions
• malware

Users Plugin for CakePHP

• cakephp
• users
• plugin
• registration

Samsung Tizen root

• embedded-linux
• firmware-analysis
• hardware-hacking
• mali-gpu

Django web application to store and manage vouchers, coupons, loyalty and gift cards digitally. Supports PWA, offline caching, expiry notifications, transaction histories, file uploads and OIDC SSO.

• coupons
• vouchers
• conventional-commits
• apprise

Using Intel's PIN tool to solve CTF problems

• ctf
• pin
• reverse-engineering
• instruction-counting

Security profiling for blackbox Android

A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.

• threat
• hunt
• red
• blue

Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js

• malware-samples
• wscript
• deobfuscation
• angler

A Linux packet crafting tool.

• packet-crafting
• networking
• hacking-tool
• intrusion-prevention

Built-in Panther detection rules and policies

• security
• python
• cybersecurity
• siem

Robust ABC (ActionScript Bytecode) [Dis-]Assembler

Easy permission definitions in Elixir apps!

MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.

• python
• mqtt
• mqtt-broker
• mqtt-client

Open PS5 firmware 14.10 research: Lua userland experiments, syscall and attack-surface analysis. Kernel read/write and a complete exploit are not demonstrated.

• ps5
• ps5-homebrew
• ps5-jailbreak
• ps5-tools

Mellivora is a CTF engine written in PHP

🔥 A fully open source audit logs service and embeddable UI easily deployed to your own Kubernetes cluster. Brought to you by replicated.com and boxyhq.com 🚀

• enterprise-software
• kubernetes
• audit-logs
• enterprise-ready

OpenDJ is an open-source LDAP directory server written in Java. It provides robust, scalable, and secure directory services for identity management, access control, and authentication in enterprise environments. OpenDJ supports LDAPv3 standard, replication, REST APIs, and high-performance

• ldap-server
• ldap
• opendj
• rest

Software licensing and registration using digital signatures and public cryptography 🪪

• licensing
• software-licensing
• software-license
• security