Repository Index

A production-ready SaaS template built with Next.js 15, Supabase, and Tailwind CSS. Includes authentication, user management, file storage, task management demos, and secure RLS policies. Now with a complete React Native + Expo mobile app template! Easily customizable with pre-built themes, i18n support (EN/PL/ZH), and legal documents.

• nextjs
• react
• sass
• supabase

HAT (Hashcat Automation Tool) - An Automated Hashcat Tool for common wordlists and rules to speed up the process of cracking hashes during engagements. Created for Linux based systems

Enable root SSH on BMW MGU head units (iDrive 7 / ID8 BDC3 / ID8 BCP) over ENET - flash the debug image, enroll, persistent SSH with no B7F8E5 DTC, and a unique per-car key.

• developer-mode
• idrive
• idrive7
• root

A collection of useful utility functions

• utility
• utilities
• string
• strings

inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques

• forensics
• hypervisor
• memory-dump
• reverse-engineering

:key: Idiotproof golang password validation library inspired by Python's passlib

Cryptographic library for Embarcadero Delphi and potentially for FPC as well

• delphi
• key-deviation-algorithms
• cryptographic-checksums
• kdf1

ROPMEMU is a framework to analyze, dissect and decompile complex code-reuse attacks.

Inspektor is a protocol-aware proxy that is used to enforce access policies👮

• security
• openpolicyagent
• acl
• rust

CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.

• cve-2026-109618
• cve-2026-109619
• exploit
• mod-php

Pakkero is a binary packer written in Go made for fun and educational purpose. Its main goal is to take in input a program file (elf binary, script, even appimage) and compress it, protect it from tampering and intrusion.

• launcher
• payload
• elf
• elf-binaries

We took PersistenceSniper, merged it with Python, and misspelled it on purpose. Meet PyrsistenceSniper.

• cybersecurity
• cybersecurity-tools
• incident-response
• security

Hashing for Modern Object Pascal

• delphi
• fpc
• checksum
• stream

🍍Jeff provides the simplest way to manage web sessions in Go.

• golang
• sessions
• http
• session-management

Aggregates security advisories from 10 international CERTs daily and provides an AI skill that cross-references alerts against your project's tech stack.

• cve
• security
• security-alerts
• vulnerability

Things we learned from Capture The Flag hacking competitions we participated in.

• hacking-competitions
• ctf-writeups
• ctf
• challenges

This is quick session for net/http in golang. This package is perhaps the best implementation of the session mechanism, at least it tries to become one.

• go
• golang
• session

An easy, fast lib to correctly password-protect your data

• secrets
• passwords
• encryption
• keys

Small set of tools for helping with reverse engineering Linux drivers

:hammer: A multiple reverse shell session/client manager via terminal

• socket
• python
• ctf
• attack-defense

A secure password manager for iOS and Android platforms

A small and easy-to-use one-time password generator library for Java implementing RFC 4226 (HOTP) and RFC 6238 (TOTP).

• java
• otp
• totp
• hotp

POT is an Erlang library for generating Google Authenticator compatible one time passwords

• erlang
• 2fa
• authenticator
• elixir

Code for cracking passwords with neural networks