CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
- cve-2026-109618
- cve-2026-109619
- exploit
- mod-php
Repository Index
47,133 repositories indexed
409–432 of 640 · Most stars
Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities
- ebpf
- security
- linux-kernel
- linux-security-module
Middleware for adding security headers to an ASP.NET Core application.
A modular Python application to collect intelligence for malicious hosts.
- cybersecurity
- investigation
We took PersistenceSniper, merged it with Python, and misspelled it on purpose. Meet PyrsistenceSniper.
- cybersecurity
- cybersecurity-tools
- incident-response
- security
Fail-closed swarm orchestration with epoch-fenced work and late-completion rejection.
- agent-orchestration
- ai-agents
- fail-closed
- fencing-token
Aggregates security advisories from 10 international CERTs daily and provides an AI skill that cross-references alerts against your project's tech stack.
- cve
- security
- security-alerts
- vulnerability
Simple and secure hashing in Swift with the SipHash algorithm
Automated Tactics Techniques & Procedures
- empire
- tactics
- procedure
- cybersecurity
Autonomous OODA-loop pentesting agent. Hermes brain, Kali + Playwright tools over MCP, ATT&CK as the Orient language.
- ai-agents
- autonomous-agents
- kali-linux
- llm-agents
CMS/LMS/Library etc Versions Fingerprinter
- fingerprinting
- cms
- security-tools
Sandia Cyber Omni Tracker (SCOT)
- perl
- javascript
- cyber-security
- incident-response
Create adversarial attacks against machine learning Windows malware detectors
- adversarial-machine-learning
- infosec
- python
- attack
:hammer: A multiple reverse shell session/client manager via terminal
- socket
- python
- ctf
- attack-defense
A secure password manager for iOS and Android platforms
A small and easy-to-use one-time password generator library for Java implementing RFC 4226 (HOTP) and RFC 6238 (TOTP).
- java
- otp
- totp
- hotp
OpenId Connect client library in Erlang & Elixir
- client
- elixir
- erlang
- openid
:elephant: :busts_in_silhouette: Manage PostgreSQL roles and privileges from YAML or LDAP
- ldap
- postgresql
- yaml
- roles
Collecting & Hunting for IOCs with gusto and style
- threat
- hunting
- ioc
- security-tools
PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡
- proxy
- tcp
- tcp-proxy
- penetration-testing
He who flays the hide
Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
- anti-bot
- behavioral-analysis
- bot-detection
- captcha
Django application that performs SAST and Malware Analysis for Android APKs
- android-security
- sast
- malware-analysis
- code-security
macOS persistence tool
- persistence
- macos