Repository Index

A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public

• hacking-tools
• bash
• git-dumper
• pentesting

HIBA is a system built on top of regular OpenSSH certificate-based authentication that allows to manage flexible authorization of principals on pools of target hosts without the need to push customized authorized_users files periodically.

• ssh
• authorization

Auditable & minimal JS implementation of public-key post-quantum cryptography

• dilithium
• kyber
• ml-kem
• post-quantum-cryptography

🗜️ A packer for Windows x86 executable files written in C and Intel x86 Assembly. The new file after packing can obstruct reverse engineering（使用C和Intel x86汇编开发的Windows x86可执行文件打包工具，打包后的新文件可以阻碍逆向工程）

• windows
• reverse-engineering
• security
• pe

.NET client for the Auth0 Authentication & Management APIs.

• oauth2
• openid-connect
• dx-sdk

Set of tools for security testing of Internet of Things devices using specific network IoT protocols

Simple promise-based session middleware for Next.js, micro, Express, and more

• javascript
• middleware
• session
• promise

Operational information regarding the 2026 php2shell vulnerabilities

Steam (OpenID) authentication strategy for Passport and Node.js.

• steam
• openid
• passport
• node

Astral-PE is a low-level mutator (Headers/EP obfuscator) for native Windows PE files (x32/x64)

• cybersecurity
• hacktoberfest
• low-level
• mutator

Don't Roll Your Own Crypto: fast, type-safe, pure-Rust cryptography with post-quantum support

• libsodium
• crypto
• rust
• cryptography

Scope-based authorization for Ruby on Rails.

• authorization
• rails

Django registration and authentication with GraphQL.

• django
• graphql
• graphene
• python

Various wordlists FR & EN - Cracking French passwords

• wordlists
• hashcat
• french
• cracking-hashes

Hashcat web interface

• hashcat
• cracking
• analytics
• pentesting

🔐 Library for developing secure, decentralized, anonymous and quantum-resistant networks in Go language

• network
• anonymity
• golang
• library

Elixir package for Oauth authentication via Google Cloud APIs

• gcp
• google
• authentication
• google-cloud-platform

Automated client-side template injection (sandbox escape/bypass) detection for AngularJS v1.x.

• angularjs
• xss
• xss-scanners
• exploit

A production-ready SaaS template built with Next.js 15, Supabase, and Tailwind CSS. Includes authentication, user management, file storage, task management demos, and secure RLS policies. Now with a complete React Native + Expo mobile app template! Easily customizable with pre-built themes, i18n support (EN/PL/ZH), and legal documents.

• nextjs
• react
• sass
• supabase

The universe in numbers. Free, open-source calculators for everything countable.

• astro
• bun
• calculator
• calculators

Python telnet honeypot for catching botnet binaries

• honeypot
• telnet-server
• malware
• botnet

HAT (Hashcat Automation Tool) - An Automated Hashcat Tool for common wordlists and rules to speed up the process of cracking hashes during engagements. Created for Linux based systems

The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups

• active-directory
• cheatsheet
• ctf
• cybersecurity

🚀AutoRuns is a PowerShell module that will help do live incident response and enumerate autoruns artifacts that may be used by legitimate programs as well as malware to achieve persistence.