47,133 repositories indexed
409–432 of 668 · Most stars
The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups
Universal web application security sensor intended for real-time monitoring and defense.
inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques
File Scanning Framework
ROPMEMU is a framework to analyze, dissect and decompile complex code-reuse attacks.
Inspektor is a protocol-aware proxy that is used to enforce access policies👮
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities
Middleware for adding security headers to an ASP.NET Core application.
A modular Python application to collect intelligence for malicious hosts.
We took PersistenceSniper, merged it with Python, and misspelled it on purpose. Meet PyrsistenceSniper.
Aggregates security advisories from 10 international CERTs daily and provides an AI skill that cross-references alerts against your project's tech stack.
Simple and secure hashing in Swift with the SipHash algorithm
Automated Tactics Techniques & Procedures
Autonomous OODA-loop pentesting agent. Hermes brain, Kali + Playwright tools over MCP, ATT&CK as the Orient language.
CMS/LMS/Library etc Versions Fingerprinter
An easy, fast lib to correctly password-protect your data
Sandia Cyber Omni Tracker (SCOT)
Create adversarial attacks against machine learning Windows malware detectors
:hammer: A multiple reverse shell session/client manager via terminal
A secure password manager for iOS and Android platforms
A small and easy-to-use one-time password generator library for Java implementing RFC 4226 (HOTP) and RFC 6238 (TOTP).
OpenId Connect client library in Erlang & Elixir
:elephant: :busts_in_silhouette: Manage PostgreSQL roles and privileges from YAML or LDAP