A modular Python application to pull intelligence about malicious files
- malware-analysis
- malware-research
- investigation
- cybersecurity
Repository Index
47,133 repositories indexed
433–456 of 625 · Most stars
Automated malware unpacker
The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX account.
Autonomous DFIR agent: point it at disk images, memory dumps or log exports and get back an investigation that shows its work. Volatility 3, Plaso, YARA and any OpenAI-compatible LLM.
A CTF framework to create, build, deploy and monitor challenges
- ctf-tools
- ctf-framework
Simple framework to extract "actionable" data from Android malware (C&Cs, phone numbers etc.)
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
- cve-2026-109618
- cve-2026-109619
- exploit
- memory-corruption
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
- audit
- cognito
- cybersecurity
- scanner
Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
- crtsh
- cve
- cve-2026-109618
- cve-2026-109619
Words list generator to crack security tokens
Git manager for pentesters
Process HTTP Pcaps With YARA
Malware/IOC ingestion and processing engine
Mobile runtime detection workbench for AI (iOS and Android)
- frida
- reverse-engineering
- android-security-tools
- frida-gadget
Open Source Telnet Honeypot
This repository contains reverse engineering results and resources for a few specific car models of a very specific car manufacturer. Please don't sue.
- car-hacking
- automotive-security
Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.
- cybersecurity
- hacking
- iast
- dast
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
The NoSQL Honeypot Framework
The repository host gives no description.
Searches various online resources to try and get as much info about an IP/domain as possible.
The MPT (Mobile Pentest Toolkit) is a must-have solution for your android penetration testing workflow.
A honeypot for the Log4Shell vulnerability (CVE-2021-44228).
Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.