Repository Index

Deep memory analysis for Windows processes — the tool that saves you hours of debugging

• analyzer
• binary-analysis
• delphi
• dissassembler

High-interaction MitM SSH honeypot

Hascat Rules Collection – Probably the largest collection of hashcat rule-files anywhere.

• hashcat
• hashcat-rules
• hashcat-rule
• password-cracking

Wavestone's web interface for password cracking with hashcat

• pentest
• password

Follow stolen crypto hop by hop across Bitcoin, Ethereum, TRON, BNB Chain and Solana. Labels where the money landed, keeps proof for every clue, writes the report.

• bitcoin
• blockchain
• crypto
• ethereum

TranslatedPassword generation tool: flexible and scriptable password dictionary generator which can support brute-force, combination, complex rule mode etc...

• password-generator
• password-dictionaries
• wordlist-generator
• brute-force

Generate graphs and charts based on password cracking result

• cracking
• hashcat
• matplotlib
• password

🗄EOS Tracker: Real time block explorer for EOS Blockchain

• eos
• blockchain
• tracker
• crypto

A tool for quantitative risk analysis of Android applications based on machine learning techniques

• android
• risk
• android-permissions
• quantitative-risk-analysis

:sunglasses:Package captcha provides an easy to use, unopinionated API for captcha generation

• golang
• captcha
• captcha-generator
• image-captcha

Cross-platform, open-source shellbag parser

Deploy a Cloudflare Worker to sanely score users' new passwords with zxcvbn AND check for matches against haveibeenpwned's 10+ billion breached accounts

• haveibeenpwned
• cloudflare
• zxcvbn
• serverless

unXOR will search a XORed file and try to guess the key using known-plaintext attacks.

Validates passwords against PHP's password_hash function using PASSWORD_DEFAULT. Will rehash when needed, and will upgrade legacy passwords with the Upgrade decorator.

Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.

• networking
• udp
• ipv6
• ipv4

The pattern matching swiss knife

Content discovery and fuzzing with HTTP/3 support (100k requests per second)

The VBCorLib framework brings many of the powerful .NET classes to VB6.

• collections
• hashing
• biginteger
• encoding

RSA public/private key encryption, private key signing and public key verification in Swift using the Swift Package Manager. Works on iOS, macOS, and Linux (work in progress).

• swift
• rsa-cryptography
• rsa-signature
• macos

Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design

• exploit
• php
• php2shell
• php2shell-cve

Scans SPF and DMARC records for issues that could allow email spoofing.

Elixir Plug library to enable SAML 2.0 SP SSO in Phoenix/Plug applications.

• saml2-sp-sso
• saml-assertion
• plug-pipeline

Security library for Vert.x: OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...

• java
• vertx
• security
• authentication

The fastest 128-bit and 256-bit hash, passes all tests, and under 140 source lines of code. API library and CLI tool in C++ and NodeJS/Wasm

• call-for-papers
• cryptanalysis
• cryptanalysis-tasks
• cryptography