Repository Index

Android Malware Sandbox

HAT (Hashcat Automation Tool) - An Automated Hashcat Tool for common wordlists and rules to speed up the process of cracking hashes during engagements. Created for Linux based systems

The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups

• active-directory
• cheatsheet
• ctf
• cybersecurity

Universal web application security sensor intended for real-time monitoring and defense.

inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques

• forensics
• hypervisor
• memory-dump
• reverse-engineering

Small portable Elliptic-Curve Diffie-Hellman in C

• elliptic-curve-diffie-hellman
• ecdh
• public-key-cryptography
• c

👤Minimalist Google OAuth Authentication for Elixir Apps. Tested, Documented & Maintained. Setup in 5 mins. 🚀

• elixir
• google
• google-api
• auth

A USB proxy based on raw-gadget and libusb

• usb
• proxy
• libusb
• otg

Automatically exported from code.google.com/p/creddump

ROPMEMU is a framework to analyze, dissect and decompile complex code-reuse attacks.

Inspektor is a protocol-aware proxy that is used to enforce access policies👮

• security
• openpolicyagent
• acl
• rust

The JavaScript Crypto Library provides web developers with an extensive and efficient set of cryptographic functions. The library aims to obtain maximum execution speed while preserving modularity and reusability. The library is released as open source under a BDS license.

A Rails 6 boilerplate to create your next Saas product. Preloaded with graphQL, devise, JWT, CanCanCan, RailsAdmin, Rubocop, Rspec, i18n and more.

• ruby-on-rails
• api-only
• rubyonrails
• saas-boilerplate

CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.

• cve-2026-109618
• cve-2026-109619
• exploit
• mod-php

Pakkero is a binary packer written in Go made for fun and educational purpose. Its main goal is to take in input a program file (elf binary, script, even appimage) and compress it, protect it from tampering and intrusion.

• launcher
• payload
• elf
• elf-binaries

Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities

• ebpf
• security
• linux-kernel
• linux-security-module

A Simple Linux ELF Runtime Crypter

Script for automating Linux memory capture and analysis

Advanced, but minimalistic Next.js and Apollo starter

• typescript
• react
• apollo
• testing-library

We took PersistenceSniper, merged it with Python, and misspelled it on purpose. Meet PyrsistenceSniper.

• cybersecurity
• cybersecurity-tools
• incident-response
• security

Hashing for Modern Object Pascal

• delphi
• fpc
• checksum
• stream

Who do websites think you are? A privacy self-check: every sniffer any site can run, the portrait they paint, and the contradictions that give away a VPN or proxy

• browser-fingerprinting
• cloudflare-workers
• dns-leak
• network-tools

Crypto for Modern Object Pascal

• ecdsa
• cryptography
• delphi
• fpc

The Multiplatform Linux Sandbox