Repository Index

Predatory ESP32 Firmware

• bruce
• cardputer
• esp32-s3
• hardware

The user infrastructure platform. You choose the frontend, backend, and database. Hexclave handles everything else.

• authentication
• nextjs
• oauth
• auth0

↥ ↥ ↥ Follow for updates An RBAC permission management system based on Spring Cloud 2025, Spring Boot 4, and OAuth2.

• oauth2
• spring-boot
• spring-cloud
• spring-cloud-alibaba

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

• exploit
• 0day
• poc
• getshell

☁️ The Most Secure and Easy Selfhosted Home Server. Take control of your data and privacy without sacrificing security and stability (Authentication, anti-DDOS, anti-bot)

• authentication
• cloud
• cosmos
• reverse-proxy

TranslatedAn all-ages-friendly universal C# utility library, 码数吐司库 (Masuit Toast Library, "code number toast library"), containing commonly used operation classes, mostly static classes: encryption and decryption, reflection operations, weighted random selection algorithm, distributed short IDs, expression trees, LINQ extensions, file compression, multi-threaded downloading, hardware information, string extension methods, date and time extension operations, Chinese lunar calendar, large file copying, image cropping, captcha, resumable downloads, collection extensions, Excel export and other commonly used wrappers. Many features in one, with a code size of less than 2MB!

• lambda
• reflection
• datetime
• expression

An automated e-mail OSINT tool

• osint
• hacking
• email-checker
• social-media

🕵️‍♂️ (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a single Email/Username. Analyzes 2720+ actively maintained scan vectors (210+ email / 2510+ username) for security research, investigations, and digital footprinting.

• osint
• osint-tool
• python
• osint-tools

Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)

• authorization
• policy-as-code
• policy
• realtime

A small PHP library to generate YouTube-like ids from numbers. Use it when you don't want to expose your database ids to the user.

• php
• hashids
• database-ids
• php-library

Cairn is a general-purpose AI state-space search engine, validated first on autonomous penetration testing. Sometimes misspelled as Carin.

• ai
• ai-agent
• ai-cybersecurity
• ai-hacker

Free, open-source check for traces of mercenary spyware (Pegasus, Predator, Graphite, Candiru and more) on computers, Android phones and iPhone backups. Double-click apps for Windows, Mac and Linux, in 27 languages.

Volatility 3.0 development

• digital-investigation
• forensics
• incident-response
• malware

TranslatedWeChat 4.x database decryption and analysis, supporting real-time updates, export of chat records and Moments, and annual summaries.

Your web application for managing personal data.

• dashboard
• dashboards
• manager
• symfony

:busts_in_silhouette: A bash-tool to store your private data inside a git repository.

• git-secret
• git
• git-addons
• gpg

Hide secrets with invisible characters in plain text securely using passwords 🧙🏻‍♂️⭐

• cryptography
• steganography
• compression
• functional-programming

Database documentation built easy

• schemaspy
• java
• documentation
• database

Tool to find metadata and hidden information in the documents.

SIMD, SWAR & GPU kernels for strings: search, hashing, sorting, edit distances, UTF-8 segmentation & ciphers for C, C++, CUDA, Python, Rust, Go, Swift, JS, C# & Java 🦖

• simd
• dataset
• string
• string-manipulation

Automated NoSQL database enumeration and web application exploitation tool.

• nosql
• nosql-databases
• penetration-testing
• scanner

CAUTION: END OF SUPPORT ON 14 AUG 2026. The 'jsrsasign' (RSA-Sign JavaScript Library) is an opensource free cryptography library supporting RSA/RSAPSS/ECDSA/DSA signing/validation, ASN.1, PKCS#1/5/8 private/public key, X.509 certificate, CRL, OCSP, CMS SignedData, TimeStamp, CAdES and JSON Web Signature/Token in pure JavaScript.

• asn1
• x509
• certificate
• crl

The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.

• sleuthkit
• tct
• ntfs
• forensics

Safely pass trusted data to untrusted environments and back.

• python
• security
• hmac
• serialization