Repository Index

An opinionated production-ready SQL-/Swagger-first RESTful JSON API written in Go, highly integrated with VSCode DevContainers by allaboutapps.

• golang-development
• vscode-devcontainers
• golang
• go

CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.

• cve-2026-109618
• cve-2026-109619
• exploit
• mod-php

Aggregates security advisories from 10 international CERTs daily and provides an AI skill that cross-references alerts against your project's tech stack.

• cve
• security
• security-alerts
• vulnerability

:elephant: :busts_in_silhouette: Manage PostgreSQL roles and privileges from YAML or LDAP

• ldap
• postgresql
• yaml
• roles

"Evolving AppCompat/AmCache data analysis beyond grep"

Encrypted Chat. No History. No Logs.

• encryption
• nacl
• chat
• secure

PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE

Suricata rules for network anomaly detection

• suricata-rule
• suricata
• ids
• nsm

hackers-grep is a utility to search for strings in PE executables including imports, exports, and debug symbols

Invoke-LiveResponse

• ir
• dfir
• winrm
• liveresponse

Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.

• networking
• udp
• ipv6
• ipv4

RSA public/private key encryption, private key signing and public key verification in Swift using the Swift Package Manager. Works on iOS, macOS, and Linux (work in progress).

• swift
• rsa-cryptography
• rsa-signature
• macos

php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.

• cve
• hestiacp
• opencart
• php

PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12

• cve-2026-109618
• cve-2026-109619
• exploit
• memory-corruption

:evergreen_tree: Merkle Tree implementation in pure Elixir

• elixir
• merkle-tree

🪓 High-Speed Log Analysis & Forensics Tool - Part of NullSec Toolkit

• c
• forensics
• log-analysis
• security

🚀 Production-ready AI-friendly Go REST API boilerplate with Clean Architecture, JWT auth, RBAC, PostgreSQL migrations, and highly tested. AI-optimized with built-in guidelines for most used IDEs. Docker hot-reload, Swagger docs, one-command setup. Build production APIs in minutes, not weeks.

• api
• api-documentation
• authentication
• backend

HoneyHTTPD is a Python-based web server honeypot/service imitation builder. Great for honeypots or faking HTTP services.

• python
• honeypot
• honeypot-http
• python-web

Pure Common Lisp TLS 1.3 implementation

Data policy IN, dynamic view OUT: PACE is the Policy As Code Engine. It helps you to programatically create and apply a data policy to a processing platform like Databricks, Snowflake or BigQuery (or plain 'ol Postgres, even!) with definitions imported from Collibra, Datahub, ODD and the like.

• data-catalog
• data-processing
• policy-enforcement
• bigquery

Quantum-resistent asymmetric key generation tool for digital signatures.

• post-quantum-cryptography
• uov
• rainbow-scheme
• security-tools

Low-interaction Postgres Honeypot

medium interaction postgresql honeypot

Kippo configured to be a backdoored netscreen