Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.
Repository Index
70,234 visible repositories in the index
25–48 of 56 · Most stars
in-toto is a framework to protect supply chain integrity.
- supply-chain
- security
- new-york-university
- secure-systems-lab
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
TranslatedFull-Chain Sentinel (全链哨兵, "full-chain sentinel") is a cybersecurity Agent that integrates web penetration testing, Android app security testing, iOS app security testing, batch target probing for offensive and defensive operations, automated emergency response, and open-source vulnerability monitoring. It is used to assist with automating security service delivery. Use for illegal purposes is prohibited.
- agent
- blue-team
- cybersecurity
- cybersecurity-tools
Multi-chain crypto wallet risk scanner for AML/KYT screening. Scores addresses 0–100 using sanctions, risky contracts and fund tracing. Integrates 6 intelligence providers with failover, detects scams, hacks, mixers and phishing, supports 15+ chains, batch screening and TXT/JSON/CSV/HTML/PDF reports. Python, cross-platform.
- aml
- antimoneylaundering
- blockchain-intelligence
- blockchain-security-solutions
Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
- security-tools
- security
- attestation
- verification
Catch risky npm dependency changes before they merge.
- dependency-analysis
- devsecops
- github-actions
- malware
Docker Scout CLI
blockchain (crypto) tools, libraries & scripts in ruby
- blockchain
- cryptohash
- distributed-database
- proof-of-work
🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.
- padding-oracle
- aes
- decryption
- encryption
🗄EOS Tracker: Real time block explorer for EOS Blockchain
- eos
- blockchain
- tracker
- crypto
Plug-n-Play login system for iOS written in Swift
- swift
- login
- keychain
Non-custodial, encrypted file storage & sharing platform with Stellar payments and on-chain file notarization
- blockdag
- encryption
- file-storage
- freighter
Supply Chain Security Research - Living Off The Pipeline tools
- lotp
- supply-chain-security
- living-off-the-pipeline
preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.
A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.
- in-toto
- software-supply-chain
- security
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
- exploit
- php
- php2shell
- php2shell-cve
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
- cve-2026-109618
- cve-2026-109619
- exploit
- memory-corruption
Read-only check for traces of the November 2026 NIKKE PC launcher compromise. Windows, Linux (Proton, Steam Deck) and macOS.
- iced
- incident-response
- indicators-of-compromise
- infostealer
Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents
- claude-code
- cti
- llm
- rag
Find which of your direct GitHub dependencies is susceptible to RepoJacking attacks
- golang
- go
- supply-chain
- security
Markov-chains for linguistically-correct password cracking
Security training for the apps you actually ship. Open your browser and start hacking.
Phraser is a phrase generator using n-grams and Markov chains to generate phrases for passphrase cracking. The generated phraselists can be used as wordlists in your favourite password cracking application.