Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.
Repository Index
47,133 repositories indexed
25–43 of 43 · Most stars
ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.
- clamscan
- file-scanner
- virus-scan
- docker-compose
Tiny hashing module that uses the native crypto API in Node.js and the browser
An opinionated production-ready SQL-/Swagger-first RESTful JSON API written in Go, highly integrated with VSCode DevContainers by allaboutapps.
- golang-development
- vscode-devcontainers
- golang
- go
Catch risky npm dependency changes before they merge.
- dependency-analysis
- devsecops
- github-actions
- malware
ROPMEMU is a framework to analyze, dissect and decompile complex code-reuse attacks.
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
- cve-2026-109618
- cve-2026-109619
- exploit
- mod-php
Flash Development Tools
Federated Authentication with OAuth providers
SPARK 2014 re-implementation of the TweetNaCl crypto library
php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.
- cve
- hestiacp
- opencart
- php
Creates a readable stream producing cryptographically strong pseudo-random data using `crypto.randomBytes()`
- random-bytes
- random
- crypto
- pseudo-random-generator
:honey_pot: A simple and effective phpmyadmin honeypot
A simple low-interaction port monitoring honeypot.
End-to-end encryption for the browser and Node: a JavaScript library (npm: libves) with recoverable keys, post-quantum (ML-KEM) key exchange, and user-to-user sharing
- encryption-api
- webcrypto
- ecdh
- elliptic-curve-cryptography
Encrypted .env files with TOTP unsealing for production deploys. Cross-stack (Node + Java). Zero deps. Defends against npm supply-chain attacks.
- 2fa
- aes-gcm
- dotenv
- encryption
Detect the Shai Hulud 2.0 npm supply chain attack (796+ packages). Scans for malicious files, hashes, and compromised ecosystems. Fast, accurate scanner.
- cdn
- cve
- polyfill
- polyfill-io
A tool for excavating application code and npm packages from stand-alone Deno binaries
A session management middleware for ningle and clack applications.
- authentication
- clack
- lisp
- web-development