High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)
Repository Index
47,133 repositories indexed
25–48 of 84 · Most stars
Agent-first reverse engineering for macOS, Windows and Linux: any ACP agent reads, renames and patches binaries, Android apps and GPU kernels next to you.
Ephemeral root via the CVE-2026-43284 page-cache exploit
Decrypt IPA's on MacOS
ScopeWeaver: English and Korean localization of ARTEX, with preserved AGPL-3.0 attribution.
Autonomous pentest legion — AI commander + worker swarm + layered fact-intent graph. 3rd Tencent Intelligent Attack-Defense online champion (634 teams · 8h unattended · 1B tokens beat 4.5B). The Nüwa Test: give AIs Create/Language/History, let a civilization grow.
A KeePass-compatible password and secrets manager for people who work with AI agents.
TranslatedREA: Reverse Everything. Through one MCP service, reverse-engineer and analyze binary files, applications, and runtime behavior. See a feature you like, figure out how it works, and dig down to the binary level.
GetContact CLI adalah project Python untuk melakukan lookup nomor telepon lewat API GetContact, tanpa aplikasi Android dan tanpa browser.
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
- application-security
- appsec
- bug-bounty
- burp-alternative
Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteur réseau temps réel + pare-feu sortant, agent de flotte Rust, exports SIEM. 100 % local.
Translated全链哨兵 (Quanlian Shaobing, "full-chain sentinel") is a cybersecurity Agent that integrates Web penetration testing, Android App security testing, iOS APP security toilet, batch targeting for attack and defense, automated emergency response, and open-source vulnerability monitoring. It is used to assist with automating security service delivery. Use for illegal purposes is prohibited.
- agent
- blue-team
- cybersecurity
- cybersecurity-tools
Nintendo Switch userland code execution using Civilization 7 game cartridge
AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.
- ai
- attack-surface-management
- bbot
- cybersecurity
Catch risky npm dependency changes before they merge.
- dependency-analysis
- devsecops
- github-actions
- malware
Samsung Tizen root
- embedded-linux
- firmware-analysis
- hardware-hacking
- mali-gpu
Custom apps for the BMW MGU / iDrive 7 head unit (shift lights, virtual dyno, brake and drag timers, G-meter, fault scanner) plus an SDK kit to build and install your own.
- automotive
- bmw
- car-hacking
- head-unit
Open PS5 firmware 14.10 research: Lua userland experiments, syscall and attack-surface analysis. Kernel read/write and a complete exploit are not demonstrated.
- ps5
- ps5-homebrew
- ps5-jailbreak
- ps5-tools
Offline, encrypted vault for seed phrases, private keys, passwords and API keys. Also used by agents.
An automated Themida / Code Virtualizer / WinLicense (v3.0-v4) unpacker and dump fixer tool
Operational information regarding the 2026 php2shell vulnerabilities
Evidence-based DSM ransomware recovery: preservation, RAM key recovery, copy decryption, and GitLab validation.
The universe in numbers. Free, open-source calculators for everything countable.
A clean room recreation of Auth0 with 1:1 drop in replacement feature parity.