php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.
Ziti SDK for Golang
Straightforward HTTP session management
- session-management
- session
- http
- golang
BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)
A CHIP-8 interpreter, assembler and disassembler in C
Hashcat wrapper to help automate the cracking process
A free, public vulnerability feed: CVE, GHSA, OSV, CISA KEV and EPSS merged into one entry per vulnerability. RSS, JSON API and MCP. Docs and issues only.
TranslatedCyclops is a browser with XSS detection capabilities
High-Fidelity AI-Assisted Deterministic Reverse Engineering FastMCP Server
Go session management for web servers (including support for Google App Engine - GAE).
- gae
- http-session
- session-management
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
- cve-2026-109618
- cve-2026-109619
- exploit
- memory-corruption
Machine-learn password mangling rules
Flexible OpenID Connect and OAuth 2.0 server-side implementation for modern ASP.NET projects
A process monitoring tool that tries to detect exploitation
Kustomize generator plugin that generates Secrets from sops-encrypted files
Run basic functions from stripped binaries cross platform
Compute message digest for large files in Go
- go
- golang
- checksum
- message-digest
Collection of ssl verification functions for Erlang
eBPF Information Flow Enforcement for AI Agent safety, security and effectiveness
- ebpf
- harness
- ifc
- policy-engine
Malware/IOC ingestion and processing engine
Process HTTP Pcaps With YARA
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
Searches various online resources to try and get as much info about an IP/domain as possible.
Easily access the Shopify API with Elixir.
- shopify
- shopify-api
- elixir
- elixir-lang