Repository Index

A little utility for managing credentials in the cloud

LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures from Android devices. It also minimizes its interaction between user and kernel space processes during acquisition, which allows it to produce memory captures that are more forensically sound than those of other tools designed for Linux memory acquisition.

Basic implementations of standard cryptography algorithms, like AES and SHA-1.

Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.

• malloc
• security
• memory-allocation
• malloc-library

finds publicly known security vulnerabilities in a website's frontend JavaScript libraries

• security-vulnerabilities
• security
• vulnerabilities
• lighthouse

Your Everyday Threat Intelligence

• infosec
• threatintel
• threat-sharing
• threat-hunting

A helm plugin that help manage secrets with Git workflow and store them anywhere

• helm
• helm-plugin
• helm-plugins
• kubernetes

Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.

• wordlist
• wordlist-generator
• password
• cracking

A One Time Password Authentication package, compatible with Google Authenticator.

• php
• 2fa
• two-factor-authentication
• google2fa

ReCaptcha helpers for ruby apps

• recaptcha
• ruby
• rails
• captcha

Indicators of Compromises (IOC) of our various investigations

• ioc
• malware
• yara
• misp

A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.

• backdoor
• ebpf
• kernel
• rootkit

The most complete open-source tool for Twitter intelligence analysis

• osint
• socmint
• socialmedia
• twitter

Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms.

• cryptography-library
• cryptography
• security
• golang

Support for OAuth 2 and OpenId Connect (OIDC) in Angular.

Awesome Django authorization, without the database

• python
• django
• permissions
• rules

MongoDB session store for Express

OpenID Connect (OIDC) and OAuth2 protocol support for browser-based JavaScript applications

• oidc
• oidc-client
• typescript

Go login handlers for authentication providers (OAuth1, OAuth2)

Ruby's Most Advanced Authentication Framework

CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.

• cve-2026-109618
• cve-2026-109619
• detection-rules
• exploit

Golang OAuth2 server library

pwning IPv4 via IPv6

JWT login microservice with plugable backends such as OAuth2, Google, Github, htpasswd, osiam, ..

• jwt
• htpasswd
• service
• golang