A flexible playground for Android CTF challenges.
- android
- ctf
- cybersecurity
- playground
47,133 repositories indexed
505–528 of 668 · Most stars
A flexible playground for Android CTF challenges.
An integrated security system for applications built on component
A collection of hash functions, ciphers, tools, libraries, and materials related to cryptography & security. :closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key: (project was renamed, libchaos is main)
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
Flexible OpenID Connect and OAuth 2.0 server-side implementation for modern ASP.NET projects
NTFUZZ: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis (IEEE S&P '21)
Kustomize generator plugin that generates Secrets from sops-encrypted files
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
TranslatedFush Vue MCP — Vue frontend reverse engineering + web security testing tool (Chrome extension + MCP server, 91 tools)
Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
Add a layer of active defense to your cloud applications.
Collection of ssl verification functions for Erlang
Words list generator to crack security tokens
eBPF Information Flow Enforcement for AI Agent safety, security and effectiveness
Mobile runtime detection workbench for AI (iOS and Android)
This repository contains reverse engineering results and resources for a few specific car models of a very specific car manufacturer. Please don't sue.
Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.
CryptoNet is simple, fast and a lightweight asymmetric and symmetric encryption library.
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
A library designed to generate cryptographically strong random numbers suitable for managing data such as passwords, account authentication, security tokens, and related secrets.
Integrates Spiffe and Vault to have secretless authentication
The opposite of Ruler, provides blue teams with the ability to detect Ruler usage against Exchange.
Go client for the GeoServer REST API — workspaces, datastores, layers, styles, security, ACL, GeoWebCache, Importer, plus OWS GetCapabilities/Describe. Tested against GeoServer 2.27 LTS and 2.28 stable.
A honeypot proxy for mongodb. When run, this will proxy and log all traffic to a dummy mongodb server.