Repository Index

Nintendo Switch userland code execution using Civilization 7 game cartridge

Advanced keyboard-walk generator with configureable basechars, keymap and routes

CuckooDroid - Automated Android Malware Analysis with Cuckoo Sandbox.

🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️

• apollo
• apollo-server
• graphql
• security

JD-Core is a JAVA decompiler written in JAVA.

Linker/Compiler/Tool detector for Windows, Linux and MacOS.

• detect
• reverse-engineering
• signature
• malware-analysis

:white_check_mark: .NET crypto done right. Professionally audited.

• crypto
• cryptography
• c-sharp
• aead

Defanged Indicator of Compromise (IOC) Extractor.

• ioc
• indicators-of-compromise
• library
• ioc-extractor

🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more

• tls
• ssl
• certificate
• keystore

bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.

• xss
• bxss
• security
• bugbounty

AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.

• ai
• attack-surface-management
• bbot
• cybersecurity

OmniAuth strategy for Twitter

Password cracking rules and masks for hashcat that I generated from cracked passwords.

Malware exploits

Paaster is a secure and user-friendly pastebin application that prioritizes privacy and simplicity. With end-to-end encryption and paste history, Paaster ensures that your pasted code remains confidential and accessible.

• pastebin
• paaster
• e2ee
• paste

:atom: Social (OAuth1\OAuth2\OpenID\OpenIDConnect) sign with PHP :shipit:

• php
• oauth
• social
• oauth-application

The Ultimate Boilerplate for Products.

• boilerplate
• meteor
• meteorjs
• nodejs

USB Keystroke Injection Protection

Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness

🔒Unified API for password hashing algorithms

• credential
• nodejs
• hash-functions
• security

Machinae Security Intelligence Collector

honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway

• honeytoken
• honeypot
• security
• deception

A colleciton of CTF write-ups all using pwntools

Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.

• blue-team
• detection-engineering
• edr
• endpoint-detection