Repository Index

A set of cryptographic primitives for building a multi-hop Proxy Re-encryption scheme, known as Transform Encryption.

• cryptography
• rust
• proxy-re-encryption
• transform-encryption

Every hack, exploit and breach, live: new vulnerabilities, active exploits and breaches on one globe, with sources and one-click fixes.

• cve
• cybersecurity
• mapbox
• mcp

Public repository for improvements to the EXTRABACON exploit

preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.

• devops
• devsecops
• security
• golang

Python implementation of the Packed Executable iDentifier (PEiD)

• peid
• peid-signature
• pe-file
• pe-files

Reverse engineering tool for virtualization wrappers

A free, public vulnerability feed: CVE, GHSA, OSV, CISA KEV and EPSS merged into one entry per vulnerability. RSS, JSON API and MCP. Docs and issues only.

• cisa-kev
• cve
• mcp
• osv

Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design

• exploit
• php
• php2shell
• php2shell-cve

Scalable Binary Data Extraction in Hadoop

Highly modular & configurable hash & crypto library

• octavo
• crypto-library
• rust
• crypto

Sym is a command line utility and a Ruby API that makes it trivial to encrypt and decrypt sensitive data. Unlike many other existing encryption tools, sym focuses on usability and streamlined interface (CLI), with the goal of making encryption easy and transparent. The result? There is no excuse for keeping your application secrets unencrypted :)

A mysqldump anonymizer

• mysqldump
• anonymizer
• database-anonymizer
• rgpd

Elixir Plug library to enable SAML 2.0 SP SSO in Phoenix/Plug applications.

• saml2-sp-sso
• saml-assertion
• plug-pipeline

BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)

• malware-analysis
• reverse-engineering
• debugger
• malware

TranslatedCyclops is a browser with XSS detection capabilities

• security
• xss
• taint-tracking
• vulnerability

Mac browser for Mach-O binaries (macOS, iOS, watchOS, and tvOS)

• macos
• abi
• mach
• mach-o

A framework for receiving and redistributing abuse feeds

A modular Python application to pull intelligence about malicious files

• malware-analysis
• malware-research
• investigation
• cybersecurity

PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12

• cve-2026-109618
• cve-2026-109619
• exploit
• memory-corruption

Simple framework to extract "actionable" data from Android malware (C&Cs, phone numbers etc.)

NTFUZZ: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis (IEEE S&P '21)

• fuzzer
• fuzzing
• kernel-fuzzer
• windows-kernel

御枢 · AegisOps — AI 安全运营工作台：告警研判、应急响应、漏洞整改，连接 Atlas、模型、工具与工作流。

• ai-agents
• secops
• security-operations
• vulnerability-management

Flexible OpenID Connect and OAuth 2.0 server-side implementation for modern ASP.NET projects

• authentication
• authorization
• identity-management
• oauth2

Kustomize generator plugin that generates Secrets from sops-encrypted files