Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
- exploit
- php
- php2shell
- php2shell-cve
Repository Index
47,133 repositories indexed
529–552 of 777 · Most stars
RSA public/private key encryption, private key signing and public key verification in Swift using the Swift Package Manager. Works on iOS, macOS, and Linux (work in progress).
- swift
- rsa-cryptography
- rsa-signature
- macos
The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.
- ai-agents
- bug-bounty
- electron
- offensive-security
Detect hidden files and text in images
- steganography
- ctf
- stego
- capture-the-flag
Elixir Plug library to enable SAML 2.0 SP SSO in Phoenix/Plug applications.
- saml2-sp-sso
- saml-assertion
- plug-pipeline
Security library for Vert.x: OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...
A mysqldump anonymizer
- mysqldump
- anonymizer
- database-anonymizer
- rgpd
Randomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.
TranslatedCyclops is a browser with XSS detection capabilities
- security
- xss
- taint-tracking
- vulnerability
Extract the information needed from the Manifest.plist files to convert it to hashes compatible with hashcat
Tools to make Plug, and Phoenix authentication simple and flexible.
A flexible playground for Android CTF challenges.
- android
- ctf
- cybersecurity
- playground
An integrated security system for applications built on component
The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX account.
Detect and log CVE-2019-19781 scan and exploitation attempts.
acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.
Simple framework to extract "actionable" data from Android malware (C&Cs, phone numbers etc.)
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
- cve-2026-109618
- cve-2026-109619
- exploit
- memory-corruption
Flexible OpenID Connect and OAuth 2.0 server-side implementation for modern ASP.NET projects
- authentication
- authorization
- identity-management
- oauth2
A process monitoring tool that tries to detect exploitation
Run basic functions from stripped binaries cross platform
TranslatedAn AI multi-agent security testing platform for authorized security testing and local research.
TranslatedFush Vue MCP — Vue frontend reverse engineering + web security testing tool (Chrome extension + MCP server, 91 tools)
The repository host gives no description.