Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
- crtsh
- cve
- cve-2026-109618
- cve-2026-109619
Repository Index
78,351 visible repositories in the index
553–576 of 644 · Most stars
Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.
- cybersecurity
- hacking
- iast
- dast
Universal script packer-- transforms any type of script into a protected ELF executable, encrypted with anti-debugging.
Searches various online resources to try and get as much info about an IP/domain as possible.
WinHex: Hexadecimal Editor for Windows with RAM Editing and Template Management
- data-recovery
- find-and-replace
- ram-editing
- software-tools
A library designed to generate cryptographically strong random numbers suitable for managing data such as passwords, account authentication, security tokens, and related secrets.
Integrates Spiffe and Vault to have secretless authentication
- spire
- spiffe
- vault
- hashicorp
The opposite of Ruler, provides blue teams with the ability to detect Ruler usage against Exchange.
Go client for the GeoServer REST API — workspaces, datastores, layers, styles, security, ACL, GeoWebCache, Importer, plus OWS GetCapabilities/Describe. Tested against GeoServer 2.27 LTS and 2.28 stable.
- geoserver
- gis
- mapping
- golang
A honeypot for the Log4Shell vulnerability (CVE-2021-44228).
Vulnerable Web applications Generator
- vulnerabilities
- docker
- python
- generator
A tool to Terraform and automate password cracking on AWS.
Quick ORM RestServer and RestClient based on mORMot framework
- orm
- mormot
- restserver
- restclient
Middleware based authorization for Absinthe GraphQL powered by Bodyguard
A dead simple, highly performant, highly customizable sessions middleware for go http servers.
eBPF Security Monitoring and Sandboxing Agent Based on Aya
AI-powered platform for OSINT intelligence analysis. Features archive discovery with hypothesis-driven investigation, GLiNER entity extraction, Mapbox geospatial visualization, network analysis, and document processing. Built with FastAPI, Next.js, Weaviate, and DSPy.
- ai-agents
- document-processing
- dspy
- entity-extraction
Creates a readable stream producing cryptographically strong pseudo-random data using `crypto.randomBytes()`
- random-bytes
- random
- crypto
- pseudo-random-generator
🚀 Production-ready AI-friendly Go REST API boilerplate with Clean Architecture, JWT auth, RBAC, PostgreSQL migrations, and highly tested. AI-optimized with built-in guidelines for most used IDEs. Docker hot-reload, Swagger docs, one-command setup. Build production APIs in minutes, not weeks.
Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection
- docker-image
- executable-packing
- malware-packers
- research-platform
Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise
- detection
- splunk
- bpfdoor
- vulnerability
This project is designed to create deceptive webpages to deceive and redirect attackers away from real websites.
- deceptive-webpages
- web-cloner
- honeypot
- deception
A PE (Portable Executable) packer with Huffman Compression and Xor encryption.
- huffman-compression
- huffman-algorithm
- pe-header
- packer
drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates