Repository Index

Java implementation of Tink

• crypto
• cryptography
• java
• security

The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups

• active-directory
• cheatsheet
• ctf
• cybersecurity

Universal web application security sensor intended for real-time monitoring and defense.

A collection of useful utility functions

• utility
• utilities
• string
• strings

inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques

• forensics
• hypervisor
• memory-dump
• reverse-engineering

File Scanning Framework

• security-tools
• network-defense
• file-analysis
• file-analyzer

Splunk code (SPL) for serious threat hunters and detection engineers.

• splunk
• threat-hunting
• use-case
• siem

Small portable Elliptic-Curve Diffie-Hellman in C

• elliptic-curve-diffie-hellman
• ecdh
• public-key-cryptography
• c

Elliptic curve cryptography functions: Private Key, Public Key, Signature, AES, Encryption, Decryption

Cryptographic library for Embarcadero Delphi and potentially for FPC as well

• delphi
• key-deviation-algorithms
• cryptographic-checksums
• kdf1

ROPMEMU is a framework to analyze, dissect and decompile complex code-reuse attacks.

Inspektor is a protocol-aware proxy that is used to enforce access policies👮

• security
• openpolicyagent
• acl
• rust

The JavaScript Crypto Library provides web developers with an extensive and efficient set of cryptographic functions. The library aims to obtain maximum execution speed while preserving modularity and reusability. The library is released as open source under a BDS license.

A Rails 6 boilerplate to create your next Saas product. Preloaded with graphQL, devise, JWT, CanCanCan, RailsAdmin, Rubocop, Rspec, i18n and more.

• ruby-on-rails
• api-only
• rubyonrails
• saas-boilerplate

CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.

• cve-2026-109618
• cve-2026-109619
• exploit
• mod-php

Pakkero is a binary packer written in Go made for fun and educational purpose. Its main goal is to take in input a program file (elf binary, script, even appimage) and compress it, protect it from tampering and intrusion.

• launcher
• payload
• elf
• elf-binaries

Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities

• ebpf
• security
• linux-kernel
• linux-security-module

Middleware for adding security headers to an ASP.NET Core application.

C++ application that uses memory and code hooks to detect packers

A modular Python application to collect intelligence for malicious hosts.

• cybersecurity
• investigation

We took PersistenceSniper, merged it with Python, and misspelled it on purpose. Meet PyrsistenceSniper.

• cybersecurity
• cybersecurity-tools
• incident-response
• security

Hashing for Modern Object Pascal

• delphi
• fpc
• checksum
• stream

🍍Jeff provides the simplest way to manage web sessions in Go.

• golang
• sessions
• http
• session-management

Who do websites think you are? A privacy self-check: every sniffer any site can run, the portrait they paint, and the contradictions that give away a VPN or proxy

• browser-fingerprinting
• cloudflare-workers
• dns-leak
• network-tools