Repository Index

Randomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.

Open-source agentic security operations platform:

• agentic-security
• cyber-security
• cyber-threat-intelligence
• cybersecurity

Stream encryption & decryption with libsodium and protobuf

• crypto
• cryptography
• protobuf
• libsodium

BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)

• malware-analysis
• reverse-engineering
• debugger
• malware

A library for allowing apps to easily use different auth providers.

A blade runner for your network. Detects shadow AI agents before they go rogue.

Scan your computer for applications that are either susceptible to dylib hijacking or have been hijacked.

Mac browser for Mach-O binaries (macOS, iOS, watchOS, and tvOS)

• macos
• abi
• mach
• mach-o

A modular Python application to pull intelligence about malicious files

• malware-analysis
• malware-research
• investigation
• cybersecurity

Automated malware unpacker

Detect and log CVE-2019-19781 scan and exploitation attempts.

acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.

A collection of hash functions, ciphers, tools, libraries, and materials related to cryptography & security. :closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key: (project was renamed, libchaos is main)

Anvilogic Forge

• detection
• detection-engineering
• threat-hunting
• snowflake

Authentication plugin for CakePHP. Can also be used in PSR7 based applications.

• php
• cakephp
• cakephp-plugin
• authentication

Standardized multi-provider OAuth authentication

• oauth2
• omniauth
• multiauth
• crystal-lang

Simple framework to extract "actionable" data from Android malware (C&Cs, phone numbers etc.)

PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12

• cve-2026-109618
• cve-2026-109619
• exploit
• memory-corruption

Machine-learn password mangling rules

NTFUZZ: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis (IEEE S&P '21)

• fuzzer
• fuzzing
• kernel-fuzzer
• windows-kernel

Run basic functions from stripped binaries cross platform

Compute message digest for large files in Go

• go
• golang
• checksum
• message-digest

HEhub is a library for homomorphic encryption and its applications, and is part of the PrimiHub project.

• bgv
• ckks
• cryptography
• fhe

TranslatedAn AI multi-agent security testing platform for authorized security testing and local research.