Repository Index

🗜️ A packer for Windows x86 executable files written in C and Intel x86 Assembly. The new file after packing can obstruct reverse engineering（使用C和Intel x86汇编开发的Windows x86可执行文件打包工具，打包后的新文件可以阻碍逆向工程）

• windows
• reverse-engineering
• security
• pe

CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.

• cve-2026-109618
• cve-2026-109619
• exploit
• mod-php

Aggregates security advisories from 10 international CERTs daily and provides an AI skill that cross-references alerts against your project's tech stack.

• cve
• security
• security-alerts
• vulnerability

PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE

Protects an unpatched PHP against php2shell (CVE-2026-109618 / CVE-2026-109619): a small extension that mirrors the official fix component by component and steps aside once the engine carries it. PHP 5.6-8.5; Sury, cPanel EA4, DirectAdmin, Docker, Windows.

• cve-2026-109618
• cve-2026-109619
• mitigation
• php

Deploy a Cloudflare Worker to sanely score users' new passwords with zxcvbn AND check for matches against haveibeenpwned's 10+ billion breached accounts

• haveibeenpwned
• cloudflare
• zxcvbn
• serverless

Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design

• exploit
• php
• php2shell
• php2shell-cve

Content discovery and fuzzing with HTTP/3 support (100k requests per second)

The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.

• ai-agents
• bug-bounty
• electron
• offensive-security

php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.

• cve
• hestiacp
• opencart
• php

PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12

• cve-2026-109618
• cve-2026-109619
• exploit
• memory-corruption

Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.

• crtsh
• cve
• cve-2026-109618
• cve-2026-109619

A blackhole for your Claude Code.

• agent
• claude-code
• colima
• container-isolation

Norton 360 Security Suite: Antivirus, Firewall, and 2 GB Online Storage for Windows

• norton-360
• norton-360-free
• norton-safe-web
• norton360

Security training for the apps you actually ship. Open your browser and start hacking.

• appsec
• ctf
• cybersecurity
• nextjs

A low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability.

• security
• security-tools
• vulnerability
• honeypot

A performant, 100% native-julia SHA1, SHA2, and SHA3 implementation

• cryptography
• sha1
• sha2
• sha3

WebLogic Honeypot is a low interaction honeypot to detect CVE-2017-10271 in the Oracle WebLogic Server component of Oracle Fusion Middleware. This is a Remote Code Execution vulnerability.

• security
• security-tools
• honeypot
• deception

Express honeypot for RFI and LFI bots: 310 fake vulnerable URLs, logs IP, geolocation and payloads. Docker bait server or app.use() middleware.

• nodejs
• honeypot
• express
• exploit

Prompt-injection firewall for LLM applications — 33 input detectors, 9 output scanners, federated ed25519-signed threat-intel feed. Apache 2.0, 1040 tests, F1 96.0% with 0% false positives. Docker, GitHub Action, LangChain/LlamaIndex/CrewAI integrations.

• agentic-ai
• ai-safety
• fastapi
• langchain

Firebase Auth implementation for Micropython

• micropython
• firebase-auth
• micropython-esp32
• micropython-lib

Extract hashes from the MongoDB database server to a hash format that hashcat accepts: -m 24100 (SCRAM-SHA-1) or -m 24200 (SCRAM-SHA-256)

Encrypted .env vault manager with interactive TUI — written in Go

• age-encryption
• bubbletea
• cli
• developer-tools

Unified Java API for multiple decompilers (Fernflower, Vineflower, Procyon, CFR, JD-Core, JADX)

• bytecode
• cfr
• decompilation
• decompiler