Repository Index

Python telnet honeypot for catching botnet binaries

• honeypot
• telnet-server
• malware
• botnet

inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques

• forensics
• hypervisor
• memory-dump
• reverse-engineering

openssh on musl accepted any 257+ char password for accounts with no password. since 2016. check.sh, poc, patch.

Watchtower | Self-hosted AI security assessment, asset intelligence, and evidence workflows.

• ai-agents
• attack-surface-management
• docker
• penetration-testing

Protects an unpatched PHP against php2shell (CVE-2026-109618 / CVE-2026-109619): a small extension that mirrors the official fix component by component and steps aside once the engine carries it. PHP 5.6-8.5; Sury, cPanel EA4, DirectAdmin, Docker, Windows.

• cve-2026-109618
• cve-2026-109619
• mitigation
• php

Deploy a Cloudflare Worker to sanely score users' new passwords with zxcvbn AND check for matches against haveibeenpwned's 10+ billion breached accounts

• haveibeenpwned
• cloudflare
• zxcvbn
• serverless

php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.

• cve
• hestiacp
• opencart
• php

The pattern matching swiss knife

Mac browser for Mach-O binaries (macOS, iOS, watchOS, and tvOS)

• macos
• abi
• mach
• mach-o

A process monitoring tool that tries to detect exploitation

Checks with NSRL RDS servers looking for for hash matches

Run arbitrary code by patching OAT files

• android
• android-app
• kotlin
• kotlin-android

Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.

YALIH (Yet Another Low Interaction Honeyclient) is a low Interaction Client honeypot designed to detect malicious websites through signature, anomaly and pattern matching techniques

Intrusion Prevention System (IPS) for Secure Shell (SSH)

A tool to catch spoofed NBNS responses.

A vulnerability patch gathering tool

Yet another implementation of PEiD with yara

• binary-analysis
• yara
• yara-rules
• peid

Patched version of as3crypto (ActionScript)

The repository host gives no description.

Simple TCP/UDP honeypot implemented in Perl

• honeypot

Simple tool to find the yara matches on a file

• yara
• yara-rules
• malware
• malware-analysis