Sign in

Repository Index

47,133 repositories indexed

Tags: Security
Tags

A repository shows when it has any selected Tag.

Clear Tags
Filters

Filters

Clear all filters

25–48 of 48 · Most stars

Django web application to store and manage vouchers, coupons, loyalty and gift cards digitally. Supports PWA, offline caching, expiry notifications, transaction histories, file uploads and OIDC SSO.

  • coupons
  • vouchers
  • conventional-commits
  • apprise

Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js

  • malware-samples
  • wscript
  • deobfuscation
  • angler

CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.

  • cve-2026-109618
  • cve-2026-109619
  • exploit
  • mod-php

Pakkero is a binary packer written in Go made for fun and educational purpose. Its main goal is to take in input a program file (elf binary, script, even appimage) and compress it, protect it from tampering and intrusion.

Android Loadable Kernel Modules - mostly used for reversing and debugging on controlled systems/emulators

  • loadable-kernel-modules
  • android-lkms
  • emulators
  • kernel

Open source Windows x64 PE packer and crypter. Compresses and encrypts executables with a custom virtual machine into a self extracting stub.

  • compression
  • packer
  • pe-packer
  • pe-compress

php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.

  • cve
  • hestiacp
  • opencart
  • php

PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12

  • cve-2026-109618
  • cve-2026-109619
  • exploit
  • memory-corruption

A low-to-medium interaction SSH Honeypot with features to capture terminal activity and upload to asciinema.org

NullKia Mobile Security Framework - Tools in Nim, Crystal, V, D, Red, Odin, Haxe, Zig, Kotlin, Lua, PHP, Python | bad-antics | github.com/bad-antics

  • android-hacking
  • baseband
  • bootloader-unlock
  • checkm8

AfterGlow Cloud is a security visualization tool which lets users upload data and visualize the data as graphs on-the-fly (part of Google Summer of Code 2012).

A Commitment Scheme library for Coin Flipping/Tossing algorithms and sort. :four_leaf_clover: :camel: :lock: :key:

  • ocaml
  • commitment-schemes
  • secure-multi-party-computation
  • cryptography