Repository Index

PoC for jsserver vulnerability in webOS 3.5+(?)

• exploit
• lg
• lgtv
• root

Multi-role and whitelist based authorization gem for Rails (and not only Rails!)

• ruby
• cancan
• rails
• access-control

PE-bear (builds only)

• pe-analyzer
• pe-format
• pe-editor

A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.

• application-security
• appsec
• bug-bounty
• burp-alternative

Collection of almost 40.000 javascript malware samples

• malware-samples
• malware-research
• javascript
• malware-jail

The reliable YouTube API Ruby client

• youtube-api
• youtube-analytics
• video
• ruby

Rails integration for Rodauth authentication framework

• rodauth
• authentication
• rails
• multifactor-authentication

Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.

• codereview
• cybersecurity
• ruby
• sinatra

phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code

• php
• php-codesniffer
• phpcs
• static-code-analysis

Nintendo Switch userland code execution using Civilization 7 game cartridge

AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.

• ai
• attack-surface-management
• bbot
• cybersecurity

CLI tool for decompiling Android apps to Java. It does resources! It does Java! Its real easy!

Security Auditor Utility for GraphQL APIs

• security
• penetration-testing
• auditing
• graphql

Single C file TLS 1.2/1.3 implementation, using tomcrypt as crypto library

• tls

ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.

• clamscan
• file-scanner
• virus-scan
• docker-compose

A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule

MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.

CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.

Tool to gather Threat Intelligence indicators from publicly available sources

Codesign Electron macOS apps

• electron-osx-sign
• macos
• entitlements
• provisioning-profiles

A collection of programs that access and manipulate ELF files.

An opinionated production-ready SQL-/Swagger-first RESTful JSON API written in Go, highly integrated with VSCode DevContainers by allaboutapps.

• golang-development
• vscode-devcontainers
• golang
• go

Modular file scanning/analysis framework

• python
• analytic-machines
• analysis-framework
• python-script

Python tool for aircraft Doppler audio geolocation using historical ADS-B flight data (Source-available)

• ads-b
• airplane
• doppler-effect
• geolocation