Fast, compact 64/128/256-bit non-crypto hash suite (Rainbow & Rainbow 2) passing SMHasher3, plus experimental Rainstorm. C++ and Node.js/Wasm API & CLI
- call-for-papers
- cryptanalysis
- cryptanalysis-tasks
- cryptography
Repository Index
77,353 visible repositories in the index
745–768 of 946 · Most stars
Local-only browser fingerprint & identity rotation toolkit for authorized security testing. Tor/obfs4, coherent profiles, WebRTC/DNS leak protection.
- browser-privacy
- cli
- fingerprinting
- identity-rotation
Randomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.
TR-069 Honeypot
Hashcat wrapper to help automate the cracking process
Writeups of Capture The Flag Competitions
- ctf
- picoctf
- writeups
- glug
Command line utility and Python package to ease the (un)mounting of forensic disk images
A framework for receiving and redistributing abuse feeds
Autonomous DFIR agent: point it at disk images, memory dumps or log exports and get back an investigation that shows its work. Volatility 3, Plaso, YARA and any OpenAI-compatible LLM.
acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.
A modular Python application to pull intelligence about malicious files
- malware-analysis
- malware-research
- investigation
- cybersecurity
Automated malware unpacker
The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX account.
A CTF framework to create, build, deploy and monitor challenges
- ctf-tools
- ctf-framework
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
- cve-2026-109618
- cve-2026-109619
- exploit
- memory-corruption
Simple framework to extract "actionable" data from Android malware (C&Cs, phone numbers etc.)
御枢 · AegisOps — AI 安全运营工作台：告警研判、应急响应、漏洞整改，连接 Atlas、模型、工具与工作流。
- ai-agents
- secops
- security-operations
- vulnerability-management
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
- audit
- cognito
- cybersecurity
- scanner
Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
- crtsh
- cve
- cve-2026-109618
- cve-2026-109619
Words list generator to crack security tokens
Git manager for pentesters
Process HTTP Pcaps With YARA
Malware/IOC ingestion and processing engine
Mobile runtime detection workbench for AI (iOS and Android)
- frida
- reverse-engineering
- android-security-tools
- frida-gadget