Repository Index

Spot vulnerabilities in postgres SQL scripts

• postgresql
• security
• python

A Python library and command line tools to provide interactive log visualization.

• cybersecurity
• investigation
• malware-analysis
• malware-research

ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits

• linux
• security
• kernel
• rootkit

Security linter for AI-generated code: catches the exact vulnerabilities Copilot, Cursor and ChatGPT repeatedly produce. SQL injection, hardcoded secrets, JWT bypass, command injection and 15+ more rules. Grade A–F. Zero config. CI/CD ready.

Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.

• networking
• udp
• ipv6
• ipv4

In the midst of all the tools out there that you can possibly use to keep track of them. Here's a "shovel" that just works to try them all out.

• cli
• terminal
• context-engineering
• meta-prompting

Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design

• exploit
• php
• php2shell
• php2shell-cve

Security library for Vert.x: OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...

• java
• vertx
• security
• authentication

macOS menu-bar app for fine-grained VPN routing: bypass the VPN for chosen domains/services, force others through it, or (Custom mode) route each domain/subnet out a specific egress — direct, a specific VPN, an HTTP/SOCKS5 proxy, or a Tailscale peer. Includes a vpnb CLI.

• macos
• menu-bar-app
• networking
• split-tunneling

The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.

• ai-agents
• bug-bounty
• electron
• offensive-security

OpenID Connect, the authentication protocol and identity layer on top of OAuth 2.0 used in many SSO and adopted in many social logins (Apple, Facebook, Google, ...etc). Find this curated list of providers, services, libraries, and resources to adopt it and know more about existing specs.

• awesome-list
• oauth
• oauth2
• openid-connect

Open-source Docker infrastructure platform. One web UI — containers, security, DNS, VPN, monitoring, backups, reverse proxy, terminal, and multi-node orchestration. Replace a dozen tools with one.

• agplv3
• docker
• docker-container
• docker-deployment

php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.

• cve
• hestiacp
• opencart
• php

Ziti SDK for Golang

• golang
• networking
• sdk
• zero-trust

Local-only browser fingerprint & identity rotation toolkit for authorized security testing. Tor/obfs4, coherent profiles, WebRTC/DNS leak protection.

• browser-privacy
• cli
• fingerprinting
• identity-rotation

Open-source agentic security operations platform:

• agentic-security
• cyber-security
• cyber-threat-intelligence
• cybersecurity

Mock an SSH server and define all commands it supports (Python, Twisted)

• mock
• ssh
• python
• hylang

[WIP] Simple mobile applications sandbox file browser tool. Powered with [frida.re](https://www.frida.re).

• frida
• android
• security
• reverse-engineering

WELA (Windows Event Log Analyzer, ゑ羅) is a tool for auditing and configuring Windows event log settings. Windows event logs are a vital source of information for Digital Forensics and Incident Response (DFIR), providing visibility into system activity and security events.

A free, public vulnerability feed: CVE, GHSA, OSV, CISA KEV and EPSS merged into one entry per vulnerability. RSS, JSON API and MCP. Docs and issues only.

• cisa-kev
• cve
• mcp
• osv

TranslatedCyclops is a browser with XSS detection capabilities

• security
• xss
• taint-tracking
• vulnerability

Pure-Go SQL parser, formatter, linter and security scanner for 8 dialects. Zero-copy, race-free, with an LSP and MCP server.

• ast
• cli
• go
• golang

A modular Python application to pull intelligence about malicious files

• malware-analysis
• malware-research
• investigation
• cybersecurity

TranslatedA guide to avoiding scams in the human world: 373 scam breakdowns covering 16 categories, including fake-order task scams (刷单), pig-butchering scams (杀猪盘), AI face-swapping, and scams targeting the elderly; includes real case reports, everyday self-check lists, PDF/EPUB/Anki downloads, and a scam-avoidance mini-game with 12 rounds

• anti-fraud
• anti-scam
• chinese
• scam-awareness