Astral-PE is a low-level mutator (Headers/EP obfuscator) for native Windows PE files (x32/x64)
- cybersecurity
- hacktoberfest
- low-level
- mutator
Repository Index
83,087 visible repositories in the index
769–792 of 1,068 · Most stars
DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.
- python
- malware-analysis
- automation
- config-dump
Lua Decompiler for Lua version 5.1
- lua
- c
- decompiler
A plugin for Microsoft.EntityFrameworkCore to add support of encrypted fields using built-in or custom encryption providers.
- entity-framework-core
- plugin
- encryption
- netstandard
Scans for accessibility tools backdoors via RDP
Python installable command line utiltity for mitigation of host and key compromises.
CRAB (Clean Rebuild of Anything's Behavior): rebuild software from behavior, not source code. An MCP-powered toolkit for black-box observation, clean-room reimplementation, and behavioral verification.
- clean-room-reimplementation
- ai-agents
- behavioral-testing
- black-box-testing
$MFT directory tree reconstruction & FILE record info
- mft-browser
- mft
- powershell
- winform
Scope-based authorization for Ruby on Rails.
BadActor.org An in-memory application driven jailer written in Go
Automated client-side template injection (sandbox escape/bypass) detection for AngularJS v1.x.
One-Step APK Decompilation With Multiple Backends
A Lean backend framework whose authorization safety is formally proven. The developer writes only a Cedar schema and policies; handlers are built on Supabase Auth and PostgreSQL.
- access-control
- authorization
- backend-framework
- cedar
A production-ready SaaS template built with Next.js 15, Supabase, and Tailwind CSS. Includes authentication, user management, file storage, task management demos, and secure RLS policies. Now with a complete React Native + Expo mobile app template! Easily customizable with pre-built themes, i18n support (EN/PL/ZH), and legal documents.
No-jailbreak iOS privacy, entitlement, sandbox & telemetry forensic auditor (inspired by Verlintas/NOIR)
The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups
- active-directory
- cheatsheet
- ctf
- cybersecurity
Compilation of autoexec scripts and mods for Xiaomi Yi camera after reverse engineering of firmware.
- reverse-engineering
- xiaomi
- xiaomi-firmware
- xiaomi-camera
🚀AutoRuns is a PowerShell module that will help do live incident response and enumerate autoruns artifacts that may be used by legitimate programs as well as malware to achieve persistence.
Slider captcha support mobile
A collection of useful utility functions
- utility
- utilities
- string
- strings
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
- cve-2026-109618
- cve-2026-109619
- exploit
- mod-php
inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques
- forensics
- hypervisor
- memory-dump
- reverse-engineering
File Scanning Framework
- security-tools
- network-defense
- file-analysis
- file-analyzer
Very fast, high-quality hash function, discrete-incremental and streamed hashing-capable (non-cryptographic, header-only C/C++) 27GB/s + PRNG