47,133 repositories indexed
793–816 of 1,115 · Most stars
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
Flexible OpenID Connect and OAuth 2.0 server-side implementation for modern ASP.NET projects
A process monitoring tool that tries to detect exploitation
Kustomize generator plugin that generates Secrets from sops-encrypted files
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
Compute message digest for large files in Go
TranslatedFush Vue MCP — Vue frontend reverse engineering + web security testing tool (Chrome extension + MCP server, 91 tools)
HEhub is a library for homomorphic encryption and its applications, and is part of the PrimiHub project.
Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
TranslatedAn AI multi-agent security testing platform for authorized security testing and local research.
Collection of ssl verification functions for Erlang
An ActionScript 3 library for interfacing with OAuth 2.0 services.
Git manager for pentesters
Deprecated repo for PANDA 1.0 – see PANDA 2.0 repository
Mobile runtime detection workbench for AI (iOS and Android)
Open Source Telnet Honeypot
Writeups/solutions
Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.
DEPRECATED - Phoenix Authentication library that wraps Guardian for extra functionality
Universal script packer-- transforms any type of script into a protected ELF executable, encrypted with anti-debugging.
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
A honeypot for malware that propagates via USB storage devices
Reverse proxy with automatically obtains TLS certificates from Let's Encrypt
High-interaction Honeypot for PLCs and Industrial Control Systems