Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
- exploit
- php
- php2shell
- php2shell-cve
Repository Index
47,133 repositories indexed
817–840 of 1,145 · Most stars
Scans SPF and DMARC records for issues that could allow email spoofing.
Provides a unified interface to local and remote authentication systems.
- aura
- authentication
- authenticator
- login
Detect hidden files and text in images
- steganography
- ctf
- stego
- capture-the-flag
A mysqldump anonymizer
- mysqldump
- anonymizer
- database-anonymizer
- rgpd
CamMonitor turns your spare Android phone into a private, zero-account home security camera. Connect two Android devices directly using peer-to-peer (P2P) encryption over Wi-Fi or cellular networks without cloud subscriptions, login accounts, or third-party servers storing your video.
The fastest 128-bit and 256-bit hash, passes all tests, and under 140 source lines of code. API library and CLI tool in C++ and NodeJS/Wasm
- call-for-papers
- cryptanalysis
- cryptanalysis-tasks
- cryptography
The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.
- ai-agents
- bug-bounty
- electron
- offensive-security
php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.
- cve
- hestiacp
- opencart
- php
Simple ELF crypter. Uses RC4 encryption.
Ziti SDK for Golang
- golang
- networking
- sdk
- zero-trust
Local-only browser fingerprint & identity rotation toolkit for authorized security testing. Tor/obfs4, coherent profiles, WebRTC/DNS leak protection.
- browser-privacy
- cli
- fingerprinting
- identity-rotation
Straightforward HTTP session management
- session-management
- session
- http
- golang
Randomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.
Open-source agentic security operations platform:
- agentic-security
- cyber-security
- cyber-threat-intelligence
- cybersecurity
BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)
Hashcat wrapper to help automate the cracking process
A library for allowing apps to easily use different auth providers.
A free, public vulnerability feed: CVE, GHSA, OSV, CISA KEV and EPSS merged into one entry per vulnerability. RSS, JSON API and MCP. Docs and issues only.
Command line utility and Python package to ease the (un)mounting of forensic disk images
A framework for receiving and redistributing abuse feeds
Mac browser for Mach-O binaries (macOS, iOS, watchOS, and tvOS)
- macos
- abi
- mach
- mach-o
Extract the information needed from the Manifest.plist files to convert it to hashes compatible with hashcat
A modular Python application to pull intelligence about malicious files
- malware-analysis
- malware-research
- investigation
- cybersecurity