Repository Index

Straightforward HTTP session management

• session-management
• session
• http
• golang

Stream encryption & decryption with libsodium and protobuf

• crypto
• cryptography
• protobuf
• libsodium

BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)

• malware-analysis
• reverse-engineering
• debugger
• malware

A library for allowing apps to easily use different auth providers.

Writeups of Capture The Flag Competitions

• ctf
• picoctf
• writeups
• glug

Scan your computer for applications that are either susceptible to dylib hijacking or have been hijacked.

[INACTIVE] TLS 1.2 implementation in Rust

Mac browser for Mach-O binaries (macOS, iOS, watchOS, and tvOS)

• macos
• abi
• mach
• mach-o

Extract the information needed from the Manifest.plist files to convert it to hashes compatible with hashcat

Simple JWT Golang

• jwt
• golang
• authentication
• simple

Tools to make Plug, and Phoenix authentication simple and flexible.

An integrated security system for applications built on component

A modular Python application to pull intelligence about malicious files

• malware-analysis
• malware-research
• investigation
• cybersecurity

The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX account.

Detect and log CVE-2019-19781 scan and exploitation attempts.

A collection of hash functions, ciphers, tools, libraries, and materials related to cryptography & security. :closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key: (project was renamed, libchaos is main)

Anvilogic Forge

• detection
• detection-engineering
• threat-hunting
• snowflake

Go session management for web servers (including support for Google App Engine - GAE).

• gae
• http-session
• session-management

Authentication plugin for CakePHP. Can also be used in PSR7 based applications.

• php
• cakephp
• cakephp-plugin
• authentication

A LinkedIn OAuth2 strategy for OmniAuth.

Standardized multi-provider OAuth authentication

• oauth2
• omniauth
• multiauth
• crystal-lang

Simple framework to extract "actionable" data from Android malware (C&Cs, phone numbers etc.)

PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12

• cve-2026-109618
• cve-2026-109619
• exploit
• memory-corruption

Flexible OpenID Connect and OAuth 2.0 server-side implementation for modern ASP.NET projects

• authentication
• authorization
• identity-management
• oauth2