Repository Index

The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.

• ai-agents
• bug-bounty
• electron
• offensive-security

php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.

• cve
• hestiacp
• opencart
• php

Local-only browser fingerprint & identity rotation toolkit for authorized security testing. Tor/obfs4, coherent profiles, WebRTC/DNS leak protection.

• browser-privacy
• cli
• fingerprinting
• identity-rotation

Straightforward HTTP session management

• session-management
• session
• http
• golang

Randomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.

Open-source agentic security operations platform:

• agentic-security
• cyber-security
• cyber-threat-intelligence
• cybersecurity

Stream encryption & decryption with libsodium and protobuf

• crypto
• cryptography
• protobuf
• libsodium

A CHIP-8 interpreter, assembler and disassembler in C

• chip8
• chip-8
• chip8-emulator
• emulator

Hashcat wrapper to help automate the cracking process

A library for allowing apps to easily use different auth providers.

A free, public vulnerability feed: CVE, GHSA, OSV, CISA KEV and EPSS merged into one entry per vulnerability. RSS, JSON API and MCP. Docs and issues only.

• cisa-kev
• cve
• mcp
• osv

Scan your computer for applications that are either susceptible to dylib hijacking or have been hijacked.

Command line utility and Python package to ease the (un)mounting of forensic disk images

Writeups of Capture The Flag Competitions

• ctf
• picoctf
• writeups
• glug

Extract the information needed from the Manifest.plist files to convert it to hashes compatible with hashcat

Fast crypto toolkit for modern client-side JavaScript

Simple JWT Golang

• jwt
• golang
• authentication
• simple

A modular Python application to pull intelligence about malicious files

• malware-analysis
• malware-research
• investigation
• cybersecurity

Automated malware unpacker

Tools to make Plug, and Phoenix authentication simple and flexible.

The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX account.

acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.

A collection of hash functions, ciphers, tools, libraries, and materials related to cryptography & security. :closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key: (project was renamed, libchaos is main)

A CTF framework to create, build, deploy and monitor challenges

• ctf-tools
• ctf-framework