Repository Index

Detect and log CVE-2019-19781 scan and exploitation attempts.

acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.

A collection of hash functions, ciphers, tools, libraries, and materials related to cryptography & security. :closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key: (project was renamed, libchaos is main)

A CTF framework to create, build, deploy and monitor challenges

• ctf-tools
• ctf-framework

PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12

• cve-2026-109618
• cve-2026-109619
• exploit
• memory-corruption

Checks with NSRL RDS servers looking for for hash matches

Flexible OpenID Connect and OAuth 2.0 server-side implementation for modern ASP.NET projects

• authentication
• authorization
• identity-management
• oauth2

A process monitoring tool that tries to detect exploitation

NTFUZZ: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis (IEEE S&P '21)

• fuzzer
• fuzzing
• kernel-fuzzer
• windows-kernel

A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation

• audit
• cognito
• cybersecurity
• scanner

TranslatedFush Vue MCP — Vue frontend reverse engineering + web security testing tool (Chrome extension + MCP server, 91 tools)

• ai-agents
• anti-debug
• chrome-extension
• mcp

HEhub is a library for homomorphic encryption and its applications, and is part of the PrimiHub project.

• bgv
• ckks
• cryptography
• fhe

Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.

• crtsh
• cve
• cve-2026-109618
• cve-2026-109619

Add a layer of active defense to your cloud applications.

• cybersecurity
• deception
• decoy
• honeytoken

Collection of ssl verification functions for Erlang

• ssl
• erlang
• security
• network

An ActionScript 3 library for interfacing with OAuth 2.0 services.

Words list generator to crack security tokens

eBPF Information Flow Enforcement for AI Agent safety, security and effectiveness

• ebpf
• harness
• ifc
• policy-engine

Git manager for pentesters

Deprecated repo for PANDA 1.0 – see PANDA 2.0 repository

A library of cryptographic primitives (ciphers, hashes, etc) for OCaml

Process HTTP Pcaps With YARA

Mobile runtime detection workbench for AI (iOS and Android)

• frida
• reverse-engineering
• android-security-tools
• frida-gadget

This repository contains reverse engineering results and resources for a few specific car models of a very specific car manufacturer. Please don't sue.

• car-hacking
• automotive-security