Repository Index

A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule

List DTDs and generate XXE payloads using those local DTDs.

• xxe
• dtd
• security
• hacktoberfest

A mostly-serverless distributed hash cracking platform

Google OAuth Client Library for Java

A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)

• dns
• dns-rebinding
• hacking
• malicious-domains

CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.

Tool to gather Threat Intelligence indicators from publicly available sources

Documenting the unofficial and internal Steam Web API

• documentation
• docs
• wiki
• api-documentation

OpenID Connect Library for Rust

• oauth2-client
• oauth2-authentication
• openid-connect
• openid-client

Charm: A Framework for Rapidly Prototyping Cryptosystems

• python
• cryptography
• prototyping

Making Laravel Passport work with Lumen

• lumen
• passport
• jwt
• oauth2

GUI frontend to John the Ripper password cracker

• gui
• qt
• john
• password

Tiny hashing module that uses the native crypto API in Node.js and the browser

• hashing
• hash-functions
• sha256
• crypto

WinDBG Anti-RootKit Extension

• kernel-mode
• c-plus-plus
• malware
• malware-analysis

User management lib for Phoenix Framework

Easy to use OAuth 2 library for iOS, written in Swift.

• swift
• oauth2

Codesign Electron macOS apps

• electron-osx-sign
• macos
• entitlements
• provisioning-profiles

Nintendo Switch userland code execution using Civilization 7 game cartridge

:no_entry: (DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.

• security
• dfir
• forensics

Elixir encryption library designed for Ecto

• elixir
• encryption
• ecto
• hex

PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.

A collection of programs that access and manipulate ELF files.

An opinionated production-ready SQL-/Swagger-first RESTful JSON API written in Go, highly integrated with VSCode DevContainers by allaboutapps.

• golang-development
• vscode-devcontainers
• golang
• go

AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.

• ai
• attack-surface-management
• bbot
• cybersecurity