Repository Index

CakePHP TinyAuth plugin for an easy and fast user authentication and authorization. Single or multi role. DB or config file based.

• cakephp-plugin
• acl
• multi-role
• php

Randomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.

BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)

• malware-analysis
• reverse-engineering
• debugger
• malware

A library for allowing apps to easily use different auth providers.

TranslatedCyclops is a browser with XSS detection capabilities

• security
• xss
• taint-tracking
• vulnerability

Command line utility and Python package to ease the (un)mounting of forensic disk images

Extract the information needed from the Manifest.plist files to convert it to hashes compatible with hashcat

Tools to make Plug, and Phoenix authentication simple and flexible.

Autonomous DFIR agent: point it at disk images, memory dumps or log exports and get back an investigation that shows its work. Volatility 3, Plaso, YARA and any OpenAI-compatible LLM.

• ai-agent
• dfir
• digital-forensics
• incident-response

An integrated security system for applications built on component

A modular Python application to pull intelligence about malicious files

• malware-analysis
• malware-research
• investigation
• cybersecurity

Anvilogic Forge

• detection
• detection-engineering
• threat-hunting
• snowflake

A login service based on mobile phone number for Meteor

A CTF framework to create, build, deploy and monitor challenges

• ctf-tools
• ctf-framework

御枢 · AegisOps — AI 安全运营工作台：告警研判、应急响应、漏洞整改，连接 Atlas、模型、工具与工作流。

• ai-agents
• secops
• security-operations
• vulnerability-management

Sectiv is a skill-driven AI security review for Burp Suite. Pick captured traffic and a review goal (IDOR, XSS, SQLi, SSRF…), and get a severity dashboard with description, steps to reproduce, impact, PoC, CWE/CVE and HTML/MD/JSON export. Built with Kotlin + Swing on the Montoya API.

HyperOS preinstalled carrier DM components: data collection, crypto, and decryption analysis( com.mobiletools.systemhelper , com.miui.dmregservice , com.miui.guardprovider )

Kustomize generator plugin that generates Secrets from sops-encrypted files

A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation

• audit
• cognito
• cybersecurity
• scanner

Compute message digest for large files in Go

• go
• golang
• checksum
• message-digest

Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.

• crtsh
• cve
• cve-2026-109618
• cve-2026-109619

Malware/IOC ingestion and processing engine

Beacon Object File (BOF) to coerce machine account auth via IPP.

Mobile runtime detection workbench for AI (iOS and Android)

• frida
• reverse-engineering
• android-security-tools
• frida-gadget