Repository Index

Scalable Binary Data Extraction in Hadoop

An Elixir implementation of the JSON Web Token (JWT) Standard, RFC 7519

unXOR will search a XORed file and try to guess the key using known-plaintext attacks.

Highly modular & configurable hash & crypto library

• octavo
• crypto-library
• rust
• crypto

SPARK 2014 re-implementation of the TweetNaCl crypto library

UnTangled — the easy, modern web interface for OpenWRT. A friendly LuCI alternative: Network Map, Mesh Wi-Fi, parental controls, VPN, QoS. ~75 KB, offline-first, runs alongside LuCI.

• apk
• dashboard
• firewall
• home-network

Sym is a command line utility and a Ruby API that makes it trivial to encrypt and decrypt sensitive data. Unlike many other existing encryption tools, sym focuses on usability and streamlined interface (CLI), with the goal of making encryption easy and transparent. The result? There is no excuse for keeping your application secrets unencrypted :)

A mysqldump anonymizer

• mysqldump
• anonymizer
• database-anonymizer
• rgpd

Provides a unified interface to local and remote authentication systems.

• aura
• authentication
• authenticator
• login

Detect hidden files and text in images

• steganography
• ctf
• stego
• capture-the-flag

Fast, compact 64/128/256-bit non-crypto hash suite (Rainbow & Rainbow 2) passing SMHasher3, plus experimental Rainstorm. C++ and Node.js/Wasm API & CLI

• call-for-papers
• cryptanalysis
• cryptanalysis-tasks
• cryptography

Local-only browser fingerprint & identity rotation toolkit for authorized security testing. Tor/obfs4, coherent profiles, WebRTC/DNS leak protection.

• browser-privacy
• cli
• fingerprinting
• identity-rotation

Ziti SDK for Golang

• golang
• networking
• sdk
• zero-trust

BLA blinds your agent. LASIK gives it its sight back. Static de-blinding CLI + MCP server that undoes BLA (Blind LLM Agents) hardening so coding agents and REA can read the real code again. Never executes the target.

• ai-agents
• anti-bla
• bla
• claude-code

Writeups of Capture The Flag Competitions

• ctf
• picoctf
• writeups
• glug

TranslatedCyclops is a browser with XSS detection capabilities

• security
• xss
• taint-tracking
• vulnerability

[INACTIVE] TLS 1.2 implementation in Rust

Autonomous DFIR agent: point it at disk images, memory dumps or log exports and get back an investigation that shows its work. Volatility 3, Plaso, YARA and any OpenAI-compatible LLM.

• ai-agent
• dfir
• digital-forensics
• incident-response

acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.

The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX account.

Detect and log CVE-2019-19781 scan and exploitation attempts.

A process monitoring tool that tries to detect exploitation

Standardized multi-provider OAuth authentication

• oauth2
• omniauth
• multiauth
• crystal-lang

PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12

• cve-2026-109618
• cve-2026-109619
• exploit
• memory-corruption