Repository Index

Open-source agentic security operations platform:

• agentic-security
• cyber-security
• cyber-threat-intelligence
• cybersecurity

php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.

• cve
• hestiacp
• opencart
• php

Local-only browser fingerprint & identity rotation toolkit for authorized security testing. Tor/obfs4, coherent profiles, WebRTC/DNS leak protection.

• browser-privacy
• cli
• fingerprinting
• identity-rotation

A free, public vulnerability feed: CVE, GHSA, OSV, CISA KEV and EPSS merged into one entry per vulnerability. RSS, JSON API and MCP. Docs and issues only.

• cisa-kev
• cve
• mcp
• osv

BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)

• malware-analysis
• reverse-engineering
• debugger
• malware

A library for allowing apps to easily use different auth providers.

High-Fidelity AI-Assisted Deterministic Reverse Engineering FastMCP Server

A simple capture the flag framework.

Scan your computer for applications that are either susceptible to dylib hijacking or have been hijacked.

TranslatedCyclops is a browser with XSS detection capabilities

• security
• xss
• taint-tracking
• vulnerability

[INACTIVE] TLS 1.2 implementation in Rust

Mac browser for Mach-O binaries (macOS, iOS, watchOS, and tvOS)

• macos
• abi
• mach
• mach-o

Fast crypto toolkit for modern client-side JavaScript

Extract the information needed from the Manifest.plist files to convert it to hashes compatible with hashcat

Simple JWT Golang

• jwt
• golang
• authentication
• simple

A framework for receiving and redistributing abuse feeds

A modular Python application to pull intelligence about malicious files

• malware-analysis
• malware-research
• investigation
• cybersecurity

The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX account.

Detect and log CVE-2019-19781 scan and exploitation attempts.

acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.

Anvilogic Forge

• detection
• detection-engineering
• threat-hunting
• snowflake

Go session management for web servers (including support for Google App Engine - GAE).

• gae
• http-session
• session-management

A login service based on mobile phone number for Meteor

Standardized multi-provider OAuth authentication

• oauth2
• omniauth
• multiauth
• crystal-lang