47,133 repositories indexed
889–912 of 1,245 · Most stars
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
Machine-learn password mangling rules
Flexible OpenID Connect and OAuth 2.0 server-side implementation for modern ASP.NET projects
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
Checks with NSRL RDS servers looking for for hash matches
HEhub is a library for homomorphic encryption and its applications, and is part of the PrimiHub project.
Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
Add a layer of active defense to your cloud applications.
Collection of ssl verification functions for Erlang
An ActionScript 3 library for interfacing with OAuth 2.0 services.
Words list generator to crack security tokens
eBPF Information Flow Enforcement for AI Agent safety, security and effectiveness
TranslatedFush Vue MCP — Vue frontend reverse engineering + web security testing tool (Chrome extension + MCP server, 91 tools)
Android small footprint inspection tool
A library of cryptographic primitives (ciphers, hashes, etc) for OCaml
Process HTTP Pcaps With YARA
Mobile runtime detection workbench for AI (iOS and Android)
This repository contains reverse engineering results and resources for a few specific car models of a very specific car manufacturer. Please don't sue.
Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.
Universal script packer-- transforms any type of script into a protected ELF executable, encrypted with anti-debugging.
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
Run arbitrary code by patching OAT files
A honeypot for malware that propagates via USB storage devices
Searches various online resources to try and get as much info about an IP/domain as possible.