Validates passwords against PHP's password_hash function using PASSWORD_DEFAULT. Will rehash when needed, and will upgrade legacy passwords with the Upgrade decorator.
Repository Index
47,133 repositories indexed
913–936 of 1,357 · Most stars
SPARK 2014 re-implementation of the TweetNaCl crypto library
Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.
- networking
- udp
- ipv6
- ipv4
Sym is a command line utility and a Ruby API that makes it trivial to encrypt and decrypt sensitive data. Unlike many other existing encryption tools, sym focuses on usability and streamlined interface (CLI), with the goal of making encryption easy and transparent. The result? There is no excuse for keeping your application secrets unencrypted :)
The pattern matching swiss knife
JWT auth for Laravel and Lumen
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
- exploit
- php
- php2shell
- php2shell-cve
RSA public/private key encryption, private key signing and public key verification in Swift using the Swift Package Manager. Works on iOS, macOS, and Linux (work in progress).
- swift
- rsa-cryptography
- rsa-signature
- macos
The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.
- ai-agents
- bug-bounty
- electron
- offensive-security
Provides a unified interface to local and remote authentication systems.
- aura
- authentication
- authenticator
- login
Detect hidden files and text in images
- steganography
- ctf
- stego
- capture-the-flag
Elixir Plug library to enable SAML 2.0 SP SSO in Phoenix/Plug applications.
- saml2-sp-sso
- saml-assertion
- plug-pipeline
Security library for Vert.x: OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...
A mysqldump anonymizer
- mysqldump
- anonymizer
- database-anonymizer
- rgpd
Scans SPF and DMARC records for issues that could allow email spoofing.
Open-source agentic security operations platform:
- agentic-security
- cyber-security
- cyber-threat-intelligence
- cybersecurity
OmniAuth Oauth2 strategy for weibo.com.
php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.
- cve
- hestiacp
- opencart
- php
CakePHP TinyAuth plugin for an easy and fast user authentication and authorization. Single or multi role. DB or config file based.
- cakephp-plugin
- acl
- multi-role
- php
Local-only browser fingerprint & identity rotation toolkit for authorized security testing. Tor/obfs4, coherent profiles, WebRTC/DNS leak protection.
- browser-privacy
- cli
- fingerprinting
- identity-rotation
Straightforward HTTP session management
- session-management
- session
- http
- golang
A CHIP-8 interpreter, assembler and disassembler in C
- chip8
- chip-8
- chip8-emulator
- emulator
BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)
A library for allowing apps to easily use different auth providers.