Repository Index

bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.

• xss
• bxss
• security
• bugbounty

Samsung Tizen root

• embedded-linux
• firmware-analysis
• hardware-hacking
• mali-gpu

Simple to use, simple to deploy, one time self destruct messaging service, with hashicorp vault as a backend

• golang
• vault
• security
• secrets

MCP (Model Context Protocol) server for game hacking & reverse engineering. A structured knowledge base of 4,100+ skills with full source code archives, specialized agents, and workflow tools -- designed to be plugged into Claude, Cursor, or any MCP-compatible client.

Paaster is a secure and user-friendly pastebin application that prioritizes privacy and simplicity. With end-to-end encryption and paste history, Paaster ensures that your pasted code remains confidential and accessible.

• pastebin
• paaster
• e2ee
• paste

:atom: Social (OAuth1\OAuth2\OpenID\OpenIDConnect) sign with PHP :shipit:

• php
• oauth
• social
• oauth-application

The Ultimate Boilerplate for Products.

• boilerplate
• meteor
• meteorjs
• nodejs

🔒Unified API for password hashing algorithms

• credential
• nodejs
• hash-functions
• security

DFIRTrack - The Incident Response Tracking Application

• incident-response
• digital-forensics
• dfir
• incident-response-tooling

Yet another static code analyzer for malicious Android applications

Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.

• blue-team
• detection-engineering
• edr
• endpoint-detection

honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway

• honeytoken
• honeypot
• security
• deception

Collection of example YARA-L rules for use within Google Security Operations

A secure password manager for macOS,Linux and Windows platforms

Delphi implementation of JOSE (JSON Object Signing and Encryption) and JWT (JSON Web Token)

• auth
• delphi
• jwt
• jwt-authentication

🌰 encrypt/decrypt using ssh keys

• encryption
• aes-256
• ssh
• ssh-keys

Catch risky npm dependency changes before they merge.

• dependency-analysis
• devsecops
• github-actions
• malware

Offline, encrypted vault for seed phrases, private keys, passwords and API keys. Also used by agents.

• desktop-app
• encryption
• offline-first
• password-manager

A tool for deploying and detecting use of Active Directory honeytokens

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

• network-security
• security
• arkime
• cybersecurity

Open PS5 firmware 14.10 research: Lua userland experiments, syscall and attack-surface analysis. Kernel read/write and a complete exploit are not demonstrated.

• ps5
• ps5-homebrew
• ps5-jailbreak
• ps5-tools

:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

• cybersecurity
• incident-response
• sysinternals
• nirsoft

OWASP Honeypot, Automated Deception Framework.

• owasp
• honeypot
• honeynet
• deception