Repository Index

High-interaction MitM SSH honeypot

🔍A cutting edge context aware GraphQL API fuzzing tool!

• api-testing-framework
• graphql
• api
• automated-testing

The Redexer binary instrumentation framework for Dalvik bytecode

• dex
• dynamic-analysis
• bytecode-manipulation
• dalvik

Protects an unpatched PHP against php2shell (CVE-2026-109618 / CVE-2026-109619): a small extension that mirrors the official fix component by component and steps aside once the engine carries it. PHP 5.6-8.5; Sury, cPanel EA4, DirectAdmin, Docker, Windows.

• cve-2026-109618
• cve-2026-109619
• mitigation
• php

Automatically exported from code.google.com/p/jsunpack-n

A PoC that the USB port is an attack surface for a Mazda car's infotainment system and how Mazda hacks are made

Generate graphs and charts based on password cracking result

• cracking
• hashcat
• matplotlib
• password

Every hack, exploit and breach, live: new vulnerabilities, active exploits and breaches on one globe, with sources and one-click fixes.

• cve
• cybersecurity
• mapbox
• mcp

A tool for quantitative risk analysis of Android applications based on machine learning techniques

• android
• risk
• android-permissions
• quantitative-risk-analysis

Token authentication solution for Phoenix. Useful for APIs for e.g. single page apps.

:sunglasses:Package captcha provides an easy to use, unopinionated API for captcha generation

• golang
• captcha
• captcha-generator
• image-captcha

Deploy a Cloudflare Worker to sanely score users' new passwords with zxcvbn AND check for matches against haveibeenpwned's 10+ billion breached accounts

• haveibeenpwned
• cloudflare
• zxcvbn
• serverless

Python implementation of the Packed Executable iDentifier (PEiD)

• peid
• peid-signature
• pe-file
• pe-files

Tools for the Computer Incident Response Team :computer:

• dfir
• python
• carbonblack
• malware-analysis

tr4mpass: Multi-path iOS exploitation framework for A5-A17 with checkm8/checkm9 and forensic gatheri

• a12-bypass
• activator
• bypassing
• checkm8

Open-source agentic security operations platform:

• agentic-security
• cyber-security
• cyber-threat-intelligence
• cybersecurity

A Python library and command line tools to provide interactive log visualization.

• cybersecurity
• investigation
• malware-analysis
• malware-research

Hush is a runtime configuration loader for Elixir applications

• elixir
• aws
• hush
• secret-management

Minimal, consistent Python API for building integrations with malware sandboxes.

• sandbox
• malware-analysis
• api-client
• library

SPARK 2014 re-implementation of the TweetNaCl crypto library

Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.

• networking
• udp
• ipv6
• ipv4

Incident Response Triage - Windows Evidence Collection for Forensic Analysis

UnTangled — the easy, modern web interface for OpenWRT. A friendly LuCI alternative: Network Map, Mesh Wi-Fi, parental controls, VPN, QoS. ~75 KB, offline-first, runs alongside LuCI.

• apk
• dashboard
• firewall
• home-network

The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.

• ai-agents
• bug-bounty
• electron
• offensive-security