Repository Index

A whole bunch of public pentest reports & papers

TranslatedActionScript (AS3) library for processing binary data. This library contains MD5, SHA-1, SHA-2 ( SHA-224 and SHA-256 ), Base64, CRC32 algorithms, JSON encoder & decoder as well as PNG and JPEG encoders.

• actionscript
• jpeg
• png
• md5

Go client for the GeoServer REST API — workspaces, datastores, layers, styles, security, ACL, GeoWebCache, Importer, plus OWS GetCapabilities/Describe. Tested against GeoServer 2.27 LTS and 2.28 stable.

• geoserver
• gis
• mapping
• golang

Block & stream ciphers, public key crypto, hashing, KDF, MAC, PKCS, TLS, ASN.1, BER/DER, etc.

Delphi basic library for validation and authentication of LDAP users in Active Directory.

• activedirectory
• delphi
• adsi
• ldap

A discord bot for reverse engineers and exploit developers.

🪓 High-Speed Log Analysis & Forensics Tool - Part of NullSec Toolkit

• c
• forensics
• log-analysis
• security

Authenticate users in your Symfony app via a single query parameter (e.g. email and newsletter links).

Repo for the Open Source version of NOVA

analyze a web-based network traffic 🕶 to detect central command and control servers

• squid
• network-traffic
• proxy-server
• incident-response

A dead simple, highly performant, highly customizable sessions middleware for go http servers.

Struts Apache 2 based honeypot as well as a detection module for Apache 2 servers

Paper vault for passwords and secrets

• cryptocurrency
• cryptography
• cybersecurity
• digital-asset-security

provides a full user authentication experience for an API. Includes login,logout,register,forgot password, forgot username, confirmation email and all that other good stuff. Includes plug for checking for authenticated users and macro for generating the required routes.

ThreatTracker is a Python script designed to monitor and generate alerts on given sets of indicators of compromise (IOCs) indexed by a set of Google Custom Search Engines.

Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection

• docker-image
• executable-packing
• malware-packers
• research-platform

A full-featured Swift library for JOSE standards with first-class support for CryptoKit keys, providing JWS, JWT, SD-JWT, and JWE with signing, encryption, and JWK key management.

• jsonwebtoken
• jws
• jwt
• json-web-key

This project is designed to create deceptive webpages to deceive and redirect attackers away from real websites.

• deceptive-webpages
• web-cloner
• honeypot
• deception

🌊 Elixir RSS/ATOM feed builder with a focus on standards compliance, security and extensibility

• elixir
• rss
• atom

Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents

• claude-code
• cti
• llm
• rag

Advanced analysis software for APK payloads created by RATs.

• apk
• remoteaccesstrojan
• reverse-engineering
• aapt

drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates

• docker
• security
• audit

Bind/Reverse Shells, SOCKS, etc over Tor in Golang

• tor
• ethical-hacking
• reverse-shell
• bind-shell

[F]aster [U]niversal [U]npacker