ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods.
Repository Index
47,133 repositories indexed
73–96 of 122 · Most stars
🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.
- padding-oracle
- aes
- decryption
- encryption
Quantum Insert
- quantum-insert
- python
- detection
- pcap
Open source Windows x64 PE packer and crypter. Compresses and encrypts executables with a custom virtual machine into a self extracting stub.
- compression
- packer
- pe-packer
- pe-compress
Botnet command & control monitor
PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE
GUI for Frida -Scripts
- frida
- frida-server
- gui
- diff-gui
Open-source cross-platform defensive spyware, stalkerware and surveillance software detector
A set of cryptographic primitives for building a multi-hop Proxy Re-encryption scheme, known as Transform Encryption.
- cryptography
- rust
- proxy-re-encryption
- transform-encryption
Elixir Plug to easily add HTTP basic authentication to an app
A tool for quantitative risk analysis of Android applications based on machine learning techniques
- android
- risk
- android-permissions
- quantitative-risk-analysis
quick and dirty canbus h4xing framework
- automotive-security
- canbus
- car-hacking
php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.
- cve
- hestiacp
- opencart
- php
BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)
TranslatedFush Vue MCP — Vue frontend reverse engineering + web security testing tool (Chrome extension + MCP server, 91 tools)
Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
- crtsh
- cve
- cve-2026-109618
- cve-2026-109619
Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.
- cybersecurity
- hacking
- iast
- dast
Universal script packer-- transforms any type of script into a protected ELF executable, encrypted with anti-debugging.
Rails compatible Plug session store
- elixir-plug
- elixir-phoenix
- ruby-on-rails
- rails
Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.
🪓 High-Speed Log Analysis & Forensics Tool - Part of NullSec Toolkit
HOTP/TOTP one time passwords on java phones (J2ME)
- hotp
- j2me
- j2me-platform
- one-time-pad
A dead simple, highly performant, highly customizable sessions middleware for go http servers.
Passwords Fountain - modern & performant password manager interface which works everywhere