Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
- crtsh
- cve
- cve-2026-109618
- cve-2026-109619
Repository Index
47,133 repositories indexed
73–96 of 114 · Most stars
Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.
- cybersecurity
- hacking
- iast
- dast
Rule based authorization for Elixir
Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.
SSH, FTP and Telnet honeypots based on Twisted
Quick ORM RestServer and RestClient based on mORMot framework
- orm
- mormot
- restserver
- restclient
Middleware based authorization for Absinthe GraphQL powered by Bodyguard
analyze a web-based network traffic 🕶 to detect central command and control servers
- squid
- network-traffic
- proxy-server
- incident-response
eBPF Security Monitoring and Sandboxing Agent Based on Aya
Time-Based One-Time Password (TOTP) and HMAC-Based One-Time Password (HOTP) library for Go.
- hotp
- totp
- totp-codes
- authenticator
Struts Apache 2 based honeypot as well as a detection module for Apache 2 servers
A basic flask based Outlook Web Honey pot
- owa
- honeypot
NTP, DNS, SSDP, Chargen and generic UDP-based amplification DDoS honeypot
Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies on file access, network operations, and process execution.
A probably paranoid Golang utility library for securely hashing and encrypting passwords based on the Dropbox method. This implementation uses Blake2b, Scrypt and XSalsa20-Poly1305 (via NaCl SecretBox) to create secure password hashes that are also encrypted using a master passphrase.
- golang
- golang-library
- scrypt
- password-hash
HoneyHTTPD is a Python-based web server honeypot/service imitation builder. Great for honeypots or faking HTTP services.
- python
- honeypot
- honeypot-http
- python-web
Foremost is a console program to recover files based on their headers, footers, and internal data structures. c.f., http://foremost.sourceforge.net/
Text-based logic question captcha's for Rails 🚫🤖
A tool to assist IoT developers in securing MQTT-based IoT deployments
Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to find badness.
Kojoney2 is a low interaction SSH honeypot written in Python. Based on Kojoney by Jose Antonio Coret
Create n-grams of wordlists based on words, characters, or charsets to use in offline password attacks and data analysis
- hashcat
- jtr
- mdxfind
- ngram
Session based authentication and role based security for a Pyramid web application.
Simple key/secret based authentication for APIs