Repository Index

ThePhish: an automated phishing email analysis tool

• email
• detection
• malware
• phishing

Bloodhound Reporting for Blue and Purple Teams

• active
• directory
• blueteam
• purpleteam

A fast, memory efficient hash map for C++

• hash-tables
• sparse-containers
• unordered
• sparsehash

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.

• github-actions
• actions
• supply-chain-security
• hardening

☁️ Python package for interacting with Steam

• steam
• valve
• steamworks
• webapi

Digital Forensics artifact repository

Automated Red Team Infrastructure deployement using Docker

• offensive
• pentest
• bugbounty
• hacking

A modular vulnerability scanner with automatic report generation capabilities.

• artemis
• pentesting
• security
• security-scanner

Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.

• digital-security
• forensics
• incident-response
• ioc

HellPot is a cross-platform portal to endless suffering meant to punish unruly HTTP bots.

• honeypot
• http
• web
• deception

A pure Python HTML5 parser that just works. No C extensions to compile. No system dependencies to install. No complex API to learn.

• html5
• parser
• python
• html

An information security preparedness tool to do adversarial simulation.

• uber
• vagrant
• yaml
• celery

TranslatedDeepSeek Harness integrated armor-breaking security analysis plugin: aggregating all domains of Android · Web · Native · Protocol · Malware · AI-Security (9 bundles + 1 preset)

• dsh-plugin
• cordis
• deepseek-harness
• dsh

Protect against malicious open source packages 🤖

• devsecops
• security
• supply-chain-security
• policy-as-code

A captcha library that generates audio and image CAPTCHAs.

• captcha

Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.

Ephemeral root via the CVE-2026-43284 page-cache exploit

• android
• android-root
• android-security
• cve-2026-43284

Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.

• golang
• http-server
• https-server
• ctf

OAuth 1 Client

ARES - authorized red-team engagement automation with dashboard, campaign scope, module orchestration, OPSEC controls, encrypted vault, and reporting.

• active-directory
• cloud-security
• defensive-validation
• fastapi

Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.

• anti-crawling
• cloud-native
• crawler
• deception

GetContact CLI adalah project Python untuk melakukan lookup nomor telepon lewat API GetContact, tanpa aplikasi Android dan tanpa browser.

Automatic and platform-independent unpacker for Windows binaries based on emulation

• reverse-engineering
• unpacker
• pefile
• windows

Enables client-side applications to dance OAuth with GitHub.