Repository Index

Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design

• exploit
• php
• php2shell
• php2shell-cve

BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)

• malware-analysis
• reverse-engineering
• debugger
• malware

A modular Python application to pull intelligence about malicious files

• malware-analysis
• malware-research
• investigation
• cybersecurity

PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12

• cve-2026-109618
• cve-2026-109619
• exploit
• memory-corruption

This repository contains reverse engineering results and resources for a few specific car models of a very specific car manufacturer. Please don't sue.

• car-hacking
• automotive-security

Searches various online resources to try and get as much info about an IP/domain as possible.

AI-powered platform for OSINT intelligence analysis. Features archive discovery with hypothesis-driven investigation, GLiNER entity extraction, Mapbox geospatial visualization, network analysis, and document processing. Built with FastAPI, Next.js, Weaviate, and DSPy.

• ai-agents
• document-processing
• dspy
• entity-extraction

Tool used for dumping memory from Android devices

ThreatTracker is a Python script designed to monitor and generate alerts on given sets of indicators of compromise (IOCs) indexed by a set of Google Custom Search Engines.

Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection

• docker-image
• executable-packing
• malware-packers
• research-platform

Sublime Malware Research Tool

Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes

• entropy
• pe-file
• pe-files
• pe-format

This tool analyzes a given Gitlab repository and searches for dangling or force-pushed commits containing potential secret or interesting information.

Cryptographic Dataset Generation & Modelling Framework

• cryptography
• deep-learning
• deep-neural-networks
• machine-learning

Packing detection tool for PE files

• detector
• pe-file
• pe-format
• peid

ESPot - ElasticSearch Honeypot

A complete, reliable, secure and open source webapp based on zero-knowledge encryption to deal with TOTP

• totp
• webapp
• zero-knowledge-encryption

Firebase Authentication Middleware for Go Fiber framework.

• go
• fiber
• firebase
• middleware

Encrypted .env files with TOTP unsealing for production deploys. Cross-stack (Node + Java). Zero deps. Defends against npm supply-chain attacks.

• 2fa
• aes-gcm
• dotenv
• encryption

Implementation of the packing detection heuristic from the paper "Packed PE File Detection for Malware Forensics" of Han et al.

• binary-analysis
• entropy
• entrypoint
• executable-packing

A simple tool to organise large malicious/benign files into a organised Structure.

• malware
• malware-analysis
• malware-research
• clean-file