Repository Index

Laravel Ban simplify blocking and banning Eloquent models.

• laravel
• eloquent
• cog
• trait

Wordlist, rules and masks from Kaonashi project (RootedCON 2019)

• wordlist
• password
• password-strength
• password-safety

Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).

• fastapi
• flask
• django
• content-security-policy

Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.

"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.

• pentesting
• hacking
• hacking-tool
• pentest-tool

RockYou2021.txt is a MASSIVE WORDLIST compiled of various other wordlists. RockYou2021.txt DOES NOT CONTAIN USER:PASS logins!

• wordlist
• rockyou
• rockyou2021
• wordlists

Audited & minimal JS implementation of elliptic curve cryptography.

• crypto
• cryptography
• ecdsa
• ed25519

Scan files or process memory for CobaltStrike beacons and parse their configuration

Run programs on linux with selectively restricted permissions.

• python
• security
• containers
• docker

TranslatedREA: Reverse Everything. Through one MCP service, reverse-engineer and analyze binary files, applications, and runtime behavior. See a feature you like, figure out how it works, and dig down to the binary level.

A lightweight, secure, easy-to-use crypto library suitable for constrained environments.

• crypto
• embedded-systems
• cryptography
• embedded

A machine learning tool that ranks strings based on their relevance for malware analysis.

• machine-learning
• fireeye-flare
• strings
• malware-analysis

Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.

• ruby
• hacking
• infosec
• ctf-tools

Win Application Framework (WAF) is a lightweight Framework that helps you to create well structured XAML Applications.

• waf
• dotnet
• csharp
• wpf

A mostly-serverless distributed hash cracking platform

Go-Guardian is a golang library that provides a simple, clean, and idiomatic way to create powerful modern API and web authentication.

• golang
• totp
• hotp
• 2fa

OmniAuth strategy for Twitter

Simple to use, simple to deploy, one time self destruct messaging service, with hashicorp vault as a backend

• golang
• vault
• security
• secrets

USB Keystroke Injection Protection

Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness

Users Plugin for CakePHP

• cakephp
• users
• plugin
• registration

Using Intel's PIN tool to solve CTF problems

• ctf
• pin
• reverse-engineering
• instruction-counting

GitHub strategy for OmniAuth

• omniauth
• omniauth-strategy
• authentication
• github

Open PS5 firmware 14.10 research: Lua userland experiments, syscall and attack-surface analysis. Kernel read/write and a complete exploit are not demonstrated.

• ps5
• ps5-homebrew
• ps5-jailbreak
• ps5-tools