A platform to develop, run and administer CTF competitions. This is the online echoCTF.RED platform source code
- ctf
- echoctf
- cybersecurity
- hacking
Repository Index
57,637 visible repositories in the index
1,033–1,056 of 1,432 · Most stars
Reverse engineering tool for virtualization wrappers
tr4mpass: Multi-path iOS exploitation framework for A5-A17 with checkm8/checkm9 and forensic gatheri
- a12-bypass
- activator
- bypassing
- checkm8
GasPot originally released at Blackhat 2015 - Updated for the same stuff 2026
Breaks Seewo Whiteboard 3's 15-day trial limit; a game enhancement tool by HuskeyDev.
- activate
- activator
- easinote
- seewo
Open-source agentic security operations platform:
- agentic-security
- cyber-security
- cyber-threat-intelligence
- cybersecurity
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
- exploit
- php
- php2shell
- php2shell-cve
A Python library and command line tools to provide interactive log visualization.
- cybersecurity
- investigation
- malware-analysis
- malware-research
Content discovery and fuzzing with HTTP/3 support (100k requests per second)
A free, public vulnerability feed: CVE, GHSA, OSV, CISA KEV and EPSS merged into one entry per vulnerability. RSS, JSON API and MCP. Docs and issues only.
unXOR will search a XORed file and try to guess the key using known-plaintext attacks.
Hush is a runtime configuration loader for Elixir applications
- elixir
- aws
- hush
- secret-management
Minimal, consistent Python API for building integrations with malware sandboxes.
- sandbox
- malware-analysis
- api-client
- library
Validates passwords against PHP's password_hash function using PASSWORD_DEFAULT. Will rehash when needed, and will upgrade legacy passwords with the Upgrade decorator.
SPARK 2014 re-implementation of the TweetNaCl crypto library
Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.
- networking
- udp
- ipv6
- ipv4
Incident Response Triage - Windows Evidence Collection for Forensic Analysis
Sym is a command line utility and a Ruby API that makes it trivial to encrypt and decrypt sensitive data. Unlike many other existing encryption tools, sym focuses on usability and streamlined interface (CLI), with the goal of making encryption easy and transparent. The result? There is no excuse for keeping your application secrets unencrypted :)
The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.
- ai-agents
- bug-bounty
- electron
- offensive-security
A warehouse for your malware
php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.
- cve
- hestiacp
- opencart
- php
RSA public/private key encryption, private key signing and public key verification in Swift using the Swift Package Manager. Works on iOS, macOS, and Linux (work in progress).
- swift
- rsa-cryptography
- rsa-signature
- macos
Haskell oauth2 binding
- oauth2
- oauth2-client
- haskell
- identity