The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups
Slider captcha support mobile
Universal web application security sensor intended for real-time monitoring and defense.
A collection of useful utility functions
- utility
- utilities
- string
- strings
inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques
Splunk code (SPL) for serious threat hunters and detection engineers.
Small portable Elliptic-Curve Diffie-Hellman in C
- elliptic-curve-diffie-hellman
- ecdh
- public-key-cryptography
- c
File Scanning Framework
👤Minimalist Google OAuth Authentication for Elixir Apps. Tested, Documented & Maintained. Setup in 5 mins. 🚀
- elixir
- google
- google-api
- auth
A USB proxy based on raw-gadget and libusb
Elliptic curve cryptography functions: Private Key, Public Key, Signature, AES, Encryption, Decryption
Very fast, high-quality hash function, discrete-incremental and streamed hashing-capable (non-cryptographic, header-only C/C++) 27GB/s + PRNG
:key: Idiotproof golang password validation library inspired by Python's passlib
Cryptographic library for Embarcadero Delphi and potentially for FPC as well
- delphi
- key-deviation-algorithms
- cryptographic-checksums
- kdf1
Inspektor is a protocol-aware proxy that is used to enforce access policies👮
ROPMEMU is a framework to analyze, dissect and decompile complex code-reuse attacks.
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
- cve-2026-109618
- cve-2026-109619
- exploit
- mod-php
The JavaScript Crypto Library provides web developers with an extensive and efficient set of cryptographic functions. The library aims to obtain maximum execution speed while preserving modularity and reusability. The library is released as open source under a BDS license.
A Rails 6 boilerplate to create your next Saas product. Preloaded with graphQL, devise, JWT, CanCanCan, RailsAdmin, Rubocop, Rspec, i18n and more.
An SMTP Honeypot
Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities
Pakkero is a binary packer written in Go made for fun and educational purpose. Its main goal is to take in input a program file (elf binary, script, even appimage) and compress it, protect it from tampering and intrusion.
The Volatility Collaborative GUI
- volatility-gui
- volatility-framework
- volatility
- memory-dump
Generic Capacitor OAuth 2 client plugin. Stop the war in Ukraine!