Aegis VaultGrid: pairs a CS2 inventory vault with a fee-aware order planner. Local JSON state, no account needed to browse.
- cs2
- desktop-app
- inventory
- local-first
Repository Index
47,133 repositories indexed
1,081–1,104 of 1,488 · Most stars
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
- exploit
- php
- php2shell
- php2shell-cve
Security library for Vert.x: OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...
macOS menu-bar app for fine-grained VPN routing: bypass the VPN for chosen domains/services, force others through it, or (Custom mode) route each domain/subnet out a specific egress — direct, a specific VPN, an HTTP/SOCKS5 proxy, or a Tailscale peer. Includes a vpnb CLI.
- macos
- menu-bar-app
- networking
- split-tunneling
The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.
- ai-agents
- bug-bounty
- electron
- offensive-security
Aegis Skin Terminal: local-first CS2 trading workspace with a fee-aware spread scanner, vault workspace and offline Steam Guard codes.
- counter-strike
- cs2
- desktop-app
- react
OpenID Connect, the authentication protocol and identity layer on top of OAuth 2.0 used in many SSO and adopted in many social logins (Apple, Facebook, Google, ...etc). Find this curated list of providers, services, libraries, and resources to adopt it and know more about existing specs.
Open-source Docker infrastructure platform. One web UI — containers, security, DNS, VPN, monitoring, backups, reverse proxy, terminal, and multi-node orchestration. Replace a dozen tools with one.
- agplv3
- docker
- docker-container
- docker-deployment
php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.
- cve
- hestiacp
- opencart
- php
Ziti SDK for Golang
- golang
- networking
- sdk
- zero-trust
Local-only browser fingerprint & identity rotation toolkit for authorized security testing. Tor/obfs4, coherent profiles, WebRTC/DNS leak protection.
- browser-privacy
- cli
- fingerprinting
- identity-rotation
A collection of LPEG patterns
- lua
- lpeg
- uri
- uri-parser
Open-source agentic security operations platform:
- agentic-security
- cyber-security
- cyber-threat-intelligence
- cybersecurity
Mock an SSH server and define all commands it supports (Python, Twisted)
[WIP] Simple mobile applications sandbox file browser tool. Powered with [frida.re](https://www.frida.re).
Yet another URI library for Common Lisp
- common-lisp
- uri
WELA (Windows Event Log Analyzer, ゑ羅) is a tool for auditing and configuring Windows event log settings. Windows event logs are a vital source of information for Digital Forensics and Incident Response (DFIR), providing visibility into system activity and security events.
A free, public vulnerability feed: CVE, GHSA, OSV, CISA KEV and EPSS merged into one entry per vulnerability. RSS, JSON API and MCP. Docs and issues only.
TranslatedCyclops is a browser with XSS detection capabilities
- security
- xss
- taint-tracking
- vulnerability
Bindings to the Tauri API for projects using wasm-bindgen
Pure-Go SQL parser, formatter, linter and security scanner for 8 dialects. Zero-copy, race-free, with an LSP and MCP server.
A modular Python application to pull intelligence about malicious files
- malware-analysis
- malware-research
- investigation
- cybersecurity
TranslatedA guide to avoiding scams in the human world: 373 scam breakdowns covering 16 categories, including fake-order task scams (刷单), pig-butchering scams (杀猪盘), AI face-swapping, and scams targeting the elderly; includes real case reports, everyday self-check lists, PDF/EPUB/Anki downloads, and a scam-avoidance mini-game with 12 rounds
- anti-fraud
- anti-scam
- chinese
- scam-awareness
A flexible playground for Android CTF challenges.
- android
- ctf
- cybersecurity
- playground