Repository Index

simple YARA-based IOC scanner

• yara
• ioc
• security
• incident-response

A hashcat-based distributed password cracking system

Generate graphs and charts based on password cracking result

• cracking
• hashcat
• matplotlib
• password

A tool for quantitative risk analysis of Android applications based on machine learning techniques

• android
• risk
• android-permissions
• quantitative-risk-analysis

A docker based honeypot.

A mysqldump anonymizer

• mysqldump
• anonymizer
• database-anonymizer
• rgpd

CakePHP TinyAuth plugin for an easy and fast user authentication and authorization. Single or multi role. DB or config file based.

• cakephp-plugin
• acl
• multi-role
• php

TranslatedCyclops is a browser with XSS detection capabilities

• security
• xss
• taint-tracking
• vulnerability

A login service based on mobile phone number for Meteor

Authentication plugin for CakePHP. Can also be used in PSR7 based applications.

• php
• cakephp
• cakephp-plugin
• authentication

Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.

• crtsh
• cve
• cve-2026-109618
• cve-2026-109619

Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.

• cybersecurity
• hacking
• iast
• dast

Rule based authorization for Elixir

TranslatedActionScript (AS3) library for processing binary data. This library contains MD5, SHA-1, SHA-2 ( SHA-224 and SHA-256 ), Base64, CRC32 algorithms, JSON encoder & decoder as well as PNG and JPEG encoders.

• actionscript
• jpeg
• png
• md5

Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.

Digital Forensics Artifacts Knowledge Base

SSH, FTP and Telnet honeypots based on Twisted

• honeypot
• python
• twisted
• ssh

Quick ORM RestServer and RestClient based on mORMot framework

• orm
• mormot
• restserver
• restclient

Middleware based authorization for Absinthe GraphQL powered by Bodyguard

analyze a web-based network traffic 🕶 to detect central command and control servers

• squid
• network-traffic
• proxy-server
• incident-response

eBPF Security Monitoring and Sandboxing Agent Based on Aya

• aya
• bpf
• ebpf
• security

AI-powered platform for OSINT intelligence analysis. Features archive discovery with hypothesis-driven investigation, GLiNER entity extraction, Mapbox geospatial visualization, network analysis, and document processing. Built with FastAPI, Next.js, Weaviate, and DSPy.

• ai-agents
• document-processing
• dspy
• entity-extraction

Time-Based One-Time Password (TOTP) and HMAC-Based One-Time Password (HOTP) library for Go.

• hotp
• totp
• totp-codes
• authenticator

Struts Apache 2 based honeypot as well as a detection module for Apache 2 servers