ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods.
Repository Index
55,140 visible repositories in the index
97–120 of 133 · Most stars
Ephemeral root via the CVE-2026-43284 page-cache exploit
This is an aspiring project aimed at accumulating knowledge from the world of cybersecurity and presenting it in a cogent way, so it is accessible to as large an audience as possible and so that everyone has a good resource to learn hacking from.
- cryptography
- hacking
- system
- cheatsheet
Android Framework for Exploitation, is a framework for exploiting android based devices
PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE
collection of C/C++ programs that try to get compilers to exploit undefined behavior
hackers-grep is a utility to search for strings in PE executables including imports, exports, and debug symbols
Utility that exposes the expiry of TLS certificates as Prometheus metrics
Automatically exported from code.google.com/p/jsunpack-n
🗄EOS Tracker: Real time block explorer for EOS Blockchain
- eos
- blockchain
- tracker
- crypto
Public repository for improvements to the EXTRABACON exploit
Every hack, exploit and breach, live: new vulnerabilities, active exploits and breaches on one globe, with sources and one-click fixes.
tr4mpass: Multi-path iOS exploitation framework for A5-A17 with checkm8/checkm9 and forensic gatheri
- a12-bypass
- activator
- bypassing
- checkm8
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
- exploit
- php
- php2shell
- php2shell-cve
Fast, compact 64/128/256-bit non-crypto hash suite (Rainbow & Rainbow 2) passing SMHasher3, plus experimental Rainstorm. C++ and Node.js/Wasm API & CLI
- call-for-papers
- cryptanalysis
- cryptanalysis-tasks
- cryptography
Autonomous DFIR agent: point it at disk images, memory dumps or log exports and get back an investigation that shows its work. Volatility 3, Plaso, YARA and any OpenAI-compatible LLM.
Detect and log CVE-2019-19781 scan and exploitation attempts.
A process monitoring tool that tries to detect exploitation
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
- cve-2026-109618
- cve-2026-109619
- exploit
- memory-corruption
Sectiv is a skill-driven AI security review for Burp Suite. Pick captured traffic and a review goal (IDOR, XSS, SQLi, SSRF…), and get a severity dashboard with description, steps to reproduce, impact, PoC, CWE/CVE and HTML/MD/JSON export. Built with Kotlin + Swing on the Montoya API.
The repository host gives no description.
Web interface to explore Suricata EVE outputs
- attack-defense-ctf
- ctf
- network-monitor
- suricata
A discord bot for reverse engineers and exploit developers.
provides a full user authentication experience for an API. Includes login,logout,register,forgot password, forgot username, confirmation email and all that other good stuff. Includes plug for checking for authenticated users and macro for generating the required routes.