Anvilogic Forge
- detection
- detection-engineering
- threat-hunting
- snowflake
61,121 visible repositories in the index
97–120 of 122 · Most stars
Anvilogic Forge
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
Read-only check for traces of the November 2026 NIKKE PC launcher compromise. Windows, Linux (Proton, Steam Deck) and macOS.
Deprecated repo for PANDA 1.0 – see PANDA 2.0 repository
This repository contains reverse engineering results and resources for a few specific car models of a very specific car manufacturer. Please don't sue.
Delphi basic library for validation and authentication of LDAP users in Active Directory.
The current repository contains all the scripts needed to build kernel-mode mac-a-mal malicious activity hooking on macOS.
Middleware based authorization for Absinthe GraphQL powered by Bodyguard
A mirror of the nettle repository
Tool used for dumping memory from Android devices
Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents
Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies on file access, network operations, and process execution.
A short and small memory forensics helper.
This script takes a file or directory as input, uses GPG AES256 symmetric encryption with the password you provide and adds it to IPFS and returns the IPFS hash.
This tool analyzes a given Gitlab repository and searches for dangling or force-pushed commits containing potential secret or interesting information.
Example repository for GitHub Actions Time of Check to Time of Use (TOCTOU vulnerabilities)
Pyramid web framework session factory backed by Redis
Rule Processor Y is a next-gen Rule processor with complex multibyte character support built to support Hashcat
Microsoft Strategy for Überauth
ROP Wargame repository
The plugin repository for Honeycomb, the honeypot framework by Cymmetria
The open-source safety layer for AI agents — block unsafe tool calls, require approval, enforce budgets, audit, replay.
Medusa Repository: Transynther tool and Medusa Attack
MICROS Honeypot is a low interaction honeypot to detect CVE-2018-2636 in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (MICROS). This is a directory traversal vulnerability.