Z-Hound — a CSV-first collector that finds public threat reports and extracts structured IoCs without a database, LLM, or API key.
Repository Index
47,133 repositories indexed
97–120 of 128 · Most stars
Content discovery and fuzzing with HTTP/3 support (100k requests per second)
php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.
- cve
- hestiacp
- opencart
- php
Go session management for web servers (including support for Google App Engine - GAE).
- gae
- http-session
- session-management
Run basic functions from stripped binaries cross platform
A whole bunch of public pentest reports & papers
Go client for the GeoServer REST API — workspaces, datastores, layers, styles, security, ACL, GeoWebCache, Importer, plus OWS GetCapabilities/Describe. Tested against GeoServer 2.27 LTS and 2.28 stable.
- geoserver
- gis
- mapping
- golang
Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.
OPNSense's Suricata IDS/IPS Detection Rules Against NMAP Scans
- crowdsec
- intrusion-detection
- intrusion-detection-system
- intrusion-prevention
A full-featured Swift library for JOSE standards with first-class support for CryptoKit keys, providing JWS, JWT, SD-JWT, and JWE with signing, encryption, and JWK key management.
- jsonwebtoken
- jws
- jwt
- json-web-key
A PE (Portable Executable) packer with Huffman Compression and Xor encryption.
- huffman-compression
- huffman-algorithm
- pe-header
- packer
BLE Edition of the original FistBump (portable WPA handshake grabber)
Bash and Python Honeyport scripts
HElib is an open-source software library that implements homomorphic encryption. It supports the BGV scheme with bootstrapping and the Approximate Number CKKS scheme. HElib also includes optimizations for efficient homomorphic evaluation, focusing on effective use of ciphertext packing techniques and on the Gentry-Halevi-Smart optimizations.
Native WebAuthn/Passkey support for Electron on macOS using Apple's AuthenticationServices framework
- authenticationservices
- electron
- electron-builder
- fido2
Google Summer of Code 2012 project, supported by The Honeynet Project organization.
autocrack adds queue support for hashcat cracking.
Data policy IN, dynamic view OUT: PACE is the Policy As Code Engine. It helps you to programatically create and apply a data policy to a processing platform like Databricks, Snowflake or BigQuery (or plain 'ol Postgres, even!) with definitions imported from Collibra, Datahub, ODD and the like.
- data-catalog
- data-processing
- policy-enforcement
- bigquery
Rule Processor Y is a next-gen Rule processor with complex multibyte character support built to support Hashcat
- cybersecurity
- hashcat
- hashcat-rules
- johntheripper
Library for working with RSA keys using Elixir and OpenSSL ports
Port listener / honeypot in Rust with protocol guessing and safe string display
Ciao is an easy-to-use Common Lisp OAuth 2.0 client library. It is a port of the Racket OAuth 2.0 Client (package: webapi) to Common Lisp.
- common-lisp
- oauth2-client
- oauth2
Mochi is a authentication shard inspired by devise. Mochi is designed for the Amber framework with support for both Granite & Jennifer ORM's.
A simple low-interaction port monitoring honeypot.