🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse-engineering agents like REA. Poison -> Exhaust -> Hallucinate.
The best tool for finding one gadget RCE in libc.so.6
A tool to abuse Exchange services
Collection of cryptographic hash functions written in pure Rust
- cryptographic-hash-functions
- blake2
- gost
- streebog
Jwt.Net, a JWT (JSON Web Token) implementation for .NET
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte
Open-Source Shellcode & PE Packer
- shellcode
- antivirus-evasion
- redteam
- hacktoberfest
Minimalistic web app designed for sending private and secure notes.
- end-to-end-encryption
- minimalist
- note
- pastebin
Reverse Shell as a Service
A little utility for managing credentials in the cloud
Basic implementations of standard cryptography algorithms, like AES and SHA-1.
Your Everyday Threat Intelligence
A helm plugin that help manage secrets with Git workflow and store them anywhere
Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.
- wordlist
- wordlist-generator
- password
- cracking
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
- cve-2026-109618
- cve-2026-109619
- detection-rules
- exploit
Golang OAuth2 server library
Port of TweetNaCl cryptographic library to JavaScript
Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation
Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.
A tool for automating cracking methodologies through Hashcat from the TrustedSec team.
Hashtopolis - distributed password cracking with Hashcat
Phishing catcher using Certstream
LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines.
An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity