47,133 repositories indexed
97–120 of 182 · Most stars
Pakkero is a binary packer written in Go made for fun and educational purpose. Its main goal is to take in input a program file (elf binary, script, even appimage) and compress it, protect it from tampering and intrusion.
High-performance pure-javascript SHA1 implementation suitable for large binary data, reaching up to half the native speed.
Things we learned from Capture The Flag hacking competitions we participated in.
Code for cracking passwords with neural networks
Authenticated and encrypted API tokens using modern crypto
Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.
C++11 header-only message digest library
gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that you can join on Google Groups: https://groups.google.com/forum/#!topic/gonids/
PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE
CTF Writeups
SuperGhidra: Autonomous Agent Reverse Engineering, Lock-Free Ghidra Daemon & C++ Recovery Suite
Portable version of Bouncy Castle with support for .NET 4, .NET Standard 2.0, MonoAndroid, Xamarin.iOS, .NET Core
Does their story hold up? Paste what a seller, recruiter or landlord told you and check it against public records in thirty seconds, with proof saved for every reason.
TranslatedPassword generation tool: flexible and scriptable password dictionary generator which can support brute-force, combination, complex rule mode etc...
Modern honeypot supporting multiple services, realistic website cloning, and AI-powered features
Sign in with Apple Support
Supply Chain Security Research - Living Off The Pipeline tools
Check a seller, recruiter or landlord against 3,400+ public sources before you trust them. A verdict in plain words and a saved receipt behind every finding. Runs on your PC.
preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.
A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.
GasPot originally released at Blackhat 2015 - Updated for the same stuff 2026
Validates passwords against PHP's password_hash function using PASSWORD_DEFAULT. Will rehash when needed, and will upgrade legacy passwords with the Upgrade decorator.
Content discovery and fuzzing with HTTP/3 support (100k requests per second)