Repository Index

A framework for receiving and redistributing abuse feeds

An integrated security system for applications built on component

A modular Python application to pull intelligence about malicious files

• malware-analysis
• malware-research
• investigation
• cybersecurity

Automated malware unpacker

The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX account.

Detect and log CVE-2019-19781 scan and exploitation attempts.

acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.

A collection of hash functions, ciphers, tools, libraries, and materials related to cryptography & security. :closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key: (project was renamed, libchaos is main)

windows pe packing

Anvilogic Forge

• detection
• detection-engineering
• threat-hunting
• snowflake

Go session management for web servers (including support for Google App Engine - GAE).

• gae
• http-session
• session-management

A login service based on mobile phone number for Meteor

Authentication plugin for CakePHP. Can also be used in PSR7 based applications.

• php
• cakephp
• cakephp-plugin
• authentication

A CTF framework to create, build, deploy and monitor challenges

• ctf-tools
• ctf-framework

A LinkedIn OAuth2 strategy for OmniAuth.

Standardized multi-provider OAuth authentication

• oauth2
• omniauth
• multiauth
• crystal-lang

Simple framework to extract "actionable" data from Android malware (C&Cs, phone numbers etc.)

NTFUZZ: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis (IEEE S&P '21)

• fuzzer
• fuzzing
• kernel-fuzzer
• windows-kernel

PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12

• cve-2026-109618
• cve-2026-109619
• exploit
• memory-corruption

Machine-learn password mangling rules

Flexible OpenID Connect and OAuth 2.0 server-side implementation for modern ASP.NET projects

• authentication
• authorization
• identity-management
• oauth2

A process monitoring tool that tries to detect exploitation

Kustomize generator plugin that generates Secrets from sops-encrypted files

Run basic functions from stripped binaries cross platform