Repository Index

A library for allowing apps to easily use different auth providers.

A simple capture the flag framework.

Command line utility and Python package to ease the (un)mounting of forensic disk images

Fast crypto toolkit for modern client-side JavaScript

Simple JWT Golang

• jwt
• golang
• authentication
• simple

Tools to make Plug, and Phoenix authentication simple and flexible.

Autonomous DFIR agent: point it at disk images, memory dumps or log exports and get back an investigation that shows its work. Volatility 3, Plaso, YARA and any OpenAI-compatible LLM.

• ai-agent
• dfir
• digital-forensics
• incident-response

acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.

A modular Python application to pull intelligence about malicious files

• malware-analysis
• malware-research
• investigation
• cybersecurity

Automated malware unpacker

windows pe packing

Go session management for web servers (including support for Google App Engine - GAE).

• gae
• http-session
• session-management

PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12

• cve-2026-109618
• cve-2026-109619
• exploit
• memory-corruption

Simple framework to extract "actionable" data from Android malware (C&Cs, phone numbers etc.)

Read-only check for traces of the November 2026 NIKKE PC launcher compromise. Windows, Linux (Proton, Steam Deck) and macOS.

• iced
• incident-response
• indicators-of-compromise
• infostealer

NTFUZZ: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis (IEEE S&P '21)

• fuzzer
• fuzzing
• kernel-fuzzer
• windows-kernel

Flexible OpenID Connect and OAuth 2.0 server-side implementation for modern ASP.NET projects

• authentication
• authorization
• identity-management
• oauth2

Run basic functions from stripped binaries cross platform

HyperOS preinstalled carrier DM components: data collection, crypto, and decryption analysis( com.mobiletools.systemhelper , com.miui.dmregservice , com.miui.guardprovider )

A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation

• audit
• cognito
• cybersecurity
• scanner

Compute message digest for large files in Go

• go
• golang
• checksum
• message-digest

Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.

• crtsh
• cve
• cve-2026-109618
• cve-2026-109619

TranslatedFush Vue MCP — Vue frontend reverse engineering + web security testing tool (Chrome extension + MCP server, 91 tools)

• ai-agents
• anti-debug
• chrome-extension
• mcp

Deprecated repo for PANDA 1.0 – see PANDA 2.0 repository