Repository Index

A login service based on mobile phone number for Meteor

Authentication plugin for CakePHP. Can also be used in PSR7 based applications.

• php
• cakephp
• cakephp-plugin
• authentication

A CTF framework to create, build, deploy and monitor challenges

• ctf-tools
• ctf-framework

A LinkedIn OAuth2 strategy for OmniAuth.

Standardized multi-provider OAuth authentication

• oauth2
• omniauth
• multiauth
• crystal-lang

Simple framework to extract "actionable" data from Android malware (C&Cs, phone numbers etc.)

NTFUZZ: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis (IEEE S&P '21)

• fuzzer
• fuzzing
• kernel-fuzzer
• windows-kernel

PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12

• cve-2026-109618
• cve-2026-109619
• exploit
• memory-corruption

Machine-learn password mangling rules

Flexible OpenID Connect and OAuth 2.0 server-side implementation for modern ASP.NET projects

• authentication
• authorization
• identity-management
• oauth2

A process monitoring tool that tries to detect exploitation

Kustomize generator plugin that generates Secrets from sops-encrypted files

Run basic functions from stripped binaries cross platform

A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation

• audit
• cognito
• cybersecurity
• scanner

Checks with NSRL RDS servers looking for for hash matches

Compute message digest for large files in Go

• go
• golang
• checksum
• message-digest

HEhub is a library for homomorphic encryption and its applications, and is part of the PrimiHub project.

• bgv
• ckks
• cryptography
• fhe

Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.

• crtsh
• cve
• cve-2026-109618
• cve-2026-109619

Add a layer of active defense to your cloud applications.

• cybersecurity
• deception
• decoy
• honeytoken

Collection of ssl verification functions for Erlang

• ssl
• erlang
• security
• network

OCaml cryptographic library

An ActionScript 3 library for interfacing with OAuth 2.0 services.

Words list generator to crack security tokens

eBPF Information Flow Enforcement for AI Agent safety, security and effectiveness

• ebpf
• harness
• ifc
• policy-engine