Repository Index

Open-source agentic security operations platform:

• agentic-security
• cyber-security
• cyber-threat-intelligence
• cybersecurity

The fastest 128-bit and 256-bit hash, passes all tests, and under 140 source lines of code. API library and CLI tool in C++ and NodeJS/Wasm

• call-for-papers
• cryptanalysis
• cryptanalysis-tasks
• cryptography

OmniAuth Oauth2 strategy for weibo.com.

php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.

• cve
• hestiacp
• opencart
• php

CakePHP TinyAuth plugin for an easy and fast user authentication and authorization. Single or multi role. DB or config file based.

• cakephp-plugin
• acl
• multi-role
• php

Simple ELF crypter. Uses RC4 encryption.

Ziti SDK for Golang

• golang
• networking
• sdk
• zero-trust

Local-only browser fingerprint & identity rotation toolkit for authorized security testing. Tor/obfs4, coherent profiles, WebRTC/DNS leak protection.

• browser-privacy
• cli
• fingerprinting
• identity-rotation

Straightforward HTTP session management

• session-management
• session
• http
• golang

A free, public vulnerability feed: CVE, GHSA, OSV, CISA KEV and EPSS merged into one entry per vulnerability. RSS, JSON API and MCP. Docs and issues only.

• cisa-kev
• cve
• mcp
• osv

Stream encryption & decryption with libsodium and protobuf

• crypto
• cryptography
• protobuf
• libsodium

Randomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.

A CHIP-8 interpreter, assembler and disassembler in C

• chip8
• chip-8
• chip8-emulator
• emulator

TR-069 Honeypot

BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)

• malware-analysis
• reverse-engineering
• debugger
• malware

A library for allowing apps to easily use different auth providers.

Hashcat wrapper to help automate the cracking process

High-Fidelity AI-Assisted Deterministic Reverse Engineering FastMCP Server

A simple capture the flag framework.

Writeups of Capture The Flag Competitions

• ctf
• picoctf
• writeups
• glug

Scan your computer for applications that are either susceptible to dylib hijacking or have been hijacked.

TranslatedCyclops is a browser with XSS detection capabilities

• security
• xss
• taint-tracking
• vulnerability

[INACTIVE] TLS 1.2 implementation in Rust

Command line utility and Python package to ease the (un)mounting of forensic disk images