Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
- post-exploitation
- hacking
- backdoor
- stealth
Repository Index
56,139 visible repositories in the index
121–144 of 452 · Most stars
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
- rootkit
- lkm-rootkit
- c
- kernel
A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper.
- wlan
- wpa
- wpa2
- raspberry-pi
OAuth 2 / OpenID Connect Client API for JavaScript Runtimes
- oidc
- openid
- openid-client
- openid-connect
The best tool for finding one gadget RCE in libc.so.6
- ctf
- pwnable
- pwn
- glibc
OAuth client integration for Symfony. Supports both OAuth1.0a and OAuth2.
An OAuth 2.0 bridge for Laravel and Lumen [DEPRECATED FOR LARAVEL 5.3+]
Collection of cryptographic hash functions written in pure Rust
- cryptographic-hash-functions
- blake2
- gost
- streebog
Streamline your web application's authentication with Polis, an SSO service supporting SAML and OpenID Connect protocols. Beyond enterprise-grade Single Sign-On, it also supports Directory Sync via the SCIM 2.0 protocol for automatic user and group provisioning/de-provisioning.
- enterprise-software
- saml
- saml2
- saml-service-provider
FakeNet-NG - Next Generation Dynamic Network Analysis Tool
- fakenet-ng
- traffic-redirection
- malware-analysis
- mandiant-flare
XSS'OR - Hack with JavaScript.
- probe
- pentest-tool
- xss
- csrf
Super timeline all the things
🔐 oauth2 - A Ruby wrapper for the OAuth 2.0, & 2.1 Authorization Frameworks, including OpenID Connect (OIDC)
- authentication
- authorization
- oauth2
- oauth2-client
Agent-Native multi-platform reverse engineering and CWE-602 client-side authorization audit workbench.
A One Time Password Authentication package, compatible with Google Authenticator.
- php
- 2fa
- two-factor-authentication
- google2fa
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
Autonomous pentest legion — AI commander + worker swarm + layered fact-intent graph. 3rd Tencent Intelligent Attack-Defense online champion (634 teams · 8h unattended · 1B tokens beat 4.5B). The Nüwa Test: give AIs Create/Language/History, let a civilization grow.
Support for OAuth 2 and OpenId Connect (OIDC) in Angular.
OpenID Connect (OIDC) and OAuth2 protocol support for browser-based JavaScript applications
- oidc
- oidc-client
- typescript
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
- cve-2026-109618
- cve-2026-109619
- detection-rules
- exploit
Go login handlers for authentication providers (OAuth1, OAuth2)
Golang OAuth2 server library
JWT login microservice with plugable backends such as OAuth2, Google, Github, htpasswd, osiam, ..
- jwt
- htpasswd
- service
- golang
Port of TweetNaCl cryptographic library to JavaScript
- crypto
- javascript
- authentication
- signature