Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
- exploit
- php
- php2shell
- php2shell-cve
Repository Index
47,133 repositories indexed
121–144 of 152 · Most stars
Detect hidden files and text in images
- steganography
- ctf
- stego
- capture-the-flag
Open-source agentic security operations platform:
- agentic-security
- cyber-security
- cyber-threat-intelligence
- cybersecurity
The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX account.
The MPT (Mobile Pentest Toolkit) is a must-have solution for your android penetration testing workflow.
Dynamically generate self-signed certificates and certificate authorities for Go tests
- golang
- certificate-generation
- go
- testing
brute force SSH public-key authentication
- ssh
- penetration-testing
- remote-admin-tool
- ssh-key
🚀 Production-ready AI-friendly Go REST API boilerplate with Clean Architecture, JWT auth, RBAC, PostgreSQL migrations, and highly tested. AI-optimized with built-in guidelines for most used IDEs. Docker hot-reload, Swagger docs, one-command setup. Build production APIs in minutes, not weeks.
Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection
- docker-image
- executable-packing
- malware-packers
- research-platform
Secure diceware passphrase generator
drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates
NullKia Mobile Security Framework - Tools in Nim, Crystal, V, D, Red, Odin, Haxe, Zig, Kotlin, Lua, PHP, Python | bad-antics | github.com/bad-antics
- android-hacking
- baseband
- bootloader-unlock
- checkm8
Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies on file access, network operations, and process execution.
Handles OAuth and stores slack token
User management for Play! framework (authentication, registration, password management)
Bash and Python Honeyport scripts
Cryptographic Dataset Generation & Modelling Framework
FETCH THE PASSWORD STRETCHER
- password
- stretcher
- mutations
- cracking
IOS/MAC Denial-Of-Service [POC/EXPLOIT FOR MASSIVE ATTACK TO IOS/MAC IN NETWORK]
A malware dataset curation tool which helps identify packed samples.
Capture The Flag competition challenge write-ups
- ctf
- ctf-writeups
- ctf-solutions
- writeup
Quantum-resistent asymmetric key generation tool for digital signatures.
- post-quantum-cryptography
- uov
- rainbow-scheme
- security-tools
Our super sweet hacker management system, built for HackTCNJ 2017+ | Used by Hack@WPI 2018!
Prompt-injection firewall for LLM applications — 33 input detectors, 9 output scanners, federated ed25519-signed threat-intel feed. Apache 2.0, 1040 tests, F1 96.0% with 0% false positives. Docker, GitHub Action, LangChain/LlamaIndex/CrewAI integrations.
- agentic-ai
- ai-safety
- fastapi
- langchain