🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️
Repository Index
47,133 repositories indexed
121–144 of 180 · Most stars
Open Source SIEM (Security Information and Event Management system).
- siem
- risk-management
- risk-assessment
- vulnerability-management
BINNY: an open source agent harness for reverse engineering. Plug in any model, or a local one.
- ghidra
- llm-agent
- malware-analysis
- ollama
This is an aspiring project aimed at accumulating knowledge from the world of cybersecurity and presenting it in a cogent way, so it is accessible to as large an audience as possible and so that everyone has a good resource to learn hacking from.
A SDK for the creation of analysis tools without obtaining app source code in order to profile runtime performance, examine code coverage, and track high-risk behaviors of a given app on Android 5.0 and above.
- binary-instrument
- android
- malware-research
- reverse-engineering
Open source Windows x64 PE packer and crypter. Compresses and encrypts executables with a custom virtual machine into a self extracting stub.
- compression
- packer
- pe-packer
- pe-compress
PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE
Open-source OSINT intelligence dashboard tracking the Iran conflict in real time — live DeckGL/MapLibre conflict map, 30 bias-labeled feeds, actor dossiers, and daily briefs. Live at conflicts.app.
- deckgl
- geopolitics
- intelligence
- maplibre
Open-source cross-platform defensive spyware, stalkerware and surveillance software detector
Multithreaded threat Intelligence gathering built with Python3
- carbonblack
- python
- threatintel
hackers-grep is a utility to search for strings in PE executables including imports, exports, and debug symbols
TranslatedPassword generation tool: flexible and scriptable password dictionary generator which can support brute-force, combination, complex rule mode etc...
- password-generator
- password-dictionaries
- wordlist-generator
- brute-force
Open Source Threat Intelligence Platform
- cti
- cybersecurity
- security
- intelligence
Cross-platform, open-source shellbag parser
Check a seller, recruiter or landlord against 3,400+ public sources before you trust them. A verdict in plain words and a saved receipt behind every finding. Runs on your PC.
Tools for the Computer Incident Response Team :computer:
- dfir
- python
- carbonblack
- malware-analysis
A platform to develop, run and administer CTF competitions. This is the online echoCTF.RED platform source code
- ctf
- echoctf
- cybersecurity
- hacking
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
- exploit
- php
- php2shell
- php2shell-cve
The fastest 128-bit and 256-bit hash, passes all tests, and under 140 source lines of code. API library and CLI tool in C++ and NodeJS/Wasm
- call-for-papers
- cryptanalysis
- cryptanalysis-tasks
- cryptography
php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.
- cve
- hestiacp
- opencart
- php
Open-source agentic security operations platform:
- agentic-security
- cyber-security
- cyber-threat-intelligence
- cybersecurity
A flexible playground for Android CTF challenges.
- android
- ctf
- cybersecurity
- playground
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
- cve-2026-109618
- cve-2026-109619
- exploit
- memory-corruption
Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
- crtsh
- cve
- cve-2026-109618
- cve-2026-109619