Content discovery and fuzzing with HTTP/3 support (100k requests per second)
Repository Index
58,136 visible repositories in the index
121–144 of 168 · Most stars
A free, public vulnerability feed: CVE, GHSA, OSV, CISA KEV and EPSS merged into one entry per vulnerability. RSS, JSON API and MCP. Docs and issues only.
unXOR will search a XORed file and try to guess the key using known-plaintext attacks.
RSA public/private key encryption, private key signing and public key verification in Swift using the Swift Package Manager. Works on iOS, macOS, and Linux (work in progress).
- swift
- rsa-cryptography
- rsa-signature
- macos
Scans SPF and DMARC records for issues that could allow email spoofing.
BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)
TranslatedFush Vue MCP — Vue frontend reverse engineering + web security testing tool (Chrome extension + MCP server, 91 tools)
This repository contains reverse engineering results and resources for a few specific car models of a very specific car manufacturer. Please don't sue.
- car-hacking
- automotive-security
DEPRECATED - Phoenix Authentication library that wraps Guardian for extra functionality
- elixir
- phoenix-framework
- guardian
- authentication
The NoSQL Honeypot Framework
The opposite of Ruler, provides blue teams with the ability to detect Ruler usage against Exchange.
Tool to help guess a files 256 byte XOR key by using frequency analysis
- frequency-analysis
- python
- xor
- malware
Authenticate users in your Symfony app via a single query parameter (e.g. email and newsletter links).
A set of Maltego transforms for VirusTotal Public API v2.0. This set has the added functionality of caching queries on a daily basis to speed up resolutions.
A username/password Strategy for Überauth
- ueberauth
- ueberauth-strategies
- identity
- strategy
Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise
- detection
- splunk
- bpfdoor
- vulnerability
YALIH (Yet Another Low Interaction Honeyclient) is a low Interaction Client honeypot designed to detect malicious websites through signature, anomaly and pattern matching techniques
Mimicry is a dynamic deception tool that actively deceives an attacker during exploitation and post-exploitation.
- backdoor
- honeypot
- incident-response
- security
Text-based logic question captcha's for Rails 🚫🤖
User management for Play! framework (authentication, registration, password management)
Hash cracking WebApp & Server for hashcat
- cracking
- hacking-tool
- hashcat
BLE Edition of the original FistBump (portable WPA handshake grabber)
HElib is an open-source software library that implements homomorphic encryption. It supports the BGV scheme with bootstrapping and the Approximate Number CKKS scheme. HElib also includes optimizations for efficient homomorphic evaluation, focusing on effective use of ciphertext packing techniques and on the Gentry-Halevi-Smart optimizations.
autocrack adds queue support for hashcat cracking.