47,133 repositories indexed
121–144 of 182 · Most stars
php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.
Straightforward HTTP session management
Randomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.
Writeups of Capture The Flag Competitions
Extract the information needed from the Manifest.plist files to convert it to hashes compatible with hashcat
Go session management for web servers (including support for Google App Engine - GAE).
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
Checks with NSRL RDS servers looking for for hash matches
Writeups/solutions
A low-to-medium interaction SSH Honeypot with features to capture terminal activity and upload to asciinema.org
Library for working with OpenID Connect and implementing clients.
CTF in a box. Minimal setup required. (not production-ready yet)
Honeypot (Dionaea and kippo) setup script
A set of Maltego transforms for VirusTotal Public API v2.0. This set has the added functionality of caching queries on a daily basis to speed up resolutions.
Upload files securely
A JupyterHub authenticator for LTI
🚀 Production-ready AI-friendly Go REST API boilerplate with Clean Architecture, JWT auth, RBAC, PostgreSQL migrations, and highly tested. AI-optimized with built-in guidelines for most used IDEs. Docker hot-reload, Swagger docs, one-command setup. Build production APIs in minutes, not weeks.
A full-featured Swift library for JOSE standards with first-class support for CryptoKit keys, providing JWS, JWT, SD-JWT, and JWE with signing, encryption, and JWK key management.
Find which of your direct GitHub dependencies is susceptible to RepoJacking attacks
Simple Connect / Express Steam authentication library.
Drupal Honeypot
Security training for the apps you actually ship. Open your browser and start hacking.
HElib is an open-source software library that implements homomorphic encryption. It supports the BGV scheme with bootstrapping and the Approximate Number CKKS scheme. HElib also includes optimizations for efficient homomorphic evaluation, focusing on effective use of ciphertext packing techniques and on the Gentry-Halevi-Smart optimizations.
K8s API Honeypot with Active Defense Capabilities