Repository Index

Harden Your Security Headers For Vapor

• brokenhands
• swift
• vapor
• server-side-swift

Open-source agentic security operations platform:

• agentic-security
• cyber-security
• cyber-threat-intelligence
• cybersecurity

A platform to develop, run and administer CTF competitions. This is the online echoCTF.RED platform source code

• ctf
• echoctf
• cybersecurity
• hacking

A free, public vulnerability feed: CVE, GHSA, OSV, CISA KEV and EPSS merged into one entry per vulnerability. RSS, JSON API and MCP. Docs and issues only.

• cisa-kev
• cve
• mcp
• osv

Breaks Seewo Whiteboard 3's 15-day trial limit; a game enhancement tool by HuskeyDev.

• activate
• activator
• easinote
• seewo

Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design

• exploit
• php
• php2shell
• php2shell-cve

ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits

• linux
• security
• kernel
• rootkit

A Python library and command line tools to provide interactive log visualization.

• cybersecurity
• investigation
• malware-analysis
• malware-research

The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.

• ai-agents
• bug-bounty
• electron
• offensive-security

Hush is a runtime configuration loader for Elixir applications

• elixir
• aws
• hush
• secret-management

Highly modular & configurable hash & crypto library

• octavo
• crypto-library
• rust
• crypto

Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.

• networking
• udp
• ipv6
• ipv4

php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.

• cve
• hestiacp
• opencart
• php

Sym is a command line utility and a Ruby API that makes it trivial to encrypt and decrypt sensitive data. Unlike many other existing encryption tools, sym focuses on usability and streamlined interface (CLI), with the goal of making encryption easy and transparent. The result? There is no excuse for keeping your application secrets unencrypted :)

A warehouse for your malware

RSA public/private key encryption, private key signing and public key verification in Swift using the Swift Package Manager. Works on iOS, macOS, and Linux (work in progress).

• swift
• rsa-cryptography
• rsa-signature
• macos

基于 ARTEX 的 AI 自主渗透测试系统，支持多 Agent 协作、资产探索与漏洞管理，提供本地部署面板。

• ai-agents
• artex
• cybersecurity
• golang

Provides a unified interface to local and remote authentication systems.

• aura
• authentication
• authenticator
• login

Detect hidden files and text in images

• steganography
• ctf
• stego
• capture-the-flag

Security library for Vert.x: OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...

• java
• vertx
• security
• authentication

Local-only browser fingerprint & identity rotation toolkit for authorized security testing. Tor/obfs4, coherent profiles, WebRTC/DNS leak protection.

• browser-privacy
• cli
• fingerprinting
• identity-rotation

CakePHP TinyAuth plugin for an easy and fast user authentication and authorization. Single or multi role. DB or config file based.

• cakephp-plugin
• acl
• multi-role
• php

Ziti SDK for Golang

• golang
• networking
• sdk
• zero-trust

BLA blinds your agent. LASIK gives it its sight back. Static de-blinding CLI + MCP server that undoes BLA (Blind LLM Agents) hardening so coding agents and REA can read the real code again. Never executes the target.

• ai-agents
• anti-bla
• bla
• claude-code