Scan your computer for applications that are either susceptible to dylib hijacking or have been hijacked.
Repository Index
88,073 visible repositories in the index
1,465–1,488 of 1,737 · Most stars
BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)
A simple capture the flag framework.
Writeups of Capture The Flag Competitions
- ctf
- picoctf
- writeups
- glug
TranslatedCyclops is a browser with XSS detection capabilities
- security
- xss
- taint-tracking
- vulnerability
[INACTIVE] TLS 1.2 implementation in Rust
A flexible playground for Android CTF challenges.
- android
- ctf
- cybersecurity
- playground
Autonomous DFIR agent: point it at disk images, memory dumps or log exports and get back an investigation that shows its work. Volatility 3, Plaso, YARA and any OpenAI-compatible LLM.
An integrated security system for applications built on component
A modular Python application to pull intelligence about malicious files
- malware-analysis
- malware-research
- investigation
- cybersecurity
A collection of hash functions, ciphers, tools, libraries, and materials related to cryptography & security. :closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key: (project was renamed, libchaos is main)
The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX account.
windows pe packing
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
- cve-2026-109618
- cve-2026-109619
- exploit
- memory-corruption
Read-only check for traces of the November 2026 NIKKE PC launcher compromise. Windows, Linux (Proton, Steam Deck) and macOS.
- iced
- incident-response
- indicators-of-compromise
- infostealer
御枢 · AegisOps — AI 安全运营工作台：告警研判、应急响应、漏洞整改，连接 Atlas、模型、工具与工作流。
- ai-agents
- secops
- security-operations
- vulnerability-management
Flexible OpenID Connect and OAuth 2.0 server-side implementation for modern ASP.NET projects
- authentication
- authorization
- identity-management
- oauth2
Sectiv is a skill-driven AI security review for Burp Suite. Pick captured traffic and a review goal (IDOR, XSS, SQLi, SSRF…), and get a severity dashboard with description, steps to reproduce, impact, PoC, CWE/CVE and HTML/MD/JSON export. Built with Kotlin + Swing on the Montoya API.
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
- audit
- cognito
- cybersecurity
- scanner
Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
- crtsh
- cve
- cve-2026-109618
- cve-2026-109619
Add a layer of active defense to your cloud applications.
- cybersecurity
- deception
- decoy
- honeytoken
Collection of ssl verification functions for Erlang
eBPF Information Flow Enforcement for AI Agent safety, security and effectiveness
- ebpf
- harness
- ifc
- policy-engine
Words list generator to crack security tokens