Repository Index

quick and dirty canbus h4xing framework

• automotive-security
• canbus
• car-hacking

Harden Your Security Headers For Vapor

• brokenhands
• swift
• vapor
• server-side-swift

Content discovery and fuzzing with HTTP/3 support (100k requests per second)

Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design

• exploit
• php
• php2shell
• php2shell-cve

Randomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.

A process monitoring tool that tries to detect exploitation

Compute message digest for large files in Go

• go
• golang
• checksum
• message-digest

An ActionScript 3 library for interfacing with OAuth 2.0 services.

This repository contains reverse engineering results and resources for a few specific car models of a very specific car manufacturer. Please don't sue.

• car-hacking
• automotive-security

Authenticated encrypted API tokens (IETF XChaCha20-Poly1305 AEAD) for Golang

• golang
• tokens
• branca
• jwt

Web interface to explore Suricata EVE outputs

• attack-defense-ctf
• ctf
• network-monitor
• suricata

🦅 EACL: Enterprise Access ControL is a ReBAC Authorization library inspired by SpiceDB, built in Clojure and backed by Datomic Pro, Datahike, Datalevin or DataScript.

• access-control
• clojure
• datalog
• authorization

A whole bunch of public pentest reports & papers

Simple hash algorithms in OCaml

• hash
• ocaml
• sha1
• sha256

TranslatedActionScript (AS3) library for processing binary data. This library contains MD5, SHA-1, SHA-2 ( SHA-224 and SHA-256 ), Base64, CRC32 algorithms, JSON encoder & decoder as well as PNG and JPEG encoders.

• actionscript
• jpeg
• png
• md5

🔑 NaCl.Core, a cryptography library for .NET

• dotnet
• netstandard
• dotnet-core
• chacha20-poly1305

Time-Based One-Time Password (TOTP) and HMAC-Based One-Time Password (HOTP) library for Go.

• hotp
• totp
• totp-codes
• authenticator

Next.js boilerplate for passwordless authentication with Prisma and next-auth with apollo graphql api with style from tailwindcss

Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise

• detection
• splunk
• bpfdoor
• vulnerability

A basic flask based Outlook Web Honey pot

• owa
• honeypot

A probably paranoid Golang utility library for securely hashing and encrypting passwords based on the Dropbox method. This implementation uses Blake2b, Scrypt and XSalsa20-Poly1305 (via NaCl SecretBox) to create secure password hashes that are also encrypted using a master passphrase.

• golang
• golang-library
• scrypt
• password-hash

Ultra high-performance secp256k1 ECC engine | Python, Node.js, Rust, Go, C#, Swift, Java bindings | CUDA, Metal, OpenCL GPU | ECDSA, Schnorr, FROST, MuSig2, BIP-352 | 15+ platforms

• cryptography
• cuda
• riscv
• secp256k1

A performant, 100% native-julia SHA1, SHA2, and SHA3 implementation

• cryptography
• sha1
• sha2
• sha3

🛡️ Free AI that blocks hackers while you sleep. Runs on cheap hardware. When someone in Tokyo gets attacked, you're protected in 30 seconds. No fees. No experts needed. Just protection. One node's detection → everyone's protection.

• ai-security
• cybersecurity
• ids
• iot-security