Open-source agentic security operations platform:
- agentic-security
- cyber-security
- cyber-threat-intelligence
- cybersecurity
Repository Index
59,621 visible repositories in the index
1,681–1,704 of 2,422 · Most stars
A free, public vulnerability feed: CVE, GHSA, OSV, CISA KEV and EPSS merged into one entry per vulnerability. RSS, JSON API and MCP. Docs and issues only.
Library to generate TOTP/HOTP codes
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
- exploit
- php
- php2shell
- php2shell-cve
A Python library and command line tools to provide interactive log visualization.
- cybersecurity
- investigation
- malware-analysis
- malware-research
Content discovery and fuzzing with HTTP/3 support (100k requests per second)
Scalable Binary Data Extraction in Hadoop
An Elixir implementation of the JSON Web Token (JWT) Standard, RFC 7519
unXOR will search a XORed file and try to guess the key using known-plaintext attacks.
Hush is a runtime configuration loader for Elixir applications
- elixir
- aws
- hush
- secret-management
Minimal, consistent Python API for building integrations with malware sandboxes.
- sandbox
- malware-analysis
- api-client
- library
Validates passwords against PHP's password_hash function using PASSWORD_DEFAULT. Will rehash when needed, and will upgrade legacy passwords with the Upgrade decorator.
Highly modular & configurable hash & crypto library
- octavo
- crypto-library
- rust
- crypto
A debugger frontend
SPARK 2014 re-implementation of the TweetNaCl crypto library
Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.
- networking
- udp
- ipv6
- ipv4
Incident Response Triage - Windows Evidence Collection for Forensic Analysis
OAuth 2.x and OpenID Connect C library
Sym is a command line utility and a Ruby API that makes it trivial to encrypt and decrypt sensitive data. Unlike many other existing encryption tools, sym focuses on usability and streamlined interface (CLI), with the goal of making encryption easy and transparent. The result? There is no excuse for keeping your application secrets unencrypted :)
The pattern matching swiss knife
Spam Honeypot with Intelligent Virtual Analyzer
php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.
- cve
- hestiacp
- opencart
- php
The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.
- ai-agents
- bug-bounty
- electron
- offensive-security