Repository Index

A CTF framework to create, build, deploy and monitor challenges

• ctf-tools
• ctf-framework

Standardized multi-provider OAuth authentication

• oauth2
• omniauth
• multiauth
• crystal-lang

PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12

• cve-2026-109618
• cve-2026-109619
• exploit
• memory-corruption

Read-only check for traces of the November 2026 NIKKE PC launcher compromise. Windows, Linux (Proton, Steam Deck) and macOS.

• iced
• incident-response
• indicators-of-compromise
• infostealer

NTFUZZ: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis (IEEE S&P '21)

• fuzzer
• fuzzing
• kernel-fuzzer
• windows-kernel

御枢 · AegisOps — AI 安全运营工作台：告警研判、应急响应、漏洞整改，连接 Atlas、模型、工具与工作流。

• ai-agents
• secops
• security-operations
• vulnerability-management

Flexible OpenID Connect and OAuth 2.0 server-side implementation for modern ASP.NET projects

• authentication
• authorization
• identity-management
• oauth2

Run basic functions from stripped binaries cross platform

Sectiv is a skill-driven AI security review for Burp Suite. Pick captured traffic and a review goal (IDOR, XSS, SQLi, SSRF…), and get a severity dashboard with description, steps to reproduce, impact, PoC, CWE/CVE and HTML/MD/JSON export. Built with Kotlin + Swing on the Montoya API.

HyperOS preinstalled carrier DM components: data collection, crypto, and decryption analysis( com.mobiletools.systemhelper , com.miui.dmregservice , com.miui.guardprovider )

Kustomize generator plugin that generates Secrets from sops-encrypted files

A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation

• audit
• cognito
• cybersecurity
• scanner

Checks with NSRL RDS servers looking for for hash matches

TranslatedAn AI multi-agent security testing platform for authorized security testing and local research.

HEhub is a library for homomorphic encryption and its applications, and is part of the PrimiHub project.

• bgv
• ckks
• cryptography
• fhe

Add a layer of active defense to your cloud applications.

• cybersecurity
• deception
• decoy
• honeytoken

eBPF Information Flow Enforcement for AI Agent safety, security and effectiveness

• ebpf
• harness
• ifc
• policy-engine

Words list generator to crack security tokens

Git manager for pentesters

TranslatedFush Vue MCP — Vue frontend reverse engineering + web security testing tool (Chrome extension + MCP server, 91 tools)

• ai-agents
• anti-debug
• chrome-extension
• mcp

Malware/IOC ingestion and processing engine

A blackhole for your Claude Code.

• agent
• claude-code
• colima
• container-isolation

Mobile runtime detection workbench for AI (iOS and Android)

• frida
• reverse-engineering
• android-security-tools
• frida-gadget

Open Source Telnet Honeypot