Malware exploits
Repository Index
73,362 visible repositories in the index
169–192 of 301 · Most stars
MCP (Model Context Protocol) server for game hacking & reverse engineering. A structured knowledge base of 4,100+ skills with full source code archives, specialized agents, and workflow tools -- designed to be plugged into Claude, Cursor, or any MCP-compatible client.
Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux
Offline, encrypted vault for seed phrases, private keys, passwords and API keys. Also used by agents.
Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF
- owasp
- ctf
- ctfd
- application-security
A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
- threat
- hunt
- red
- blue
A tiny Elixir library for time-based one time passwords (TOTP)
A modern and easy-to-use cryptographic library for .NET based on libsodium
- aead
- aes-gcm
- blake2b
- chacha20-poly1305
Simple, drag-and-drop, password-based file encryption
- encryption-utility
- cross-platform
- encryption
- gui
Java cryptographic library that supports Argon2, bcrypt, scrypt and PBKDF2 aimed to protect passwords in databases. Easy to use by design, highly customizable, secure and portable. All the implementations follow the standards and have been reviewed to perform better in the JVM.
- pbkdf2
- bcrypt
- scrypt
- argon2
Firebase Admin .NET SDK
- firebase
- firebase-auth
- firebase-admin-sdk
- firebase-admin
Not actively maintained - Authentication library for Phoenix, and other Plug-based, web applications
- phoenix-framework
- elixir
HIBA is a system built on top of regular OpenSSH certificate-based authentication that allows to manage flexible authorization of principals on pools of target hosts without the need to push customized authorized_users files periodically.
Guardian DB integration for tracking tokens and ensuring logout cannot be replayed.
- guardian
- database
- guardian-db
Simple promise-based session middleware for Next.js, micro, Express, and more
- javascript
- middleware
- session
- promise
Evidence-based DSM ransomware recovery: preservation, RAM key recovery, copy decryption, and GitLab validation.
Scope-based authorization for Ruby on Rails.
Reverse engineering tool for automatic structure recovering and memory use analysis based on DynamoRIO and Capstone
Following googlecode project crypto-js, provide standard and secure cryptographic algorithms for NodeJS. Support MD5, SHA-1, SHA-256, RC4, Rabbit, AES, DES, PBKDF2, HMAC, OFB, CFB, CTR, CBC, Base64
A Lean backend framework whose authorization safety is formally proven. The developer writes only a Cedar schema and policies; handlers are built on Supabase Auth and PostgreSQL.
- access-control
- authorization
- backend-framework
- cedar
A production-ready SaaS template built with Next.js 15, Supabase, and Tailwind CSS. Includes authentication, user management, file storage, task management demos, and secure RLS policies. Now with a complete React Native + Expo mobile app template! Easily customizable with pre-built themes, i18n support (EN/PL/ZH), and legal documents.
Inject OWASP recommended HTTP Headers for increased security in a single line
- aspnetcore
- middleware
- owasp
- security
The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups
- active-directory
- cheatsheet
- ctf
- cybersecurity
HAT (Hashcat Automation Tool) - An Automated Hashcat Tool for common wordlists and rules to speed up the process of cracking hashes during engagements. Created for Linux based systems