Repository Index

NTFUZZ: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis (IEEE S&P '21)

• fuzzer
• fuzzing
• kernel-fuzzer
• windows-kernel

Run arbitrary code by patching OAT files

• android
• android-app
• kotlin
• kotlin-android

Searches various online resources to try and get as much info about an IP/domain as possible.

Authenticate users in your Symfony app via a single query parameter (e.g. email and newsletter links).

Rolling hash functions in Java

• rolling-hash-functions
• java
• hashing

AI-powered platform for OSINT intelligence analysis. Features archive discovery with hypothesis-driven investigation, GLiNER entity extraction, Mapbox geospatial visualization, network analysis, and document processing. Built with FastAPI, Next.js, Weaviate, and DSPy.

• ai-agents
• document-processing
• dspy
• entity-extraction

Fragscapy is a command-line tool to fuzz network protocols by automating the modification of outgoing network packets. It can run multiple successive tests to determine which options can be used to evade firewalls and IDS.

• fuzzing
• network
• ids
• firewall

🚀 Production-ready AI-friendly Go REST API boilerplate with Clean Architecture, JWT auth, RBAC, PostgreSQL migrations, and highly tested. AI-optimized with built-in guidelines for most used IDEs. Docker hot-reload, Swagger docs, one-command setup. Build production APIs in minutes, not weeks.

• api
• api-documentation
• authentication
• backend

Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise

• detection
• splunk
• bpfdoor
• vulnerability

Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents

• claude-code
• cti
• llm
• rag

NullKia Mobile Security Framework - Tools in Nim, Crystal, V, D, Red, Odin, Haxe, Zig, Kotlin, Lua, PHP, Python | bad-antics | github.com/bad-antics

• android-hacking
• baseband
• bootloader-unlock
• checkm8

Markov-chains for linguistically-correct password cracking

Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies on file access, network operations, and process execution.

• bpf
• ebpf
• kernel
• linux

Gulp.js command execution for humans

• gulp
• execa
• gulp-plugin
• gulpjs

Handles OAuth and stores slack token

• python
• slack
• oauth
• django

Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.

• bpf
• ebpf
• forensics
• golang

Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to find badness.

This tool analyzes a given Gitlab repository and searches for dangling or force-pushed commits containing potential secret or interesting information.

Google Summer of Code 2012 project, supported by The Honeynet Project organization.

Cryptographic Dataset Generation & Modelling Framework

• cryptography
• deep-learning
• deep-neural-networks
• machine-learning

Cumulus. Threat modeling the Clouds.

• card-game
• cornucopia
• elevation-of-privilege
• eop

Data policy IN, dynamic view OUT: PACE is the Policy As Code Engine. It helps you to programatically create and apply a data policy to a processing platform like Databricks, Snowflake or BigQuery (or plain 'ol Postgres, even!) with definitions imported from Collibra, Datahub, ODD and the like.

• data-catalog
• data-processing
• policy-enforcement
• bigquery

Simple view controller to log in and retrieve an access token from LinkedIn.

• ios
• linkedin
• swift
• viewcontroller

Encrypts 64-bit elf files that decrypt at runtime.

• elf64
• linux
• elf-binaries
• elf-parser