71,372 visible repositories in the index
193–216 of 272 · Most stars
The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups
A collection of useful utility functions
Small portable Elliptic-Curve Diffie-Hellman in C
Automatically exported from code.google.com/p/creddump
Cryptographic library for Embarcadero Delphi and potentially for FPC as well
A free software to find the components installed in Joomla CMS, built out of the ashes of Joomscan.
Things we learned from Capture The Flag hacking competitions we participated in.
Small set of tools for helping with reverse engineering Linux drivers
Find known secrets in your AI coding agent sessions (Claude Code, Codex, Cursor), then guard the next one with local hooks that trace risky commands to the content that dictated them. Open source, no telemetry.
A small and easy-to-use one-time password generator library for Java implementing RFC 4226 (HOTP) and RFC 6238 (TOTP).
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.
:vertical_traffic_light: Block malicious crawlers with Cloudflare Firewall Rules
EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.
Toggle the iPhone call-recording announcement on/off from a Windows GUI, built on the airlift AirTraffic sandbox escape.
Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️
Protects an unpatched PHP against php2shell (CVE-2026-109618 / CVE-2026-109619): a small extension that mirrors the official fix component by component and steps aside once the engine carries it. PHP 5.6-8.5; Sury, cPanel EA4, DirectAdmin, Docker, Windows.
Automatically exported from code.google.com/p/jsunpack-n
Modern honeypot supporting multiple services, realistic website cloning, and AI-powered features
Token authentication solution for Phoenix. Useful for APIs for e.g. single page apps.
Cross-platform, open-source shellbag parser
GasPot originally released at Blackhat 2015 - Updated for the same stuff 2026
VirtualPhoneNumber: Contributed Virtual Number Generation Desktop Tool
Validates passwords against PHP's password_hash function using PASSWORD_DEFAULT. Will rehash when needed, and will upgrade legacy passwords with the Upgrade decorator.
UnTangled — the easy, modern web interface for OpenWRT. A friendly LuCI alternative: Network Map, Mesh Wi-Fi, parental controls, VPN, QoS. ~75 KB, offline-first, runs alongside LuCI.