Repository Index

Automation of some MAPT activities and interaction with the mobile Android device.

• android-analysis
• frida
• mobile-hacking
• mobile-penetration-testing

Deep memory analysis for Windows processes — the tool that saves you hours of debugging

• analyzer
• binary-analysis
• delphi
• dissassembler

The Redexer binary instrumentation framework for Dalvik bytecode

• dex
• dynamic-analysis
• bytecode-manipulation
• dalvik

Follow stolen crypto hop by hop across Bitcoin, Ethereum, TRON, BNB Chain and Solana. Labels where the money landed, keeps proof for every clue, writes the report.

• bitcoin
• blockchain
• crypto
• ethereum

TranslatedPassword generation tool: flexible and scriptable password dictionary generator which can support brute-force, combination, complex rule mode etc...

• password-generator
• password-dictionaries
• wordlist-generator
• brute-force

Deploy a Cloudflare Worker to sanely score users' new passwords with zxcvbn AND check for matches against haveibeenpwned's 10+ billion breached accounts

• haveibeenpwned
• cloudflare
• zxcvbn
• serverless

Python implementation of the Packed Executable iDentifier (PEiD)

• peid
• peid-signature
• pe-file
• pe-files

Scalable Binary Data Extraction in Hadoop

Sym is a command line utility and a Ruby API that makes it trivial to encrypt and decrypt sensitive data. Unlike many other existing encryption tools, sym focuses on usability and streamlined interface (CLI), with the goal of making encryption easy and transparent. The result? There is no excuse for keeping your application secrets unencrypted :)

The VBCorLib framework brings many of the powerful .NET classes to VB6.

• collections
• hashing
• biginteger
• encoding

Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design

• exploit
• php
• php2shell
• php2shell-cve

Haskell oauth2 binding

• oauth2
• oauth2-client
• haskell
• identity

A mysqldump anonymizer

• mysqldump
• anonymizer
• database-anonymizer
• rgpd

The fastest 128-bit and 256-bit hash, passes all tests, and under 140 source lines of code. API library and CLI tool in C++ and NodeJS/Wasm

• call-for-papers
• cryptanalysis
• cryptanalysis-tasks
• cryptography

Stream encryption & decryption with libsodium and protobuf

• crypto
• cryptography
• protobuf
• libsodium

A free, public vulnerability feed: CVE, GHSA, OSV, CISA KEV and EPSS merged into one entry per vulnerability. RSS, JSON API and MCP. Docs and issues only.

• cisa-kev
• cve
• mcp
• osv

TranslatedCyclops is a browser with XSS detection capabilities

• security
• xss
• taint-tracking
• vulnerability

Mac browser for Mach-O binaries (macOS, iOS, watchOS, and tvOS)

• macos
• abi
• mach
• mach-o

A login service based on mobile phone number for Meteor

NTFUZZ: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis (IEEE S&P '21)

• fuzzer
• fuzzing
• kernel-fuzzer
• windows-kernel

Run basic functions from stripped binaries cross platform

Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.

• crtsh
• cve
• cve-2026-109618
• cve-2026-109619

An ActionScript 3 library for interfacing with OAuth 2.0 services.

Mobile runtime detection workbench for AI (iOS and Android)

• frida
• reverse-engineering
• android-security-tools
• frida-gadget