A tool for quantitative risk analysis of Android applications based on machine learning techniques
- android
- risk
- android-permissions
- quantitative-risk-analysis
Repository Index
58,632 visible repositories in the index
193–216 of 272 · Most stars
Reverse engineering tool for virtualization wrappers
Open-source agentic security operations platform:
- agentic-security
- cyber-security
- cyber-threat-intelligence
- cybersecurity
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
- exploit
- php
- php2shell
- php2shell-cve
Content discovery and fuzzing with HTTP/3 support (100k requests per second)
A free, public vulnerability feed: CVE, GHSA, OSV, CISA KEV and EPSS merged into one entry per vulnerability. RSS, JSON API and MCP. Docs and issues only.
Fast, compact 64/128/256-bit non-crypto hash suite (Rainbow & Rainbow 2) passing SMHasher3, plus experimental Rainstorm. C++ and Node.js/Wasm API & CLI
- call-for-papers
- cryptanalysis
- cryptanalysis-tasks
- cryptography
Hashcat wrapper to help automate the cracking process
Extract the information needed from the Manifest.plist files to convert it to hashes compatible with hashcat
A framework for receiving and redistributing abuse feeds
御枢 · AegisOps — AI 安全运营工作台：告警研判、应急响应、漏洞整改，连接 Atlas、模型、工具与工作流。
- ai-agents
- secops
- security-operations
- vulnerability-management
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
The MPT (Mobile Pentest Toolkit) is a must-have solution for your android penetration testing workflow.
🦅 EACL: Enterprise Access ControL is a ReBAC Authorization library inspired by SpiceDB, built in Clojure and backed by Datomic Pro, Datahike, Datalevin or DataScript.
- access-control
- clojure
- datalog
- authorization
A whole bunch of public pentest reports & papers
Custom password cracking rules for Hashcat and John the Ripper
- password-cracking
- hashcat
- johntheripper
- jtr
A discord bot for reverse engineers and exploit developers.
🪓 High-Speed Log Analysis & Forensics Tool - Part of NullSec Toolkit
A dead simple, highly performant, highly customizable sessions middleware for go http servers.
Paper vault for passwords and secrets
- cryptocurrency
- cryptography
- cybersecurity
- digital-asset-security
Framework agnostic set of sqlalchemy classes that make building applications that require permissions an easy task.
- python
- pyramid
- flask
- sqlalchemy
provides a full user authentication experience for an API. Includes login,logout,register,forgot password, forgot username, confirmation email and all that other good stuff. Includes plug for checking for authenticated users and macro for generating the required routes.
Passwords Fountain - modern & performant password manager interface which works everywhere
🛡 Modern elixir ACL/ABAC library for managing granular user abilities and permissions
- elixir
- elixir-phoenix
- ecto
- acl