Repository Index

A Flask app template with integrated SQLAlchemy, authentication, and Bootstrap frontend

This is an aspiring project aimed at accumulating knowledge from the world of cybersecurity and presenting it in a cogent way, so it is accessible to as large an audience as possible and so that everyone has a good resource to learn hacking from.

• cryptography
• hacking
• system
• cheatsheet

A convenience library for generating, comparing and inspecting password hashes using the scrypt KDF in Go 🔑

• scrypt
• go
• hash
• password

A surprisingly configurable convention-based approach to managing your application's custom configuration settings.

Federated Authentication with OAuth providers

• federated-identity
• federated-social-web
• oauth
• vapor

Watchtower | Self-hosted AI security assessment, asset intelligence, and evidence workflows.

• ai-agents
• attack-surface-management
• docker
• penetration-testing

Automation of some MAPT activities and interaction with the mobile Android device.

• android-analysis
• frida
• mobile-hacking
• mobile-penetration-testing

Hascat Rules Collection – Probably the largest collection of hashcat rule-files anywhere.

• hashcat
• hashcat-rules
• hashcat-rule
• password-cracking

TranslatedPassword generation tool: flexible and scriptable password dictionary generator which can support brute-force, combination, complex rule mode etc...

• password-generator
• password-dictionaries
• wordlist-generator
• brute-force

Generate graphs and charts based on password cracking result

• cracking
• hashcat
• matplotlib
• password

A Boilerplate for deno RESTful apis

• deno
• rest-api
• oak
• mongodb

:sunglasses:Package captcha provides an easy to use, unopinionated API for captcha generation

• golang
• captcha
• captcha-generator
• image-captcha

Generate Keyboard Walk Dictionaries for cracking

Library to generate TOTP/HOTP codes

• cli
• golang
• golang-library
• totp

Minimal, consistent Python API for building integrations with malware sandboxes.

• sandbox
• malware-analysis
• api-client
• library

Hush is a runtime configuration loader for Elixir applications

• elixir
• aws
• hush
• secret-management

Validates passwords against PHP's password_hash function using PASSWORD_DEFAULT. Will rehash when needed, and will upgrade legacy passwords with the Upgrade decorator.

NeuraVision — AI content generation platform (PHP backend engine: auth, credits, generation, analytics)

• ab-testing
• ai-platform
• analytics
• backend-api

Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.

• networking
• udp
• ipv6
• ipv4

JWT auth for Laravel and Lumen

Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design

• exploit
• php
• php2shell
• php2shell-cve

Detect hidden files and text in images

• steganography
• ctf
• stego
• capture-the-flag

OmniAuth Oauth2 strategy for weibo.com.

Open-source agentic security operations platform:

• agentic-security
• cyber-security
• cyber-threat-intelligence
• cybersecurity