Repository Index

High-Fidelity AI-Assisted Deterministic Reverse Engineering FastMCP Server

Fast, compact 64/128/256-bit non-crypto hash suite (Rainbow & Rainbow 2) passing SMHasher3, plus experimental Rainstorm. C++ and Node.js/Wasm API & CLI

• call-for-papers
• cryptanalysis
• cryptanalysis-tasks
• cryptography

Straightforward HTTP session management

• session-management
• session
• http
• golang

Go session management for web servers (including support for Google App Engine - GAE).

• gae
• http-session
• session-management

PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12

• cve-2026-109618
• cve-2026-109619
• exploit
• memory-corruption

Malware/IOC ingestion and processing engine

Rar-Password-Unlocker-Full-Version: Brute-Force, Mask, and Dictionary Attack Security Auditor

• dictionary-attack
• file-compression-tools
• password-recovery-tools
• rar-password-unlocker-latest-version

Searches various online resources to try and get as much info about an IP/domain as possible.

Rails compatible Plug session store

• elixir-plug
• elixir-phoenix
• ruby-on-rails
• rails

🦅 EACL: Enterprise Access ControL is a ReBAC Authorization library inspired by SpiceDB, built in Clojure and backed by Datomic Pro, Datahike, Datalevin or DataScript.

• access-control
• clojure
• datalog
• authorization

TranslatedActionScript (AS3) library for processing binary data. This library contains MD5, SHA-1, SHA-2 ( SHA-224 and SHA-256 ), Base64, CRC32 algorithms, JSON encoder & decoder as well as PNG and JPEG encoders.

• actionscript
• jpeg
• png
• md5

A dead simple, highly performant, highly customizable sessions middleware for go http servers.

AI-powered platform for OSINT intelligence analysis. Features archive discovery with hypothesis-driven investigation, GLiNER entity extraction, Mapbox geospatial visualization, network analysis, and document processing. Built with FastAPI, Next.js, Weaviate, and DSPy.

• ai-agents
• document-processing
• dspy
• entity-extraction

Fragscapy is a command-line tool to fuzz network protocols by automating the modification of outgoing network packets. It can run multiple successive tests to determine which options can be used to evade firewalls and IDS.

• fuzzing
• network
• ids
• firewall

Framework agnostic set of sqlalchemy classes that make building applications that require permissions an easy task.

• python
• pyramid
• flask
• sqlalchemy

Handles sessions for Ruby web applications using DynamoDB as a backend.

A PE (Portable Executable) packer with Huffman Compression and Xor encryption.

• huffman-compression
• huffman-algorithm
• pe-header
• packer

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

Powerful Session Management for Kemal applications

• kemal
• session
• crystal
• middleware

drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates

• docker
• security
• audit

🛡 Modern elixir ACL/ABAC library for managing granular user abilities and permissions

• elixir
• elixir-phoenix
• ecto
• acl

Password generator written in Golang, usable as a CLI or Go library. Provides options for human readable and accessibility friendly passwords.

• golang
• go
• go-library
• golang-library

A tool to assist IoT developers in securing MQTT-based IoT deployments

• mqtt
• security

Beaker sessioning bindings for Pyramid