Validates passwords against PHP's password_hash function using PASSWORD_DEFAULT. Will rehash when needed, and will upgrade legacy passwords with the Upgrade decorator.
Repository Index
47,133 repositories indexed
193–216 of 297 · Most stars
Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.
- networking
- udp
- ipv6
- ipv4
Sym is a command line utility and a Ruby API that makes it trivial to encrypt and decrypt sensitive data. Unlike many other existing encryption tools, sym focuses on usability and streamlined interface (CLI), with the goal of making encryption easy and transparent. The result? There is no excuse for keeping your application secrets unencrypted :)
Content discovery and fuzzing with HTTP/3 support (100k requests per second)
Spam Honeypot with Intelligent Virtual Analyzer
php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.
- cve
- hestiacp
- opencart
- php
Stream encryption & decryption with libsodium and protobuf
- crypto
- cryptography
- protobuf
- libsodium
Extract the information needed from the Manifest.plist files to convert it to hashes compatible with hashcat
A collection of hash functions, ciphers, tools, libraries, and materials related to cryptography & security. :closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key: (project was renamed, libchaos is main)
Checks with NSRL RDS servers looking for for hash matches
NTFUZZ: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis (IEEE S&P '21)
- fuzzer
- fuzzing
- kernel-fuzzer
- windows-kernel
An ActionScript 3 library for interfacing with OAuth 2.0 services.
Process HTTP Pcaps With YARA
Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.
- cybersecurity
- hacking
- iast
- dast
Universal script packer-- transforms any type of script into a protected ELF executable, encrypted with anti-debugging.
Easily access the Shopify API with Elixir.
- shopify
- shopify-api
- elixir
- elixir-lang
Reverse proxy with automatically obtains TLS certificates from Let's Encrypt
A low-to-medium interaction SSH Honeypot with features to capture terminal activity and upload to asciinema.org
The opposite of Ruler, provides blue teams with the ability to detect Ruler usage against Exchange.
Library for working with OpenID Connect and implementing clients.
Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.
Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.
Compatible with LessPass. RustedLessPass is a standalone password manager written in Rust. Powered by Rust / Wasm.
- anonymous
- lesspass
- password
- password-manager
AI-powered platform for OSINT intelligence analysis. Features archive discovery with hypothesis-driven investigation, GLiNER entity extraction, Mapbox geospatial visualization, network analysis, and document processing. Built with FastAPI, Next.js, Weaviate, and DSPy.
- ai-agents
- document-processing
- dspy
- entity-extraction