Clik here to view.
Clik here to view.
GoReSym
Parses Go binaries to recover symbols, function metadata, types, file paths, and embedded strings, including stripped or UPX-packed samples, with IDA Pro import support.
View ArticleClik here to view.
warpgate v0.30.0
Fully transparent SSH, HTTPS, Kubernetes, database and RDP/VNC bastion/PAM that doesn't need additional client-side software
View ArticleClik here to view.
DidierStevensSuite
Collection of Python scripts for malware analysis, file format parsing, hashing, and forensic triage, including PDF, OLE, and XOR analysis utilities.
View ArticleClik here to view.
Clik here to view.
Clik here to view.
Clik here to view.
ebpf-container-escape-framework
Audit only eBPF EDR for Linux 5.15+ LTS: 14 kernel hooks, 15 actions (13 MITRE techniques), process lineage, SIEM export, K8s/Docker ready.
View ArticleClik here to view.
frp — Updated!
A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
View ArticleClik here to view.
Barzakh
Ring -4 to Ring 0: offense-defense firmware research platform. We build the bootkits, then we catch them. Closed-loop. Zero trust in silicon.
View ArticleClik here to view.
veiled-eye
OSINT identity investigation tool. Pivot from an e-mail, username, phone or wallet across 46 sources into one profile and relationship graph.
View ArticleClik here to view.
nextjs-supabase-stripe-security-checker
Local static security scanner for Next.js, Supabase and Stripe apps: 24 AST-based checks for leaked keys, missing RLS and grants, unsafe webhooks. CLI and GitHub Action.
View ArticleClik here to view.
HostBadger
Read-only Windows host hardening auditor in PowerShell with optional AI analysis
View ArticleClik here to view.
openwrt v25.12.6
Linux operating system for embedded devices with writable filesystem, package management, and build framework. Enables custom firmware creation for routers, IoT devices, and wireless access points with...
View ArticleClik here to view.
IDWolf
Read-only Active Directory & Microsoft Entra ID hygiene auditor in pure PowerShell. Collect once, analyze offline: deterministic findings, attack paths, NIS2/ISO 27001/DORA/GDPR mapping,...
View ArticleClik here to view.
deco-filepush-disclosure
Disclosure and PoC for a root file read/write flaw in the TP-Link Deco XE75 Pro V3 debug channel (tmpsvr opcodes 0xC456/0xF0), with CVSS analysis and handler decompilation.
View ArticleClik here to view.
Vader-Pro-VDR
AI-assisted Vulnerability Detection & Remediation platform featuring a Go endpoint agent, centralized dashboard, and vulnerability intelligence engine.
View ArticleClik here to view.
invisible_playwright v0.39.0
Playwright that anti-bots cannot see, so no captchas: same API, anti-detect stealth headless Firefox, undetected fingerprint, bypass bot detection, Python web scraping and browser automation.
View ArticleClik here to view.
jbl-wave-buds2-firmware-research
Reverse-engineering notes and Python tooling for JBL Wave Buds 2 (BES1306) firmware: OTA container format, flash layout, BLE/GATT protocol, and CRC-32 trust model.
View ArticleClik here to view.
ai-pentest-agent
Standalone autonomous AI pentest agent with a plan→act→judge loop, generic skills, destructive-action gate, and swappable LLM providers, plus a vulnerable API target for demos.
View Article
