cyph

Cyph Cyph is a cryptographically secure messaging and social networking service, providing an extreme level of privacy combined with best-in-class ease of use. Cyph’s patented technology — built by former SpaceX engineers, audited by Cure53, and the basis of research presentations at Black Hat an...

beef

=============================================================================== Copyright c 2006-2026 Wade Alcorn - [email protected] Browser Exploitation Framework BeEF - https://beefproject.com See the file 'doc/COPYING' for copying permission...

gh-safe-repo

gh-safe-repo Create GitHub repositories with safe defaults applied, in one command. gh-safe-repo new Branch protection, immutable tags, locked-down Actions, Dependabot, secret scanning with push protection, and private vulnerability reporting are all configured before you push your first commit...

BitLock-Crypto-Research

🛡️ BitLock Framework: Cryptovirology and C2 Ecosystem PoC This repository contains a comprehensive Proof of Concept PoC designed for the study of modern threat architectures. The project simulates a fileless attack environment with a command and control C2 infrastructure protected by elliptic curv...

incus-os

Introduction IncusOS is an immutable OS image dedicated to running Incus. It's based on Debian 13 and built using mkosi. IncusOS can be installed on modern amd64 x8664 and arm64 systems. This aims at providing a very fast, safe and reliable way to run an Incus server. It's got a strong focus on...

virt-firmware

Tools for ovmf / armvirt firmware volumes This is a small collection of tools for edk2 firmware images. They support decoding and printing the content of firmware volumes. Variable stores OVMFVARS.fd can be modified, for example to enroll secure boot certificates. virt-fw-dump Decodes and prints...

Malcolm

Malcolm Malcolm is a powerful network traffic analysis tool suite designed with the following goals in mind: Easy to use – Malcolm accepts network traffic data in the form of full packet capture PCAP files, Zeek logs, and Suricata alerts. These artifacts can be uploaded via a simple browser-based...

BrowserBox

BrowserBox — Remote Browser Isolation Bring the web to any system...safely. A full remote browser. Clientless access. Native performance. Self-host on Windows, macOS or Linux, or create cloud browser sessions through the API. Start a 7-Day Paid Evaluation · Buy a Commercial License · Talk to Sale...

aes256_passwd_store

aes256passwdstore This script securely encrypts or decrypts passwords on disk within a custom database file. It also features functionality to retrieve passwords from a previously generated database file. This script takes a master password from stdin/from memory, hashes the password using the...

CVE-2026-115215

Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a are vulnerable to a Denial of Service (DoS) via the NetX Secure DTLS server . The root cause is that the server allocates a session from a fixed pool for the first datagram from any unrecognized address and port before the cookie exchang...

monty

Monty A minimal, secure Python interpreter written in Rust for use by AI. Experimental - This project is still in development, and not ready for prime time. A minimal, secure Python interpreter written in Rust for use by AI. Monty avoids the cost, latency, complexity and general faff of using a...

CVE-2026-116768

CVE-2026-116768 is a missing length validation vulnerability in Secure Access servers prior to 14.61. Authenticated attackers can cause a persistent denial of service when connecting for the first time...

secretive

Secretive Secretive is an app for protecting and managing SSH keys with the Secure Enclave. Why? Safer Storage The most common setup for SSH keys is just keeping them on disk, guarded by proper permissions. This is fine in most cases, but it's not super hard for malicious users or malware to copy...

pcc

PHP Secure Configuration Checker Check current PHP configuration for potential security flaws. Simply access this file from your webserver or run on CLI. Author This software was written by Ben Fuhrmannek, SektionEins GmbH, in an effort to automate php.ini checks and spend more time on cheerful...

USSH

USSH USSH is a shell protocol and client/server pair built on top of USTP-Secure. It is not a TCP tunnel and does not wrap SSH inside TCP. Status: Beta License: MIT AEAD cipher names chacha20 = CHACHA20POLY1305 aes-256-gcm = AES256GCM aes-128-gcm = AES128GCM Default AEAD cipher: chacha20 Default...

terragoat

TerraGoat - Vulnerable Terraform Infrastructure TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find the...

CVE-2026-116768

The Absolute Secure Access software is affected by a missing length validation vulnerability in versions prior to 14.61 . An authenticated attacker can exploit this flaw to cause a persistent denial of service when connecting for the first time. No specific exploit links or scanner source codes a...

CVE-2026-116768 Missing length validation in Absolute Secure Access

CVE-2026-116768 is a missing length validation vulnerability in Secure Access servers prior to 14.61. Authenticated attackers can cause a persistent denial of service when connecting for the first time...

EUVD-2026-115626

CVE-2026-116768 is a missing length validation vulnerability in Secure Access servers prior to 14.61. Authenticated attackers can cause a persistent denial of service when connecting for the first time...

CVE-2026-116767

Secure Access servers running versions prior to 14.61 are vulnerable to an improper input handling vulnerability. This flaw allows authenticated attackers to trigger a persistent denial of service (DoS). No specific remediation or exploit details are provided in the documents.