antifox-ai/antifoxAI multi-agent autonomous penetration testing platform that runs recon, attack-surface discovery, exploitation validation and evidence-backed report…
debugactiveprocess/maldoctraceDefensive Office macro analyzer in Go: extracts VBA, deobfuscates it and emulates it in a fully simulated sandbox to recover commands, PowerShell,…
storytold/craft-anythingPure-Rust reverse-engineering engine with 314 CLI/MCP inspection tools (disassembly, decompilation, strings, call graphs) that studies any app, site…
openclaw/openclawThe AI that really does things. Any OS. Any Platform. The lobster way. 🦞
nimesh895/behavioral-living-off-the-land-lolbins-detection-systemHost-based behavioral detection engine for Windows LOLBins, correlating Sysmon process telemetry with sequential attack chains, masquerading checks,…
nukeratframework/nukeratA post exploitation framework for advanced Red Team operations
chaitin/safelineSelf-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic…
silentmesh-systems/lurePlanted credentials that give the attacker away. A free safety net for any network: company IT, homes, offices, banks, hospitals, plants. Alerts on…
twili8/homerEvasive fork of Donut to generate position-independent shellcode that loads PE Windows payloads from memory
tailscale/tailscaleThe easiest, most secure way to use WireGuard and 2FA.
0xthearchitect/beatbox🧊Disposable environments on your own computer
kolbicz/wqfilesFile browser, app data manager and cache cleaner for iOS 27 (worse_query, no jailbreak)
Evidence Jan 26, 2026
2 Repository evidence · Evidence observed: Sep 26, 2026
ikow/php2shell-pocCVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
benampel/hackersignal7.45M-document cyber threat intelligence corpus and benchmark linking hacker-forum, exploit and advisory text to 340K NVD CVEs, with temporal splits…
storytold/craft-anythingPure-Rust reverse-engineering engine with 314 CLI/MCP inspection tools (disassembly, decompilation, strings, call graphs) that studies any app, site…
lucksi/darkusSearches dark web and onion search engines for keywords and returns matching onion links, with optional local database storage and Ahmia blacklist…
oldcircle/geo-sleuthAn agent skill that finds where a photo was taken — OpenStreetMap geometry, elevation skylines, satellite imagery and street view — and shows its…
ikow/php2shell-pocCVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
benampel/hackersignal7.45M-document cyber threat intelligence corpus and benchmark linking hacker-forum, exploit and advisory text to 340K NVD CVEs, with temporal splits…
storytold/craft-anythingPure-Rust reverse-engineering engine with 314 CLI/MCP inspection tools (disassembly, decompilation, strings, call graphs) that studies any app, site…
lucksi/darkusSearches dark web and onion search engines for keywords and returns matching onion links, with optional local database storage and Ahmia blacklist…
oldcircle/geo-sleuthAn agent skill that finds where a photo was taken — OpenStreetMap geometry, elevation skylines, satellite imagery and street view — and shows its…
