anti-begal.py
xsanflip/anti-begal.pyPython script that exploits a resource-exhaustion flaw in the B.E.G.A.L C2 collector endpoint, flooding it with spoofed XOR/Base64 payloads to…
command-and-controldefensive-toolsexploitation+5
xsanflip/anti-begal.pyPython script that exploits a resource-exhaustion flaw in the B.E.G.A.L C2 collector endpoint, flooding it with spoofed XOR/Base64 payloads to…
xsanflip/dangdutPassive wireless intrusion detection system for ESP32-S3 and Flipper Zero that detects Wi-Fi deauthentication and disassociation attacks in real…
chxhana/aligned-rag-evalLightweight evaluation harness for RAG poisoning defenses that builds four-condition clean/poisoned records and reports prevented targets, net…
konstruktoid/prescrybMCP server for CVE/config remediation orchestration: SSH inventory, OSV/NVD lookups, CIS/DISA STIG-mapped Ansible playbook suggestions.
rvsh3ll/nxc-vulnscanNetExec module: run every stock Windows vuln-check in one pass (check-only, no exploit)
anasfik/flutterguardOffline security audits for Flutter APKs on Android. Inspect permissions, SDKs, endpoints and potential secrets. No root, account, ads or analytics.
wagga40/logstotalSelf-hosted multi-engine Sigma detection for event logs
nishikawaakira/waf-dojoHands-on AWS WAF training game with tutorials, scored labs, and exams where players write Web ACL rules to block real attack shapes while avoiding…
omar-tamerr/horuseyeAI-Powered Active Directory Attack Platform
dragon-lady/push-guardLocal Git pre-push hook and filesystem scanner that detects likely secret leaks, redacts matched values, and blocks pushes without telemetry or…
sadreck/codecepticon.NET/PowerShell/VBA Offensive Security Obfuscator
dragon-lady/netward-standaloneUser-space bot and DDoS deflection for small HTTP services
happyhackingspace/claude-code-backdoor-checkRead-only scanner for the backdoored Claude Code 2.1.313 extension (Cursor marketplace, Oct 2026): SSH key, persistence, reverse tunnel. macOS +…
clearhandreview/vulnerpocalypse-containmentOpen-source vulnerability analysis, CVE tracking, patch verification, and temporary security containment tools
phpatch/weblogcheckerFree access-log compromise analyzer: webshell interactions, exploitation patterns and brute-force bursts in your Apache/nginx logs - severity,…
gary23w/hodometerA single-file native Windows tray application (C, Win32, no runtime) that shows exactly which program is sending and receiving bytes and to which…
qybaihe/blaHardens binaries, Electron ASAR, JS, WASM, Python, and model files against AI reverse-engineering agents using decoy metadata, budget exhaustion, and…
interplains/zero-breach-toolkitFree, open-source, offline checks for traces of known mercenary spyware. Works on Windows, macOS and Linux, Android phones and iPhone backups.