EthanArbuckle / fairplay-decrypt

Offline FairPlay App Store IPA decryption with independent key derivation

ikow / php2shell-poc

CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.

9bie / php2shell-bypass-aslr-exp

A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.

openai / php2shell-checker

Checks a website's PHP version headers or a local PHP install against upstream fixed releases for PHP2Shell.

HydraSoft / HydraSoft-DLL-Hijack-Scanner

HydraSoft: dependency-free Windows DLL hijack scanner with centralized remote management — HydraAgent, PHP API, and a web console for endpoint security checks across your fleet.

iliyami / MacSai

Mac Sai: the open-source Mac cleaner, optimizer, and malware scanner. A free, Apple-notarized alternative to CleanMyMac, built with Swift 6 and SwiftUI.

ShiftLeftSecurity / codepropertygraph

Code Property Graph: specification, query language, and utilities

EchoStretch / kstuff-lite

Modified kstuff-lite PS4 kernel-exploit toolkit (1.11-opt) that optimizes UELF/KELF transitions, FPU/CR0 handling, and adds opt-in diagnostics.

UnboundTechCo / defyxVPN

A modern, secure VPN application built with Flutter that provides internet freedom and privacy protection.

dhicoc / dsh-reverse-skill

Complete reverse-skill (88 SKILL.md) as a DeepSeek Harness (dsh) Cordis plugin — reverse engineering, authorized pentesting and security research skill pack.