Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, and end-to-end ECDSA-signed tasking. Single Go binary agent with every property baked in at build time. Multi-operator team server with RBAC, audit chain, and a Qt/CLI console. Linux + Windows, amd64 + arm64.
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
Perform data science on data that remains in someone else's server
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
The cryptography-based networking stack for building unstoppable networks with LoRa, Packet Radio, WiFi and everything in between.
RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data
A self-contained cryptographic library for Python
UFONet - Denial of Service Toolkit
A Python wrapper around the OpenSSL library
GPU-accelerated homomorphic encryption in Python: Paillier and BFV, with encrypted nearest-neighbour search. Experimental research code.
High Octane Triage Analysis
面向小白用户的 CTF / 逆向 Skills 整合包:自动分流、头脑风暴、教学模式、比赛模式、只提示模式
A library for detecting known secrets across many web frameworks
❄️ Firmware and simulator for Coldcard Hardware Wallet
Least Significant Bit Steganography for bitmap images (.bmp and .png), WAV sound files, and byte sequences. Simple LSB Steganalysis (LSB extraction) for bitmap images.
Curated list of open-source Java Card applets and related applications for cryptographic smartcards
Evidence-grounded cryptographic inventory and post-quantum migration planning for software repositories. Local static analysis, zero mandatory runtime dependencies, SARIF and CycloneDX output.
运动世界校园纯 Python 协议实现,包含 NetSecKit 4.2.4、GeeTest v4、全链路协议分析与自动化套件,脱离 Android App 与 Native SO 依赖。
Quantum Cryptography Simulation and Experimentation Platform
Zero-install, air-gapped, self-decrypting HTML vaults using AES-256-GCM and native WebCrypto.
A small Bitcoin-like chain whose canonical ledger is my README. Proof of work is subset-sum, not hashing.
Full teardown of the Kyber ransomware Windows encryptor. Six corrections to public reporting, each independently verifiable. Includes analysis tooling, detection content, and incident response guidance.
Production & research-grade Post-Quantum KEM Double Ratchet protocol (FIPS 203 ML-KEM-768 + FIPS 204 ML-DSA-65). Resilient against Harvest-Now-Decrypt-Later FTQC attacks