eness / php2shell-CVE-2026-109618-CVE-2026-109619-PoC
Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.
rawfilejson / awesome-osint-arsenal
Curated list and one-command installer for 750+ open-source intelligence and security tools across 50 categories.
six2dez / reconftw
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
Anton-Barinov / php2shell-patches
php2shell (CVE-2026-109618/CVE-2026-109619) emergency patches for old PHP 5.6/7.x/8.0/8.1 — official + community backports, enhanced universal patch keeping file uploads & progress bars. For OpenCart, WordPress, HestiaCP/VestaCP legacy servers. EOL PHP RCE fix.
hwdsl2 / setup-ipsec-vpn
Set up your own IPsec VPN server in just a few minutes, with IPsec/L2TP, Cisco IPsec and IKEv2. Supports Ubuntu, Debian, CentOS/RHEL, Alpine Linux and Raspberry Pi OS. Includes client config and management scripts.
macnative / electron-detector
Find which of your Mac apps are secretly Electron. Zero-dependency Bash scanner with sizes, versions, and native alternatives.
jqssun / android-titanium-browser
Secure open-source Android browser with support for extensions
edoardottt / awesome-hacker-search-engines
A curated Markdown list of search engines for security work, covering servers, vulnerabilities, exploits, leaks, and threat intelligence.
community-scripts / ProxmoxVE
Proxmox VE Helper-Scripts (Community Edition)
telekom-security / tpotce
🍯 T-Pot - The All In One Multi Honeypot Platform 🐝
google / oss-fuzz
OSS-Fuzz - continuous fuzzing for open source software.
Astrosp / Awesome-OSINT-List
📡 Comprehensive collection of OSINT tools for cybersecurity professionals, researchers, and bug bounty hunters. Topics: information gathering, reverse search, red team, trust & safety, AI.
raullenchai / esp32-thinks
A multi-model Muse: personal AI voice assistant on ESP32 - wake word or knob, any OpenAI-compatible brain (STT/chat/TTS mix-and-match), streaming replies, out of the box. Built on muse-gadget-sdk.
alibaba / last-secure-code-benchmark
—
Niek / php7
PHP 7.4 security-backport packages for older Ubuntu and Debian releases
mikensec / php2shell-lab
Offline, reproducible lab to safely analyse an untrusted PoC for CVE-2026-109618/109619 and build detection rules. No exploit included; bring your own sample.
0xSteph / pentest-ai-agents
Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.
hwdsl2 / wireguard-install
WireGuard VPN server installer for Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS, Fedora, openSUSE and Raspberry Pi OS. Includes interactive setup and client management.
bivlked / amneziawg-installer
Install your own AmneziaWG 3.1 VPN server on a fresh Ubuntu or Debian VPS with one command. Made for networks that block WireGuard. No Docker, QR-code import, 2.0 on request for routers.
v1s1t0r1sh3r3 / airgeddon
This is a multi-use bash script for Linux systems to audit wireless networks.
The-Z-Labs / linux-exploit-suggester
Linux privilege escalation auditing tool
mitchellkrogza / nginx-ultimate-bad-bot-blocker
Nginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DDOS, Wordpress Theme Detector Blocking and Fail2Ban Jail for Repeat Offenders
lord-alfred / ipranges
🔨 List all IP ranges from: Google (Cloud & GoogleBot), Bing (Bingbot), Amazon (AWS), Microsoft, Oracle (Cloud), GitHub, Facebook (Meta), OpenAI (GPTBot) and other with daily updates.
ironfox-oss / IronFox
Private, secure, user first web browser for Android. This is a read-only mirror of https://gitlab.com/ironfox-oss/IronFox.
GitHubSecurityLab / gh-secure
A GitHub CLI extension to enable security features on repositories following best practices from GitHub Security Lab.
drduh / macOS-Security-and-Privacy-Guide
Community guide to securing and improving privacy on macOS.
nestybox / sysbox
An open-source, next-generation "runc" that empowers rootless containers to run workloads such as Systemd, Docker, Kubernetes, just like VMs.
e-m-b-a / emba
EMBA - The firmware security analyzer
BlackArch / blackarch
An ArchLinux based distribution for penetration testers and security researchers.
plenaryapp / awesome-rss-feeds
Awesome RSS feeds - A curated list of RSS feeds (and OPML files) used in Recommended Feeds and local news sections of Plenary - an RSS reader, article downloader and a podcast player app for android
tclahr / uac
UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.
buybitart / cyclepatrol
Bash tool for on-foot Wi-Fi security checks in a loop, with evidence reports. (re-invented wifi WarDriving)
eugene1g / agent-safehouse
Sandbox your local AI agents so they can read/write only what they need
ComplianceAsCode / content
Security automation content in SCAP, Bash, Ansible, and other formats
ashishb / osx-and-ios-security-awesome
OSX and iOS related security tools
Safe3 / uusec-waf
Industry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.
ViRb3 / magisk-frida
🔐 Run frida-server on boot with Magisk, always up-to-date
aquasecurity / trivy-action
Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities
ovh / debian-cis
PCI-DSS compliant Debian 12/13 hardening
UseOSINT / Skills
28 OSINT Agent Skills that turn Cursor, Claude & AI coding agents into a full open-source intelligence platform — reconnaissance, attribution, GEOINT, breach checks & due diligence. Ethical, sourced, passive-first.
The-AIE / the-gibson
A portable, self-improving SDLC harness for agent fleets — plan → issues → build → test → review → UX-eval → security → ship, on any runtime (Claude Code, Codex, Grok, Hermes). Apache-2.0.
Carlos-Dominguez-faber / claude-code-tune-kit
Deja de usar Claude Code como venía en la caja. Semáforo de contexto, modo conciso, 4 hooks que bloquean comandos destructivos y secretos, estilo de salida sin humo, GLM sin secuestrar tu config — y cc-doctor.sh, que audita tu instalación y te dice qué te falta.
hwdsl2 / docker-ipsec-vpn-server
Docker image to run an IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2. Auto-generates server config and supports VPN client setup on Linux, Windows, macOS, iOS and Android.
Security-Onion-Solutions / securityonion
Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.
sobolevn / git-secret
:busts_in_silhouette: A bash-tool to store your private data inside a git repository.
dreamfactorysoftware / dreamfactory
DreamFactory is a secure, self-hosted enterprise data access platform that provides governed API access to any data source, connecting enterprise applications and on-prem LLMs with role-based access and identity passthrough.
hwdsl2 / openvpn-install
OpenVPN server installer for Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS, Fedora, openSUSE, Amazon Linux and Raspberry Pi OS. Includes interactive setup and client management.
Athena-OS / athena
Athena OS is a Arch/Nix-based distro focused on Cybersecurity. Learn, practice and enjoy with any hacking tool!
raphabot / awesome-cybersecurity-agentic-ai
—
DouglasFreshHabian / AndroidForensics
Automated Android forensic toolkit: extract device info, apps, contacts, call logs, SMS, system logs, and more via ADB for security audits and investigations.
WMAL / kodachios
Kodachi OS is a Debian-based privacy & security OS by Warith Al Maawali, built for uncompromising privacy, anonymity, and reliability. It pairs hardened defaults with a curated toolkit for private browsing, advanced networking, and incident response, all in an intuitive interface.
yingfff123 / AtlasX
企业暴露面收集与持续监控（ASM）自托管系统：多源采集、存活与指纹富化、风险线索与变更对照。支持 Linux/Docker 一键部署。
lefayjey / linWinPwn
linWinPwn is a bash script that streamlines the use of a number of Active Directory tools
jkroepke / helm-secrets
A helm plugin that help manage secrets with Git workflow and store them anywhere
konstruktoid / hardening
Hardening Ubuntu. Systemd edition.
aws / eks-distro
Amazon EKS Distro (EKS-D) is a Kubernetes distribution based on and used by Amazon Elastic Kubernetes Service (EKS) to create reliable and secure Kubernetes clusters.
voyagermesh / voyager
🚀 Secure L7/L4 (HAProxy) Ingress Controller for Kubernetes
wazuh / wazuh-docker
Wazuh - Docker containers
DNSCrypt / dnscrypt-server-docker
A Docker image for a non-censoring, non-logging, DNSSEC-capable, DNSCrypt-enabled DNS resolver
Chocolate4U / Iran-v2ray-rules
Enhanced v2ray/xray and v2ray/xray-clients routing rules with built-in Iranian domains and a focus on security and adblocking.