security-tools — independent software & tools
-
Zapscape
Guest-to-host KVM/x86 escape exploiting CVE-2026-64561, delivering a full PoC chain and analysis for security researchers.
-
knife
A reverse engineer's binary Swiss-army knife in Rust: triage, disassembly, function/CFG recovery, crypto-constant + YARA scanning for PE/ELF/Mach-O. Installs as 'knife'.
-
GitHub-Cyber-Scanner-Pro
-
depmesh-ai
Vet an open-source dependency before you (or your coding agent) adopt it.
-
ovecc
CLI-first, deterministic architecture intelligence. Builds an offline model of your repo to answer impact, cycles, dead code, duplication and security, and enforces your architecture as a contract in CI. No LLM in the loop; usable by coding agents over MCP.
-
triagekit
Backend-free repo triage in one self-contained HTML file — GitHub Dependabot alerts, code scanning, PRs & issues, scored and tiered. No server, no CDN; your token stays in the browser.
-
Orion
A backend and automation language compiled to bytecode in Rust. One binary, 58 built-in modules, no runtime to install.
-
CryptoKeyLab
Enterprise-grade Cryptography-as-a-Service (CaaS) & Offline WebAssembly Playground. Built with .NET 9, Clean Architecture, Dapper, and Redis supporting 115+ algorithms.
-
gl0bal01
AppSec, OSINT & DFIR enthusiast developing investigation tools, Discord bots, and security automation systems.
-
nthpartyfinder
Discover Nth-party vendor relationships (3rd, 4th, and deeper) for a domain from public signals — DNS, certificate transparency, trust-center subprocessors, web traffic, and more. A fast, offline-capable GRC Engineering CLI in Rust.
-
CiberWebScan
Hybrid tool for passive reconnaissance and attack surface analysis in web applications. It combines advanced scraping, technology fingerprinting, security assessment, and reporting into a single CLI solution. Designed for ethical, educational, and auditing purposes. This software MUST NOT be used on third-party systems.
-
Gateflow
Physical access control systems today operate in isolation from marketing and business intelligence. Real estate developers, gated compounds.
-
WinNT-add-system-user-injector
A C# tool for creating local Windows user accounts with secure random passwords, automatic group assignment, and improved DirectoryServices handling. Designed for system administrators, automation tasks.
-
raztint
Secure, consistent terminal output for Python CLIs with semantic messages, icons, and secret redaction.
-
hostveil
A single-binary guided hardening tool for self-hosted Linux servers — scan, score, and fix with preview, backup and one-command rollback