Skip to content
@syhunt

Syhunt

Pinned Loading

  1. php2shell-protection php2shell-protection Public

    Emergency Apache mitigation and testing toolkit for php2shell (CVE-2026-109618 / CVE-2026-109619), featuring multipart POST blocking, request-size limits, and additional hardening measures.

    PHP 82 9

  2. KanaShift KanaShift Public

    Password-bound and reversible text masking. Input is transmuted into Japanese glyphs using a PBKDF2-hardened keystream, ensuring every incorrect guess incurs a real computational cost

    Python 5

  3. sandcat sandcat Public

    An open-source, pentest and developer-oriented web browser, using the power of Lua

    Pascal 556 78

  4. vulnjava-wavsep vulnjava-wavsep Public

    Sets of vulnerable JSP scripts from the WAVSEP project

    Java 2

  5. huntpad huntpad Public

    An open-source notepad with features that are particularly useful to penetration testers

    Pascal 61 13

  6. vulnphp vulnphp Public

    A set of vulnerable PHP scripts

    PHP 2

Repositories

Showing 10 of 11 repositories
  • php2shell-protection Public

    Emergency Apache mitigation and testing toolkit for php2shell (CVE-2026-109618 / CVE-2026-109619), featuring multipart POST blocking, request-size limits, and additional hardening measures.

    syhunt/php2shell-protection's past year of commit activity
    PHP 82 MIT 9 0 0 Updated Oct 22, 2026
  • KanaShift Public

    Password-bound and reversible text masking. Input is transmuted into Japanese glyphs using a PBKDF2-hardened keystream, ensuring every incorrect guess incurs a real computational cost

    syhunt/KanaShift's past year of commit activity
    Python 5 0 0 0 Updated Mar 18, 2026
  • KanaShift-RS Public

    Rust port of KanaShift. KanaShift is a password-bound and reversible text masking. Input is transmuted into Japanese glyphs using a PBKDF2-hardened keystream, ensuring every incorrect guess incurs a real computational cost

    syhunt/KanaShift-RS's past year of commit activity
    Rust 0 0 0 0 Updated Dec 23, 2025
  • vulnlua Public

    A set of vulnerable Lua scripts

    syhunt/vulnlua's past year of commit activity
    Lua 0 MIT 0 0 0 Updated Feb 2, 2025
  • vulnphp Public

    A set of vulnerable PHP scripts

    syhunt/vulnphp's past year of commit activity
    PHP 2 MIT 0 0 0 Updated Feb 2, 2025
  • vulnpascal Public

    A set of vulnerable Pascal/Delphi scripts

    syhunt/vulnpascal's past year of commit activity
    Pascal 2 MIT 2 0 0 Updated Feb 2, 2025
  • sandcat Public

    An open-source, pentest and developer-oriented web browser, using the power of Lua

    syhunt/sandcat's past year of commit activity
    Pascal 556 78 6 0 Updated Dec 21, 2023
  • community Public

    Syhunt Community Extensions for Sandcat

    syhunt/community's past year of commit activity
    Lua 9 BSD-3-Clause 2 0 0 Updated Apr 26, 2023
  • scantools Public

    Syhunt web application security scan tools in the form of easy-to-use Lua-based console applications

    syhunt/scantools's past year of commit activity
    Lua 4 BSD-3-Clause 0 0 0 Updated Sep 2, 2022
  • huntpad Public

    An open-source notepad with features that are particularly useful to penetration testers

    syhunt/huntpad's past year of commit activity
    Pascal 61 BSD-3-Clause 13 0 0 Updated Sep 24, 2021
View all repositories