Find, verify, and analyze leaked credentials
- secret
- trufflehog
- credentials
- security
Repository Index
47,133 repositories indexed
25–48 of 1,178 · Most stars
Authentication for the Web.
⚙️ NGINX config generator on steroids 💉
World's fastest and most advanced password recovery utility
.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!
- decompiler
- decompiler-engine
- c-sharp
- dotnet
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
The authentication glue you need.
- saml
- saml-idp
- saml-sp
- oauth2
UNIX-like reverse engineering framework and command-line toolset
- radare2
- c
- commandline
- reverse-engineering
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
- agent-security
- agent-skills
- agentic-ai
- ai-security
API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites
- osint
- social-media
- analyzer
- username
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
- footprinting
- osint
- threatintel
- python
Flexible authentication solution for Rails with Warden.
- rails
- ruby
- authentication
- devise
A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.
- built-at-rc
- age-encryption
SQL powered operating system instrumentation, monitoring, and analytics.
Simple and flexible tool for managing secrets
Self-Hosting Guide. Learn all about locally hosting (on premises & private web servers) and managing software applications by yourself or your organization. Including Cloud, LLMs, WireGuard, Automation, Home Assistant, and Networking.
Why is this running? Trace any process, port, container, or file back to what started it - CLI + TUI.
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
- privacy
- security
- censorship
- cybersecurity
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
- static-analysis
- dynamic-analysis
- mobsf
- android-security
A little tool to play with Windows security
⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡
- decryption
- natural-language-processing
- cryptography
- cipher
The easiest, and most secure way to access and protect all of your infrastructure.
- ssh
- go
- bastion
- teleport-binaries
PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
SWE-agent takes a GitHub issue and tries to automatically fix it, using your LM of choice. It can also be employed for offensive cybersecurity or competitive coding challenges. [NeurIPS 2024]