47,133 repositories indexed
1,105–1,128 of 1,496 · Most stars
macOS menu-bar app for fine-grained VPN routing: bypass the VPN for chosen domains/services, force others through it, or (Custom mode) route each domain/subnet out a specific egress — direct, a specific VPN, an HTTP/SOCKS5 proxy, or a Tailscale peer. Includes a vpnb CLI.
The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.
OpenID Connect, the authentication protocol and identity layer on top of OAuth 2.0 used in many SSO and adopted in many social logins (Apple, Facebook, Google, ...etc). Find this curated list of providers, services, libraries, and resources to adopt it and know more about existing specs.
Open-source Docker infrastructure platform. One web UI — containers, security, DNS, VPN, monitoring, backups, reverse proxy, terminal, and multi-node orchestration. Replace a dozen tools with one.
php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.
Make any application debuggable
Ziti SDK for Golang
Local-only browser fingerprint & identity rotation toolkit for authorized security testing. Tor/obfs4, coherent profiles, WebRTC/DNS leak protection.
Upload failing iOS snapshot tests cases to S3
Randomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.
Open-source agentic security operations platform:
Mock an SSH server and define all commands it supports (Python, Twisted)
BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)
[WIP] Simple mobile applications sandbox file browser tool. Powered with [frida.re](https://www.frida.re).
Hashcat wrapper to help automate the cracking process
WELA (Windows Event Log Analyzer, ゑ羅) is a tool for auditing and configuring Windows event log settings. Windows event logs are a vital source of information for Digital Forensics and Incident Response (DFIR), providing visibility into system activity and security events.
A free, public vulnerability feed: CVE, GHSA, OSV, CISA KEV and EPSS merged into one entry per vulnerability. RSS, JSON API and MCP. Docs and issues only.
TranslatedCyclops is a browser with XSS detection capabilities
Pure-Go SQL parser, formatter, linter and security scanner for 8 dialects. Zero-copy, race-free, with an LSP and MCP server.
A modular Python application to pull intelligence about malicious files
TranslatedA guide to avoiding scams in the human world: 373 scam breakdowns covering 16 categories, including fake-order task scams (刷单), pig-butchering scams (杀猪盘), AI face-swapping, and scams targeting the elderly; includes real case reports, everyday self-check lists, PDF/EPUB/Anki downloads, and a scam-avoidance mini-game with 12 rounds
A flexible playground for Android CTF challenges.
An integrated security system for applications built on component
A collection of hash functions, ciphers, tools, libraries, and materials related to cryptography & security. :closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key: (project was renamed, libchaos is main)