Decrypt and export passwords, cookies, history and more from 20 browsers on Windows, macOS and Linux. For authorized security research, incident response and DFIR.
- chrome
- macos
- windows
- pentest-tool
Repository Index
47,133 repositories indexed
169–192 of 1,496 · Most stars
Source code for Hacker101.com - a free online web and mobile security class.
Open-Source Phishing Toolkit
- gophish
- phishing
- golang
- security
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
- owasp
- javascript
- vulnerable
- hacking
How to improve NGINX performance, security, and other important things.
Yii 2: The Fast, Secure and Professional PHP Framework
- yii
- php
- php-framework
- yii2
OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.
- application-firewall
- firewall
- linux
- networking
Zuul is a gateway service that provides dynamic routing, monitoring, resiliency, security, and more.
Learn Blockchain, Solidity, and Full Stack Web3 Development with Javascript
- blockchain
- chainlink
- ethereum
- javascript
🐶 A curated list of Web Security materials and resources.
Damn Vulnerable Web Application (DVWA)
- dvwa
- php
- sql-injection
- security
Make your infrastructure invisible to attackers. OpenNHP implements the Network-infrastructure Hiding Protocol (NHP): authenticate before connection, cryptographically. IETF draft.
- cybersecurity
- zero-trust
- zero-trust-network-access
- zero-trust-security
Nmap - the Network Mapper. Github mirror of official SVN repository.
- c-plus-plus
- lua
- security
- port-scanner
GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems.
The developer platform for on-demand cloud development environments to create software faster and more securely.
Cross-platform multi-protocol VPN software. Pull requests are welcome. The stable version is available at https://github.com/SoftEtherVPN/SoftEtherVPN_Stable.
- vpn-tunnel
- vpn-protocols
- softether-vpn
- vpn
Force Remove Copilot, Recall and More in Windows 11
A free, secure and open source app for Android to manage your 2-step verification tokens.
TranslatedA code security guide compiled for developers
Prevents you from committing secrets and credentials into git repositories
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
Community curated list of templates for the nuclei engine to find security vulnerabilities.
- nuclei-templates
- nuclei
- bugbounty
- security
Exploitation Framework for Embedded Devices