Trending repositories

1.google / oss-fuzz

OSS-Fuzz - continuous fuzzing for open source software.

• fuzzing
• security
• stability
• oss-fuzz
• fuzz-testing
• vulnerabilities

2.edoardottt / awesome-hacker-search-engines

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

• awesome
• awesome-list
• hacking
• search-engine
• osint
• awesome-lists
• +13 more

3.CISOfy / lynis

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

• shell
• linux
• pci-dss
• compliance
• security-audit
• security-hardening
• +14 more

4.acmesh-official / acme.sh

A pure Unix shell script ACME client for SSL / TLS certificate automation

• acme
• acme-protocol
• certbot
• shell
• ash
• bash
• +12 more

5.1N3 / Sn1per

Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.

• sn1per
• sn1per-professional
• bugbounty-platform
• attack-surface
• cybersecurity
• pentest-tool
• +13 more

6.telekom-security / tpotce

🍯 T-Pot - The All In One Multi Honeypot Platform 🐝

• honeypot
• security
• docker
• elk
• deception
• network-security
• +1 more

7.angristan / wireguard-install

WireGuard VPN installer for Linux servers

• wireguard
• vpn
• linux
• nat
• privacy

8.k4m4 / movies-for-hackers

🎬 A curated list of movies every hacker & cyberpunk must watch.

• hacking
• movies
• curated-list
• collection
• sexy-lists
• awesome
• +2 more

9.trimstray / nginx-admins-handbook

How to improve NGINX performance, security, and other important things.

• nginx
• nginx-proxy
• nginx-configuration
• security
• performance
• http
• +11 more

10.kaitai-io / kaitai_struct

Kaitai Struct: declarative language to generate binary data parsers in C++ / C# / Go / Java / JavaScript / Lua / Nim / Perl / PHP / Python / Ruby / Rust

• reverse-engineering
• protocol-analyser
• file-format
• declarative-language
• ruby
• java
• +13 more

11.dfir-iris / iris-web

Collaborative Incident Response platform

• forensic
• incident-response
• csirt-tooling
• python
• digital-forensics
• digital-forensics-incident-response
• +2 more

12.angristan / openvpn-install

Set up your own OpenVPN server on Debian, Ubuntu, Fedora, CentOS, Arch Linux and more

• openvpn
• vpn
• encryption
• bash
• debian
• ubuntu
• +9 more

13.tclahr / uac

UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.

• incident-response
• forensics
• computer-forensics
• triage
• linux
• aix
• +14 more

14.BrowserBox / BrowserBox

💚🇺🇸🗽Secure remote browsing anywhere, any way you like it. Since 2018.

• embeddable
• chrome
• cobrowsing
• proxy-server
• browser
• rbi
• +14 more

15.hectorm / hblock

Improve your security and privacy by blocking ads, tracking and malware domains.

• ad-blocker
• adblock
• adblocker
• ads
• advertisements
• blocker
• +14 more

16.pry0cc / axiom

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

• hacking-vps
• bug-bounty
• tmux
• axiom
• masscan
• gowitness
• +12 more

17.latchset / clevis

Automated Encryption Framework

18.Safe3 / uusec-waf

Industry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.

• waf
• application-security
• web-application-firewall
• modsecurity
• web-security-gateway
• api-gateway
• +14 more

19.nginx-proxy / acme-companion

Automated ACME SSL certificate generation for nginx-proxy

• nginx-proxy
• letsencrypt
• docker
• ssl
• acme
• acme-v2
• +3 more

20.sobolevn / git-secret

:busts_in_silhouette: A bash-tool to store your private data inside a git repository.

• git-secret
• git
• git-addons
• gpg
• encryption
• secret-management

21.docker / docker-bench-security

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

22.JeongJaeSoon / agent-guard

Real-time secret-leak guardrails for AI coding agents (Claude Code, Codex), Git hooks, and CI.

• ai-agents
• claude-code
• claude-code-plugin
• codex
• devsecops
• github-actions
• +3 more

23.jkroepke / helm-secrets

A helm plugin that help manage secrets with Git workflow and store them anywhere

• helm
• helm-plugin
• helm-plugins
• kubernetes
• k8s
• helm-charts
• +14 more

24.Aegrah / PANIX

Customizable Linux Persistence Tool for Security Research and Detection Engineering.

• bash
• linux
• persistence
• backdoor
• security

25.fsquillace / junest

The lightweight Arch Linux based distro that runs, without root privileges, on top of any other Linux distro.

• sandbox
• arch-linux
• root-privileges
• linux-distros
• linux-os
• qemu
• +3 more

26.ashishb / android-malware

Collection of android malware samples

27.HightechSec / git-scanner

A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public

• hacking-tools
• bash
• git-dumper
• pentesting
• pentest-tool
• security-audit
• +1 more

28.wireghoul / graudit

grep rough audit - source code auditing tool

• security
• shell
• vulnerability-detection
• source-code
• security-audit
• security-tools

29.brainfucksec / kalitorify

Transparent proxy through Tor for Kali Linux OS

• tor
• tor-proxy
• transparent-proxy
• kali-linux
• bash-script
• security
• +2 more

30.vitaly-kamluk / bitscout

Remote forensics meta tool

31.ivanilves / xiringuito

SSH-based "VPN for poors"

• vpn
• ssh
• bastion-host
• security
• network
• access
• +1 more

32.docker / scout-cli

Docker Scout CLI

• docker
• security
• supply-chain-security

33.evyatarmeged / stegextract

Detect hidden files and text in images

• steganography
• ctf
• stego
• capture-the-flag
• extraction
• extract-images
• +5 more

34.bad-antics / nullsec-linux

🐧 Security-focused Linux distribution with 140+ tools, custom kernel 6.17.13, AI assistant | 5 editions | Cloud, AI/ML, Automotive, Hardware hacking

• hacking
• linux
• penetration-testing
• distro
• kernel
• nullsec
• +3 more

35.stefanoginella / aicontainer

Sandboxed devcontainer for running Claude Code, Codex, and OpenCode in bypass / auto-approve mode.

• ai
• claude-code
• codex
• devcontainer
• docker
• sandbox
• +2 more

36.cleatdev / cleat

Give the agent a cage, not your keys. One-command Docker sandbox for AI coding agents: full autonomous permissions, per-project isolation, your host stays untouched.

• ai-agents
• ai-coding
• ai-safety
• autonomous-coding
• claude-code
• cli
• +13 more

37.nxgn-kd01 / shai-hulud-scanner

Detect the Shai Hulud 2.0 npm supply chain attack (796+ packages). Scans for malicious files, hashes, and compromised ecosystems. Fast, accurate scanner.

• cdn
• cve
• polyfill
• polyfill-io
• scanner
• security
• +2 more