Trending repositories

1.hagezi / dns-blocklists

DNS-Blocklists: For a better internet - keep the internet clean!

• dns
• ads
• blacklist
• blocklist
• coins
• domains
• +14 more

2.Datalux / Osintgram

Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname

• osint
• osint-python
• python3
• instagram
• instagram-api
• penetration-testing
• +7 more

3.angusdevgo / Seep-Reverse-Lab

Agent-Native multi-platform reverse engineering and CWE-602 client-side authorization audit workbench.

4.EthanArbuckle / fairplay-decrypt

Offline FairPlay App Store IPA decryption with independent key derivation

5.hevnsnt / CVEngine

AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.

• ai
• attack-surface-management
• bbot
• cybersecurity
• mcp
• nmap
• +2 more

6.megadose / holehe

holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.

• information-gathering
• osint
• osint-tools
• open-source-intelligence
• python
• email
• +9 more

7.sundowndev / phoneinfoga

Information gathering framework for phone numbers

• information-gathering
• phone-number
• osint
• open-source-intelligence
• reconnaissance
• footprint
• +4 more

8.MobSF / Mobile-Security-Framework-MobSF

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

• static-analysis
• dynamic-analysis
• mobsf
• android-security
• mobile-security
• windows-mobile-security
• +13 more

9.cryptomator / cryptomator

Cryptomator for Windows, macOS, and Linux: Secure client-side encryption for your cloud storage, ensuring privacy and control over your data.

• cryptomator
• java
• cloud-storage
• cryptography
• crypto
• security
• +2 more

10.tutao / tutanota

Tuta is an email service with a strong focus on security and privacy that lets you encrypt emails, contacts and calendar entries on all your devices.

• javascript
• mithril
• encryption
• email
• tutanota
• security
• +1 more

11.dnSpyEx / dnSpy

Unofficial revival of the well known .NET debugger and assembly editor, dnSpy

• baml
• csharp
• debug
• debugger
• decompile
• decompiler
• +9 more

12.digininja / DVWA

Damn Vulnerable Web Application (DVWA)

• dvwa
• php
• sql-injection
• security
• training
• infosec
• +1 more

13.acmesh-official / acme.sh

A pure Unix shell script ACME client for SSL / TLS certificate automation

• acme
• acme-protocol
• certbot
• shell
• ash
• bash
• +12 more

14.CISOfy / lynis

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

• shell
• linux
• pci-dss
• compliance
• security-audit
• security-hardening
• +14 more

15.rizinorg / cutter

Free and Open Source Reverse Engineering Platform powered by rizin

• cutter
• gui
• reverse-engineering
• security
• debugger

16.htr-tech / zphisher

An automated phishing tool with 30+ templates. This Tool is made for educational purpose only ! Author will not be responsible for any misuse of this toolkit !

• phishing
• phisher
• phishing-attacks
• htr-tech
• phishing-pages
• zphisher

17.telekom-security / tpotce

🍯 T-Pot - The All In One Multi Honeypot Platform 🐝

• honeypot
• security
• docker
• elk
• deception
• network-security
• +1 more

18.BishopFox / sliver

Adversary Emulation Framework

• security-tools
• implant
• golang
• dns-server
• http
• c2
• +9 more

19.sbondCo / Watcharr

Open source, self-hostable watched list for all your content (movies, tv series, anime, games) with user authentication, modern and clean UI and a very simple setup.

• go
• golang
• svelte
• sveltekit
• sqlite
• sqlite3
• +14 more

20.lanmaster53 / recon-ng

Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.

21.wifiphisher / wifiphisher

The Rogue Access Point Framework

• wifiphisher
• wifi
• rogue
• access-point
• python
• security
• +4 more

22.sensepost / objection

📱 objection - runtime mobile exploration

• mobile
• pentest
• framework
• ios
• instrumentation
• frida
• +2 more

23.AzeemIdrisi / PhoneSploit-Pro

An all-in-one hacking tool to remotely take over Android devices.

• adb
• android
• android-debug-bridge
• cybersecurity
• exploit
• hacking
• +14 more

24.x64dbg / ScyllaHide

Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide

• anti-debugging
• anti-debug
• debugging
• debugger
• debug
• x64dbg
• +3 more

25.nilsteampassnet / TeamPass

Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.

• php
• access-control
• audit
• browser-extension
• compliance
• credentials
• +14 more

26.Mebus / cupp

Common User Passwords Profiler (CUPP)

• wordlist-generator
• wordlist
• dictionary-attack
• password
• password-strength
• weak-passwords

27.s0md3v / Photon

Incredibly fast crawler designed for OSINT.

• crawler
• spider
• python
• osint
• information-gathering

28.future-architect / vuls

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

• vuls
• vulnerability-scanners
• golang
• go
• linux
• freebsd
• +14 more

29.beelzebub-labs / beelzebub

A secure low code deception runtime framework, leveraging AI for System Virtualization.

• cybersecurity
• security
• honeypot
• framework
• go
• research-project
• +14 more

30.sanjayadanushka712 / Ghost-Night

Local-only browser fingerprint & identity rotation toolkit for authorized security testing. Tor/obfs4, coherent profiles, WebRTC/DNS leak protection.

• browser-privacy
• cli
• fingerprinting
• identity-rotation
• obfs4
• security-testing
• +1 more

31.screetsec / TheFatRat

Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .

• thefatrat
• bypass
• linux
• autorun
• bypass-av
• antivirus
• +14 more

32.ivre / ivre

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.

• bro
• scans
• nmap
• network
• network-discovery
• scan-ports
• +14 more

33.hashtopolis / server

Hashtopolis - distributed password cracking with Hashcat

• cracking
• distributed
• hashcat
• pentesting
• passwords
• hashtopussy
• +8 more

34.guardicore / monkey

Infection Monkey - An open-source adversary emulation platform

• penetration-testing
• security-tools
• security-automation
• infection-monkey
• adversary-emulation

35.WithSecureOpenSource / chainsaw

Rapidly Search and Hunt through Windows Forensic Artefacts

• attack
• rust
• security
• threat-hunting
• blueteam
• chainsaw
• +7 more

36.odedshimon / BruteShark

Network Analysis Tool

• hacking
• pcap-files
• pcap
• cyber
• network-analysis
• hashcat
• +11 more

37.s0md3v / XSStrike

Most advanced XSS scanner.

• xss
• xss-scanner
• xss-exploit
• xss-bruteforce
• xss-python
• xss-detection
• +2 more

38.AGWA / git-crypt

Transparent file encryption in git

39.aquasecurity / cloudsploit

Cloud Security Posture Management (CSPM)

• aws
• security
• security-audit
• cloud
• azure
• cspm
• +5 more

40.codingo / NoSQLMap

Automated NoSQL database enumeration and web application exploitation tool.

• nosql
• nosql-databases
• penetration-testing
• scanner
• security-audit
• security-tools
• +14 more

41.m0bilesecurity / RMS-Runtime-Mobile-Security

Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime

• mobile-security
• android-security
• frida
• reverse-engineering
• ios-security

42.latchset / clevis

Automated Encryption Framework

43.Konloch / bytecode-viewer

A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

• java-decompiler
• apk
• java
• procyon
• cfr
• fernflower
• +14 more

44.java-decompiler / jd-gui

A standalone Java Decompiler GUI

45.extremecoders-re / pyinstxtractor

PyInstaller Extractor

• python
• pyinstaller
• decompile
• reverse-engineering
• pyinstaller-extractor
• python-decompiler
• +2 more

46.objective-see / BlockBlock

BlockBlock provides continual protection by monitoring persistence locations.

47.nil0x42 / phpsploit

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

• post-exploitation
• hacking
• backdoor
• stealth
• hacktool
• blackhat
• +12 more

48.evilsocket / xrayArchived

XRay is a tool for recon, mapping and OSINT gathering from public networks.

• osint
• security
• network
• shodan
• intelligence
• mapping

49.NtQuery / Scylla

Imports Reconstructor

50.CaringCaribou / caringcaribou

A friendly car security exploration tool for the CAN bus

• python
• can-bus
• security-scanner
• security-testing
• fuzzing
• xcp
• +1 more

51.traggo / server

self-hosted tag-based time tracking

• golang
• selfhosted
• freesoftware
• privacy
• self-hosted
• timetracking
• +2 more

52.dyc3 / steamguard-cli

A linux utility for generating 2FA codes for Steam and managing Steam trade, market, and other confirmations.

• steam
• steamguard-cli
• linux-utility
• sda
• 2fa
• steambot
• +1 more

53.D4Vinci / elpscrk

An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)

• elliot
• cupp
• passwords
• hacking-tool
• bruteforce
• brute-force
• +6 more

54.fwdai / rowel

🔑 Local-first Secrets Manager

• password
• password-manager
• desktop
• credentials
• security
• cipher
• +11 more

55.OneKeePass / mobile

A secure password manager for iOS and Android platforms

56.de4dot / de4dotArchived

.NET deobfuscator and unpacker.

57.linuxserver / docker-swag

Nginx webserver and reverse proxy with php support and a built-in Certbot (Let's Encrypt) client. It also contains fail2ban for intrusion prevention.

• hacktoberfest

58.epinna / weevely3

Weaponized web shell

59.authpass / authpass

AuthPass - Password Manager based on Flutter for all platforms. Keepass 2.x (KDBX 3 and KDBX 4) compatible.

• flutter
• password-manager
• password-store
• android
• macos-application
• flutter-apps
• +14 more

60.cliffe / SecGen

Create randomly insecure VMs

• security
• security-vulnerability
• virtualization
• randomization
• provisioning
• labs
• +2 more

61.h3xduck / TripleCross

A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.

• backdoor
• ebpf
• kernel
• rootkit
• security
• libbpf

62.x0rz / phishing_catcher

Phishing catcher using Certstream

• phishing
• threat-intelligence
• certificate-transparency
• osint
• threatintel

63.JusticeRage / Manalyze

A static analyzer for PE executables.

• malware
• static
• analysis
• pe

64.OneKeePass / desktop

A secure password manager for macOS,Linux and Windows platforms

65.SpecterOps / BloodHound-Legacy

Six Degrees of Domain Admin

66.Greenwolf / social_mapper

A Social Media Enumeration & Correlation Tool by Jacob Wilkin(Greenwolf)

67.a0rtega / pafishArchived

Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do

• malware
• reverse-engineering
• virtual-machine
• malware-families
• analysis-environments
• sandbox
• +3 more

68.Cyb3rWard0g / HELK

The Hunting ELK

• hunting
• elasticsearch
• kibana
• logstash
• hunting-platforms
• elk
• +7 more

69.wolfSSL / wolfssl

The wolfSSL library is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3 and DTLS 1.3! Update to wolfSSL 5.9.1 for the latest CVE fixes.

• ssl
• tls
• cryptography
• security
• openssl
• tls13
• +14 more

70.sans-blue-team / DeepBlueCLI

The repository host gives no description.

71.0xInfection / TIDoS-Framework

The Offensive Manual Web Application Penetration Testing Framework.

• web-penetration-testing
• reconnaissance
• vulnerability-analysis
• scanning-enumeration
• web-fuzzer
• osint
• +7 more

72.ev-flow / quark-engine

The repository host gives no description.

• defcon
• android
• blackhat
• blackbox
• malware-analysis
• malware-detection

73.PlumHound / PlumHound

Bloodhound Reporting for Blue and Purple Teams

• active
• directory
• blueteam
• purpleteam
• bloodhound
• bloodhoundad
• +14 more

74.AndroBugs / AndroBugs_FrameworkArchived

AndroBugs Framework is an efficient Android vulnerability scanner that helps developers or hackers find potential security vulnerabilities in Android applications. No need to install on Windows.

75.l4rm4nd / VoucherVault

Django web application to store and manage vouchers, coupons, loyalty and gift cards digitally. Supports PWA, offline caching, expiry notifications, transaction histories, file uploads and OIDC SSO.

• coupons
• vouchers
• conventional-commits
• apprise
• asset-manager
• coupon-management-system
• +14 more

76.akamai-threat-research / mqtt-pwn

MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.

• python
• mqtt
• mqtt-broker
• mqtt-client
• iot
• exploitation
• +1 more

77.julioliraup / Antiphishing

Advanced Phishing Protection: Suricata rulesets open and free

• anti-phishing
• antiphishing
• openphish
• phishing
• phishstats
• ruleset
• +14 more

78.SpiderLabs / ResponderArchived

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

79.Neo23x0 / Loki

Loki - Simple IOC and YARA Scanner

• python
• yara
• signature
• scanner
• ioc
• otx
• +4 more

80.0xInfection / XSRFProbe

The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.

• csrf
• crawler
• csrf-attacks
• token-generation
• csrf-scanner
• crafted-tokens
• +5 more

81.P3GLEG / Whaler

Program to reverse Docker images into Dockerfiles

• security-tools
• security
• docker-security
• reverse-engineering
• docker-image
• dockerfile
• +2 more

82.Abacus-Group-RTO / legionArchived

Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance and exploitation of information systems.

83.ohmybahgosh / RockYou2021.txt

RockYou2021.txt is a MASSIVE WORDLIST compiled of various other wordlists. RockYou2021.txt DOES NOT CONTAIN USER:PASS logins!

• wordlist
• rockyou
• rockyou2021
• wordlists
• password-strength
• password-safety
• +5 more

84.orlikoski / CyLR

CyLR - Live Response Collection Tool

85.StamusNetworks / scirius

Scirius is a web application for Suricata ruleset management and threat hunting.

• python
• security
• management
• interface
• suricata
• signatures
• +8 more

86.activecm / rita

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

• beacons
• blue-team
• c2
• command-and-control
• cyber-security
• network-traffic-analysis
• +10 more

87.mushorg / snare

Super Next generation Advanced Reactive honEypot

• honeypot
• security
• hacktoberfest

88.CyberShadow / RABCDAsm

Robust ABC (ActionScript Bytecode) [Dis-]Assembler

89.spieglt / Cloaker

Simple, drag-and-drop, password-based file encryption

• encryption-utility
• cross-platform
• encryption
• gui
• drag-and-drop
• simple
• +2 more

90.SUPERAndroidAnalyzer / superArchived

Secure, Unified, Powerful and Extensible Rust Android Analyzer

• rust
• analyzer
• android
• vulnerabilities
• android-development
• linux
• +10 more

91.WangYihang / Webshell-Sniper

:hammer: Manage your website via terminal

• php
• security-tools
• python
• pentest
• webshell-sniper
• webshell

92.kpcyrd / authoscope

Scriptable network authentication cracker

• rust
• cracking
• lua
• dictionary-attack
• concurrency
• password
• +2 more

93.JoelGMSec / Cloudtopolis

Zero Infrastructure Password Cracking

• cloudtopolis
• cracking
• hashes
• cloud
• hashcat
• hashtopolis

94.monnappa22 / Limon

Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools

95.andreiverse / gorilla

tool for generating wordlists or extending an existing one using mutations.

• cracking
• hash
• hashcat
• infosec
• johntheripper
• security

96.clem9669 / wordlists

Various wordlists FR & EN - Cracking French passwords

• wordlists
• hashcat
• french
• cracking-hashes
• cracking-password
• password
• +6 more

97.89luca89 / pakkero

Pakkero is a binary packer written in Go made for fun and educational purpose. Its main goal is to take in input a program file (elf binary, script, even appimage) and compress it, protect it from tampering and intrusion.

• launcher
• payload
• elf
• elf-binaries
• golang
• upx
• +4 more

98.Warxim / petep

PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡

• proxy
• tcp
• tcp-proxy
• penetration-testing
• hacking
• security
• +14 more

99.mpast / mobileAudit

Django application that performs SAST and Malware Analysis for Android APKs

• android-security
• sast
• malware-analysis
• code-security
• defect-dojo
• virustotal
• +10 more

100.appknox / AFE

Android Framework for Exploitation, is a framework for exploiting android based devices