Trending repositories

901.mushorg / snare

Super Next generation Advanced Reactive honEypot

• honeypot
• security
• hacktoberfest

902.abumq / licensepp

Software licensing and registration using digital signatures and public cryptography 🪪

• licensing
• software-licensing
• software-license
• security

903.guardsight / gsvsoc_cirt-playbook-battle-cards

Cyber Incident Response Team Playbook Battle Cards

• playbook-battle-cards
• cybersecurity
• cyber-threats
• cyber-security-team
• incident-response
• secops

904.johnnykv / heralding

Credentials catching honeypot

• honeypot
• deception
• security
• security-tools

905.GoogleCloudPlatform / security-analyticsArchived

Community Security Analytics provides a set of community-driven audit & threat queries for Google Cloud

• security
• gcp
• google-cloud
• bigquery
• chronicle
• cloud-security-command-center
• +7 more

906.kacos2000 / MFT_Browser

$MFT directory tree reconstruction & FILE record info

• mft-browser
• mft
• powershell
• winform
• gui-application
• mft-files
• +10 more

907.number571 / go-peer

🔐 Library for developing secure, decentralized, anonymous and quantum-resistant networks in Go language

• network
• anonymity
• golang
• library
• qb-nets
• hidden-lake
• +14 more

908.dubuqingfeng / ollydbg-scriptArchived

some ollydbg scripts.

• ollydbg
• ollydbg-script

909.pralab / secml_malware

Create adversarial attacks against machine learning Windows malware detectors

• adversarial-machine-learning
• infosec
• python
• attack
• machine-learning
• security

910.mpast / mobileAudit

Django application that performs SAST and Malware Analysis for Android APKs

• android-security
• sast
• malware-analysis
• code-security
• defect-dojo
• virustotal
• +10 more

911.muteb / Hoarder

This script is made to collect the most valiable artifacts for foreniscs or incident reponse investigation rather than imaging the whole har drive.

912.spyre-project / spyre

simple YARA-based IOC scanner

• yara
• ioc
• security
• incident-response
• hacktoberfest
• windows
• +7 more

913.nesfit / fitcrack

A hashcat-based distributed password cracking system

914.AlexanderBagel / ProcessMemoryMap

Deep memory analysis for Windows processes — the tool that saves you hours of debugging

• analyzer
• binary-analysis
• delphi
• dissassembler
• memory-analysis
• pe-format
• +2 more

915.OpenIDC / liboauth2

OAuth 2.x and OpenID Connect C library

• oauth2
• openid-connect
• c
• oauth

916.objective-see / DylibHijackScanner

Scan your computer for applications that are either susceptible to dylib hijacking or have been hijacked.

917.vault12 / electron-webauthn-mac

Native WebAuthn/Passkey support for Electron on macOS using Apple's AuthenticationServices framework

• authenticationservices
• electron
• electron-builder
• fido2
• macos
• passkey
• +2 more

918.sane-apps / SaneHosts

Modern, profile-based hosts file manager for macOS. Block ads, trackers, and distractions with ease.

• ad-blocker
• dns
• hosts-file
• macos
• macos-app
• privacy
• +5 more

919.davidalmeidac / sealed-env

Encrypted .env files with TOTP unsealing for production deploys. Cross-stack (Node + Java). Zero deps. Defends against npm supply-chain attacks.

• 2fa
• aes-gcm
• dotenv
• encryption
• env
• secrets-management
• +6 more

920.santigarcor / laratrust

Handle roles and permissions in your Laravel application

• laratrust
• laravel
• roles
• authorization
• permissions
• php
• +6 more

921.gamelinux / passivedns

A network sniffer that logs all DNS server replies for use in a passive DNS setup

922.pow-auth / pow

Robust, modular, and extendable user authentication system

• phoenix
• authentication
• authorization
• user-management
• elixir

923.google / highwayhashArchived

Fast strong hash functions: SipHash/HighwayHash

924.mikechambers / as3corelib

An ActionScript 3 Library that contains a number of classes and utilities for working with ActionScript? 3. These include classes for MD5 and SHA 1 hashing, Image encoders, and JSON serialization as well as general String, Number and Date APIs.

925.lunasec-io / lunasec

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

• tokenization
• web-security
• compliance
• security
• soc2
• pci-dss
• +14 more

926.airbnb / binaryalert

BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.

• security
• yara
• serverless
• terraform
• lambda
• aws
• +1 more

927.tomchop / malcom

Malcom - Malware Communications Analyzer

• malware
• network-traffic
• pcap
• threat-intelligence
• malware-analysis
• infosec
• +1 more

928.googleapis / google-oauth-java-client

Google OAuth Client Library for Java

929.guelfoweb / peframe

PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.

930.mushorg / glastopf

Web Application Honeypot

931.pedramamini / iocextract

Defanged Indicator of Compromise (IOC) Extractor.

• ioc
• indicators-of-compromise
• library
• ioc-extractor
• defang
• threat-intelligence
• +8 more

932.dfirtrack / dfirtrack

DFIRTrack - The Incident Response Tracking Application

• incident-response
• digital-forensics
• dfir
• incident-response-tooling
• incident-management

933.malicialab / avclass

AVClass malware labeling tool

934.vitaly-kamluk / bitscout

Remote forensics meta tool

935.kpcyrd / authoscope

Scriptable network authentication cracker

• rust
• cracking
• lua
• dictionary-attack
• concurrency
• password
• +2 more

936.hashview / hashview

A web front-end for password cracking and analytics

• python
• hashcat
• web
• flask
• analytics
• distributed

937.DataSoft / Honeyd

virtual honeypots

938.auth0 / auth0.net

.NET client for the Auth0 Authentication & Management APIs.

• oauth2
• openid-connect
• dx-sdk

939.karimhabush / cyberowl

Aggregates security advisories from 10 international CERTs daily and provides an AI skill that cross-references alerts against your project's tech stack.

• cve
• security
• security-alerts
• vulnerability
• cisa

940.0xBallpoint / trapster-community

Modern honeypot supporting multiple services, realistic website cloning, and AI-powered features

• cybersecurity
• honeypot
• python
• ai
• deceptive

941.wernsey / chip8

A CHIP-8 interpreter, assembler and disassembler in C

• chip8
• chip-8
• chip8-emulator
• emulator
• sdl
• disassembler

942.timbo05sec / autocrack

Hashcat wrapper to help automate the cracking process

943.baumschubser / hotpants

HOTP/TOTP one time passwords on java phones (J2ME)

• hotp
• j2me
• j2me-platform
• one-time-pad
• otp
• otp-generator
• +4 more

944.atgreen / pure-tls

Pure Common Lisp TLS 1.3 implementation

945.hahwul / xssmaze

XSSMaze is a web service designed to test and improve the performance of security testing tools by providing various cases of XSS vulnerabilities.

• crystal-lang
• hacking
• security
• vulnapp
• xss
• xss-maze

946.Hossiy21 / razify

A developer CLI tool that manages .env files, detects secret leaks, syncs env drift across teammates, and validates environment parity between local/staging/prod all from your terminal. Written in Go.

• cli
• developer-tools
• devops
• dotenv
• env
• environment-variables
• +5 more

947.cherifon / Ultimate-DNS-Shield

Self-hosted DNS with Pi-hole + Unbound + Docker on Raspberry Pi

• dns
• docker
• homelab
• linux
• networking
• pihole
• +4 more

948.bitwiseshiftleft / sjcl

[DEPRECATED] Stanford Javascript Crypto Library

949.maxchehab / CSS-Keylogging

Chrome extension and Express server that exploits keylogging abilities of CSS.

950.google / binnaviArchived

BinNavi is a binary analysis IDE that allows to inspect, navigate, edit and annotate control flow graphs and call graphs of disassembled code.

• reverse-engineering
• java
• binnavi
• yfiles
• analysis

951.square / keywhizArchived

A system for distributing and managing secrets

• keywhiz
• secret-management
• secret-distribution
• enterprise-software
• manage-secrets
• secrets
• +2 more

952.openshift / osin

Golang OAuth2 server library

953.TakeScoop / SwiftyRSA

RSA public/private key encryption in Swift

• swift
• ios
• encryption
• rsa
• tvos
• watchos
• +2 more

954.cybercog / laravel-ban

Laravel Ban simplify blocking and banning Eloquent models.

• laravel
• eloquent
• cog
• trait
• ban
• jail
• +12 more

955.google / mundane

Mundane is a Rust cryptography library backed by BoringSSL that is difficult to misuse, ergonomic, and performant (in that order).

• cryptography
• rust
• boringssl

956.stevemk14ebr / PolyHookArchived

x86/x64 C++ Hooking Library

957.Apr4h / CobaltStrikeScan

Scan files or process memory for CobaltStrike beacons and parse their configuration

958.secrary / Andromeda

Andromeda - Interactive Reverse Engineering Tool for Android Applications

• android
• reverse-engineering
• binary-analysis
• static-analysis
• apk

959.idanr1986 / cuckoo-droid

CuckooDroid - Automated Android Malware Analysis with Cuckoo Sandbox.

960.google / ukip

USB Keystroke Injection Protection

961.iSECPartners / Introspy-Android

Security profiling for blackbox Android

962.monnappa22 / Limon

Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools

963.BoomerangDecompiler / boomerang

Boomerang Decompiler - Fighting the code-rot :)

• c-plus-plus
• qt5
• reverse-engineering
• decompiler
• cmake
• x86
• +5 more

964.pret / pokemon-reverse-engineering-toolsArchived

Tools for building and disassembling Pokémon Red and Pokémon Crystal

• pokemon
• reverse-engineering
• disassembly
• python

965.linuz / Sticky-Keys-Slayer

Scans for accessibility tools backdoors via RDP

966.hegusung / WebHashcat

Hashcat web interface

• hashcat
• cracking
• analytics
• pentesting
• password-cracking
• security-tools

967.CyLabAcademy / picoCTFArchived

The platform used to run picoCTF 2019. (deprecated)

968.GaProgMan / OwaspHeaders.Core

Inject OWASP recommended HTTP Headers for increased security in a single line

• aspnetcore
• middleware
• owasp
• security
• nuget
• http-header
• +1 more

969.moyix / creddump

Automatically exported from code.google.com/p/creddump

970.guitmz / ezuri

A Simple Linux ELF Runtime Crypter

971.codeyourweb / fastfinder

Incident Response - Fast suspicious file finder

• dfir
• investigation
• incident-response
• threat-hunting

972.viniciussanchez / bcrypt

BCrypt is a password hashing function

• bcrypt
• delphi
• hash
• password
• hash-passwords
• embarcadero
• +4 more

973.sharplispers / ironclad

A cryptographic toolkit written in Common Lisp

974.omniauth / omniauth_openid_connect

The repository host gives no description.

• omniauth

975.wqweto / VbAsyncSocket

Sockets with pure VB6 impl of TLS encryption

• vb6
• ssl
• tls
• winsock
• async
• x25519
• +11 more

976.sjhilt / GasPot

GasPot originally released at Blackhat 2015 - Updated for the same stuff 2026

977.rod-chapman / SPARKNaCl

SPARK 2014 re-implementation of the TweetNaCl crypto library

978.jferrl / go-githubauth

GitHub App authentication for Go: installation tokens, JWTs and PATs as oauth2.TokenSource, plus webhook signature verification and KMS/HSM signing

• github
• github-authentication
• go
• oauth2
• authentication
• github-api
• +7 more

979.FileShot / FileShotZKE

Client-side AES-256-GCM zero-knowledge encryption library. Browser-native Web Crypto API, no dependencies. Powers FileShot.io.

• aes-256
• aes-256-gcm
• browser-encryption
• client-side-encryption
• encryption
• file-sharing
• +5 more

980.google / enjarifyArchived

The repository host gives no description.

981.pwnlandia / mhn

Modern Honey Network

• hacktoberfest

982.DuendeArchive / identity-model-oidc-client-jsArchived

OpenID Connect (OIDC) and OAuth2 protocol support for browser-based JavaScript applications

983.viper-framework / viperArchived

Binary analysis and management framework

984.dmpayton / django-admin-honeypot

:honey_pot: A fake Django admin login screen page.

• python
• django

985.BinaryDefense / artillery

The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.

986.rushisangani / BiometricAuthentication

Use Apple FaceID or TouchID authentication in your app using BiometricAuthentication.

• authentication
• faceid
• touchid
• biometric-identification
• biometric
• apple
• +13 more

987.krzyzanowskim / ObjectivePGP

ObjectivePGP is an open-source library for iOS and macOS that provides developers with tools for implementing OpenPGP encryption and decryption, digital signing, and signature verification in their applications, thereby enhancing security and data integrity.

• openpgp
• objective-c
• encryption
• pgp
• osx
• macos
• +4 more

988.OpenSOC / opensoc

OpenSOC Apache Hadoop Code

989.gfoss / PSRecon

:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.

990.dashbitco / nimble_totp

A tiny Elixir library for time-based one time passwords (TOTP)

• elixir
• 2fa
• totp

991.SpectralOps / keyscope

Keyscope is a key and secret workflow (validation, invalidation, etc.) tool built in Rust

• devops
• developer-tools
• pentest
• security
• vault
• testing
• +1 more

992.rieck / malheur

A Tool for Automatic Analysis of Malware Behavior

• machine-learning
• clustering
• classification
• malware-analysis

993.pluto / ronkathon

Cryptography Educational Foundations

• mathematics
• rustlang
• zero-knowledge
• cryptography

994.arcaneiceman / kraken

Kraken: A multi-platform distributed brute-force password cracking system

• kraken
• kraken-client
• security-tools
• security
• wpa2-cracking
• bruteforce-password-cracker
• +2 more

995.lorien / captcha_solver

Universal python API to captcha solving services

• captcha
• captcha-solving
• captcha-breaking
• recaptcha
• api
• antigate
• +4 more

996.DoctorMcKay / node-steam-totp

Lightweight module to generate Steam-style TOTP auth codes.

• steam
• node
• javascript

997.CheckPointSW / showstopper

ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods.

• research
• anti-debug
• malware

998.KishanBagaria / padding-oracle-attacker

🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.

• padding-oracle
• aes
• decryption
• encryption
• cipher-block-chaining
• cbc
• +4 more

999.mbevilacqua / appcompatprocessor

"Evolving AppCompat/AmCache data analysis beyond grep"

1000.appknox / AFE

Android Framework for Exploitation, is a framework for exploiting android based devices