Trending repositories

1001.antojoseph / diff-gui

GUI for Frida -Scripts

• frida
• frida-server
• gui
• diff-gui

1002.s3team / VMHunt

The repository host gives no description.

1003.n0kovo / hashcat-rules-collection

Hascat Rules Collection – Probably the largest collection of hashcat rule-files anywhere.

• hashcat
• hashcat-rules
• hashcat-rule
• password-cracking
• password-cracking-tool
• wordlist-generator
• +2 more

1004.urule99 / jsunpack-n

Automatically exported from code.google.com/p/jsunpack-n

1005.IronCoreLabs / recrypt-rs

A set of cryptographic primitives for building a multi-hop Proxy Re-encryption scheme, known as Transform Encryption.

• cryptography
• rust
• proxy-re-encryption
• transform-encryption
• ecc
• constant-time
• +1 more

1006.shipcod3 / mazda_getInfo

A PoC that the USB port is an attack surface for a Mazda car's infotainment system and how Mazda hacks are made

1007.ClaudiuGeorgiu / RiskInDroid

A tool for quantitative risk analysis of Android applications based on machine learning techniques

• android
• risk
• android-permissions
• quantitative-risk-analysis
• machine-learning
• riskindroid

1008.williballenthin / shellbags

Cross-platform, open-source shellbag parser

1009.in-toto / in-toto-golang

A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.

• in-toto
• software-supply-chain
• security

1010.mgreen27 / Invoke-LiveResponse

Invoke-LiveResponse

• ir
• dfir
• winrm
• liveresponse
• forensics
• incident-response
• +1 more

1011.sjhilt / GasPot

GasPot originally released at Blackhat 2015 - Updated for the same stuff 2026

1012.ivre / masscanned

Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.

• networking
• udp
• ipv6
• ipv4
• tcp
• honeypot
• +8 more

1013.kigster / sym

Sym is a command line utility and a Ruby API that makes it trivial to encrypt and decrypt sensitive data. Unlike many other existing encryption tools, sym focuses on usability and streamlined interface (CLI), with the goal of making encryption easy and transparent. The result? There is no excuse for keeping your application secrets unencrypted :)

1014.kellyethridge / VBCorLib

The VBCorLib framework brings many of the powerful .NET classes to VB6.

• collections
• hashing
• biginteger
• encoding
• io
• encryption
• +3 more

1015.evyatarmeged / stegextract

Detect hidden files and text in images

• steganography
• ctf
• stego
• capture-the-flag
• extraction
• extract-images
• +5 more

1016.dereuromark / cakephp-tinyauth

CakePHP TinyAuth plugin for an easy and fast user authentication and authorization. Single or multi role. DB or config file based.

• cakephp-plugin
• acl
• multi-role
• php
• cakephp
• authentication
• +1 more

1017.jellydator / sessionup

Straightforward HTTP session management

• session-management
• session
• http
• golang
• go
• cookies
• +1 more

1018.mzfr / ctf-writeups

Writeups of Capture The Flag Competitions

• ctf
• picoctf
• writeups
• glug
• opentoall
• ota

1019.philsmd / itunes_backup2hashcat

Extract the information needed from the Manifest.plist files to convert it to hashes compatible with hashcat

1020.maciejczyzewski / retter

A collection of hash functions, ciphers, tools, libraries, and materials related to cryptography & security. :closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key: (project was renamed, libchaos is main)

1021.SoftSec-KAIST / NTFuzz

NTFUZZ: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis (IEEE S&P '21)

• fuzzer
• fuzzing
• kernel-fuzzer
• windows-kernel
• b2r2
• fsharp
• +1 more

1022.padok-team / cognito-scanner

A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation

• audit
• cognito
• cybersecurity
• scanner
• security-tools

1023.deadtrickster / ssl_verify_fun.erl

Collection of ssl verification functions for Erlang

• ssl
• erlang
• security
• network
• tls
• certificate
• +3 more

1024.google / container-explorer

The repository host gives no description.

1025.xavierleroy / cryptokit

A library of cryptographic primitives (ciphers, hashes, etc) for OCaml

1026.vw2x / Mira

Mobile runtime detection workbench for AI (iOS and Android)

• frida
• reverse-engineering
• android-security-tools
• frida-gadget
• ios-security-tool
• mcp-client
• +3 more

1027.hiddenillusion / IPinfo

Searches various online resources to try and get as much info about an IP/domain as possible.

1028.theronic / eacl

🦅 EACL: Enterprise Access ControL is a ReBAC Authorization library inspired by SpiceDB, built in Clojure and backed by Datomic Pro, Datahike, Datalevin or DataScript.

• access-control
• clojure
• datalog
• authorization
• datomic
• rebac
• +9 more

1029.cure53 / Publications

A whole bunch of public pentest reports & papers

1030.Cryptogenic / REBot

A discord bot for reverse engineers and exploit developers.

1031.HynekPetrak / sshame

brute force SSH public-key authentication

• ssh
• penetration-testing
• remote-admin-tool
• ssh-key
• brute-force
• brute-force-attacks
• +2 more

1032.adamhlt / Cave-Finder

Tool to find code cave in PE image (x86 / x64) - Find empty space to place code in PE files

• codecave
• cpp
• pe
• winapi
• windows
• windows-internals

1033.MobileForensicsResearch / mem

Tool used for dumping memory from Android devices

1034.packing-box / docker-packing-box

Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection

• docker-image
• executable-packing
• malware-packers
• research-platform
• pe-format
• elf-format
• +7 more

1035.zuBux / drydock

drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates

• docker
• security
• audit

1036.ChrisTruncer / EyeWitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

1037.DuendeArchive / IdentityServer4Archived

The repository host gives no description.

1038.adampetcher / fcf

Foundational Cryptography Framework for machine-checked proofs of cryptography.

1039.bjeborn / basic-auth-pot

bap - http Basic Authentication honeyPot

1040.mbiesiad / awesome-hackathons

😎 Awesome lists about Hackathons around the globe! ✨🎉

• awesome
• hackathon
• hackathons
• awesome-list
• competition
• competitions
• +2 more

1041.randombit / botan-rs

:shrimp: Rust cryptography library

• rust
• cryptography

1042.AdnaneKhan / ActionsTOCTOU

Example repository for GitHub Actions Time of Check to Time of Use (TOCTOU vulnerabilities)

• actions
• bugbounty
• cicd

1043.dmazzella / ucrypto

Micropython package for doing fast rsa and elliptic curve cryptography, specifically digital signatures

• cryptography
• elliptic-curves
• micropython
• rsa

1044.OISF / suricata-intel-index

Suricata rule and intel index

• suricata
• intel
• security
• rules
• signatures
• ids
• +2 more

1045.jferrl / go-githubauth

GitHub App authentication for Go: installation tokens, JWTs and PATs as oauth2.TokenSource, plus webhook signature verification and KMS/HSM signing

• github
• github-authentication
• go
• oauth2
• authentication
• github-api
• +7 more

1046.algorandfoundation / liquid-auth

Liquid Auth Service

• authentication
• fido2
• p2p
• passkeys
• webrtc

1047.adrianosela / sslmgr

A layer of abstraction the around acme/autocert certificate manager (Golang)

• ssl
• ssl-certificates
• ssl-certificate
• x509
• x509certificates
• tls
• +14 more

1048.paulmillr / micro-rsa-dsa-dh

Minimal JS implementation of older cryptography algorithms: RSA, DSA, DH.

• cryptography
• dh
• diffie-hellman
• dsa
• elgamal
• noble
• +2 more

1049.Myr-Aya / GouvernAI-claude-code-plugin

Runtime guardrails for Claude Code. Auto-approve what's safe, gate what's risky, block what's dangerous. Dual enforcement, full audit trail. MIT.

• agentic-ai
• claude
• claude-code
• claude-code-plugin
• destructive-commands
• safety
• +4 more

1050.sane-apps / SaneHosts

Modern, profile-based hosts file manager for macOS. Block ads, trackers, and distractions with ease.

• ad-blocker
• dns
• hosts-file
• macos
• macos-app
• privacy
• +5 more

1051.deep-on / dockprobe

Lightweight Docker monitoring dashboard with anomaly detection & Telegram alerts. One-liner install, zero config.

• anomaly-detection
• container
• dashboard
• devops
• docker
• fastapi
• +11 more

1052.stefanoginella / aicontainer

Sandboxed devcontainer for running Claude Code, Codex, and OpenCode in bypass / auto-approve mode.

• ai
• claude-code
• codex
• devcontainer
• docker
• sandbox
• +2 more

1053.Kernel-Guard / bpfcompat

Open-source eBPF compatibility evidence and CI gate

• bpf
• ci
• compatibility
• ebpf
• github-actions
• kernel-testing
• +9 more

1054.cleatdev / cleat

Give the agent a cage, not your keys. One-command Docker sandbox for AI coding agents: full autonomous permissions, per-project isolation, your host stays untouched.

• ai-agents
• ai-coding
• ai-safety
• autonomous-coding
• claude-code
• cli
• +13 more

1055.alib8b8 / aflare

Local-first automation Agent & deterministic workflow engine — the secure control layer between AI and your data. Data stays local. Connect your own LLM / files / notes / databases via Connector API. ReAct reasoning · DAG/WAL/Saga/idempotent execution · MCP · offline-capable.

• automation
• llm
• mcp
• agent
• dag
• go
• +14 more

1056.brancogao / webhook-debugger

Capture, inspect, and replay webhooks with 90-day history + signature verification. Built on Cloudflare Workers + D1.

• cloudflare-workers
• d1
• debugger
• self-hosted
• serverless
• sqlite
• +14 more

1057.zakariagharzouli / sparda

AI writes. SPARDA proves. A deterministic, offline gate that catches when an AI edit removes a guard, exposes a route, or breaks an invariant — no API key, right in the agent edit loop.

• ai-agents
• ai-code-review
• authorization
• bola
• claude-code
• guardrails
• +4 more

1058.skills-lock / skil-lock

Pin AI Skill behavior. Block unapproved drift in CI. See exactly what changed in every PR.

• ai
• ai-skills
• apache-2
• claude-code
• cli
• codex
• +10 more

1059.kslamph / tronlib

A production-ready Go SDK for TRON: gRPC client with connection pooling, HD wallets, TRC-10/TRC-20, event decoding, transaction simulation, and shielded TRC-20 (Sapling) support. 85% test coverage.

• blockchain
• cryptocurrency
• go
• golang
• sdk
• smart-contracts
• +14 more

1060.nxgn-kd01 / shai-hulud-scanner

Detect the Shai Hulud 2.0 npm supply chain attack (796+ packages). Scans for malicious files, hashes, and compromised ecosystems. Fast, accurate scanner.

• cdn
• cve
• polyfill
• polyfill-io
• scanner
• security
• +2 more