Trending repositories

201.google / nsjail

A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

• security
• linux-namespaces
• linux
• process-isolation
• seccomp-bpf-policies
• chroot

202.Yamato-Security / hayabusa

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

• dfir
• threat
• hunting
• windows
• event
• logs
• +14 more

203.beefproject / beef

The Browser Exploitation Framework Project

204.pardeike / Harmony

A library for patching, replacing and decorating .NET and Mono methods during runtime

• csharp
• patcher
• detour
• detours
• runtime
• mono
• +5 more

205.horsicq / DIE-engine

DIE engine

• signature
• reverse-engineering
• unpacker
• yara
• elf
• program-analysis
• +5 more

206.bitnami / sealed-secrets

A Kubernetes controller and tool for one-way encrypted Secrets

• kubernetes
• kubernetes-secrets
• devops-workflow
• encrypt-secrets
• gitops

207.CTFd / CTFd

CTFs as you need them

• ctf
• security
• education
• flask
• ctfd

208.extremecoders-re / pyinstxtractor

PyInstaller Extractor

• python
• pyinstaller
• decompile
• reverse-engineering
• pyinstaller-extractor
• python-decompiler
• +2 more

209.korcankaraokcu / PINCE

Reverse engineering tool for Linux

• gdb
• cheat-engine
• reverse-engineering
• injection
• memory-hacking
• hex-editor
• +10 more

210.pyca / cryptography

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.

• python
• cryptography

211.ayoubfaouzi / al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

• anti-analysis
• anti-debugging
• anti-sandbox
• anti-vm
• anti-emulation
• code-injection
• +5 more

212.stamparm / maltrail

Malicious traffic detection system

• security
• malware
• intrusion-detection
• sensor
• python
• network-monitoring
• +2 more

213.APKLab / APKLab

Android Reverse-Engineering Workbench for VS Code

• apktool
• apk-decompiler
• apk-editor
• smali
• dalvik
• smalidea
• +12 more

214.pglombardo / PasswordPusher

🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.

• security
• password-expiration
• password
• password-safety
• communicate-passwords
• password-pusher
• +13 more

215.spiffe / spire

The SPIFFE Runtime Environment

216.str4d / rage

A simple, secure and modern file encryption tool (and Rust library) with small explicit keys, no config options, and UNIX-style composability.

• cli
• encryption
• zero-configuration
• secure-by-default
• unix-philosophy
• curve25519
• +5 more

217.beelzebub-labs / beelzebub

A secure low code deception runtime framework, leveraging AI for System Virtualization.

• cybersecurity
• security
• honeypot
• framework
• go
• research-project
• +14 more

218.threat9 / routersploit

Exploitation Framework for Embedded Devices

• python
• security
• infosec
• router-exploitation-framework
• routersploit-framework
• exploits
• +7 more

219.Konloch / bytecode-viewer

A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

• java-decompiler
• apk
• java
• procyon
• cfr
• fernflower
• +14 more

220.golang-jwt / jwt

Go implementation of JSON Web Tokens (JWT).

• go
• golang
• jwt
• auth
• ed25519
• security

221.thinkst / opencanary

Modular and decentralised honeypot

222.nccgroup / ScoutSuite

Multi-Cloud Security Auditing Tool

• aws
• azure
• gcp
• cloud
• security
• auditing

223.aboul3la / Sublist3r

Fast subdomains enumeration tool for penetration testers

224.evilsocket / pwnagotchi

(⌐■_■) - Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.

• ai
• deep-reinforcement-learning
• wpa-psk
• handshakes
• bettercap
• deep-learning
• +1 more

225.sbondCo / Watcharr

Open source, self-hostable watched list for all your content (movies, tv series, anime, games) with user authentication, modern and clean UI and a very simple setup.

• go
• golang
• svelte
• sveltekit
• sqlite
• sqlite3
• +14 more

226.SwiftOnSecurity / sysmon-config

Sysmon configuration file template with default high-quality event tracing

• sysmon
• threatintel
• threat-hunting
• sysinternals
• windows
• netsec
• +2 more

227.lief-project / LIEF

LIEF - Library to Instrument Executable Formats (C++, Python, Rust)

• reverse-engineering
• malware-analysis
• binary-analysis
• parser
• modification
• executable-formats
• +13 more

228.future-architect / vuls

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

• vuls
• vulnerability-scanners
• golang
• go
• linux
• freebsd
• +14 more

229.GrapheneOS / hardened_malloc

Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.

• malloc
• security
• memory-allocation
• malloc-library
• memory-allocator
• memory
• +4 more

230.java-decompiler / jd-gui

A standalone Java Decompiler GUI

231.momenbasel / htb-writeups

The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups

• active-directory
• cheatsheet
• ctf
• cybersecurity
• ethical-hacking
• hackthebox
• +14 more

232.mandiant / flare-floss

FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

• malware
• deobfuscation
• strings
• flare
• malware-analysis
• gsoc-2026

233.goshs-labs / goshs

Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.

• golang
• http-server
• https-server
• ctf
• devtools
• file-transfer
• +14 more

234.stalniy / casl

CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access

• authorization
• permissions
• acl
• cancan
• casl
• isomorphic-javascript

235.motdotla / dotenv

Loads environment variables from .env for nodejs projects.

• dotenv
• environment-variables
• javascript
• node
• nodejs
• secrets
• +5 more

236.JonathanSalwan / Triton

Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.

• reverse-engineering
• symbolic-execution
• binary-analysis
• program-analysis
• taint-analysis
• binary-translation
• +5 more

237.leibnitz27 / cfr

This is the public repository for the CFR Java decompiler

238.Volmarg / personal-management-system

Your web application for managing personal data.

• dashboard
• dashboards
• manager
• symfony
• mit
• self-hosted
• +14 more

239.turbot / steampipe

Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.

• steampipe
• postgresql
• postgresql-fdw
• cloud
• security
• aws
• +14 more

240.RhinoSecurityLabs / cloudgoat

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

241.justauth / JustAuth

Translated🏆Gitee's most valuable open source project 🚀:100: A small, comprehensive and elegant open source component for third-party login. It currently supports authorized login via third-party platforms including Github, Gitee, Weibo, DingTalk, Baidu, Coding, Tencent Cloud Developer Platform, OSChina, Alipay, QQ, WeChat, Taobao, Google, Facebook, Douyin, LinkedIn, Xiaomi, Microsoft, Toutiao, Teambition, StackOverflow, Pinterest, Renren, Huawei, WeCom, Kujiale, Gitlab, Meituan, Ele.me, Twitter, Feishu, JD.com, Alibaba Cloud, Ximalaya, Amazon, Slack and Line. Login, so easy!

• justauth
• oauth2
• qqlogin
• googlelogin
• weixinlogin

242.awslabs / git-secrets

Prevents you from committing secrets and credentials into git repositories

243.ivre / ivre

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.

• bro
• scans
• nmap
• network
• network-discovery
• scan-ports
• +14 more

244.onetimesecret / onetimesecret

Keep passwords and other sensitive information out of your chat logs and inboxes.

• privacy
• onetime
• secrets
• chat
• email
• messaging
• +1 more

245.commixproject / commix

Automated Αll-in-One OS command injection exploitation tool.

• python
• command-injection
• detection
• exploitation
• pentesting
• vulnerability-scanner
• +4 more

246.googleapis / google-api-nodejs-client

Google's officially supported Node.js client library for accessing Google APIs. Support for authorization and authentication with OAuth 2.0, API Keys and JWT (Service Tokens) is included.

• google
• google-api
• nodejs
• client
• client-library

247.aquasecurity / tracee

Linux Runtime Security and Forensics using eBPF

• ebpf
• linux
• bpf
• security
• golang
• docker
• +2 more

248.keeweb / keeweb

Free cross-platform password manager compatible with KeePass

• keeweb
• keepass
• security
• password-manager
• password
• electron
• +1 more

249.authpass / authpass

AuthPass - Password Manager based on Flutter for all platforms. Keepass 2.x (KDBX 3 and KDBX 4) compatible.

• flutter
• password-manager
• password-store
• android
• macos-application
• flutter-apps
• +14 more

250.umputun / remark42

comment engine

• commenting
• comment-system
• self-hosted
• commenting-engines
• comments-widget
• remark42
• +1 more

251.cisagov / Malcolm

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

• network-security
• pcap
• security
• arkime
• cybersecurity
• infosec
• +7 more

252.iamsopotatoe-coder / TinyLoad

Open source Windows x64 PE packer and crypter. Compresses and encrypts executables with a custom virtual machine into a self extracting stub.

• compression
• packer
• pe-packer
• pe-compress
• pe-protection
• pepacker
• +13 more

253.thinkst / canarytokens

Canarytokens helps track activity and actions on your network

254.m0nad / Diamorphine

LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)

• rootkit
• lkm-rootkit
• c
• kernel
• kernel-module
• security-tools
• +14 more

255.Hexastrike / PyrsistenceSniper

We took PersistenceSniper, merged it with Python, and misspelled it on purpose. Meet PyrsistenceSniper.

• cybersecurity
• cybersecurity-tools
• incident-response
• security
• security-audit
• security-tools

256.win-acme / win-acme

Automate SSL/TLS certificates on Windows with ease

• acme
• certificates
• windows
• iis
• exchange
• rds
• +4 more

257.WithSecureOpenSource / chainsaw

Rapidly Search and Hunt through Windows Forensic Artefacts

• attack
• rust
• security
• threat-hunting
• blueteam
• chainsaw
• +7 more

258.JetBrains / fernflower

Decompiler from Java bytecode to Java, used in IntelliJ IDEA.

• java
• decompiler
• reverse-engineering

259.skeeto / endlessh

SSH tarpit that slowly sends an endless banner

260.wolfSSL / wolfssl

The wolfSSL library is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3 and DTLS 1.3! Update to wolfSSL 5.9.1 for the latest CVE fixes.

• ssl
• tls
• cryptography
• security
• openssl
• tls13
• +14 more

261.tclahr / uac

UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.

• incident-response
• forensics
• computer-forensics
• triage
• linux
• aix
• +14 more

262.Yara-Rules / rules

Repository of yara rules

263.avast / retdec

RetDec is a retargetable machine-code decompiler based on LLVM.

264.openiddict / openiddict-core

Flexible and versatile OAuth 2.0/OpenID Connect stack for .NET

• openidconnect
• oauth2
• aspnetcore
• dotnet

265.step-security / harden-runner

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.

• github-actions
• actions
• supply-chain-security
• hardening
• security-hardening
• runners
• +3 more

266.OTRF / ThreatHunter-Playbook

A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.

• threat-hunting
• sysmon
• hunting-campaigns
• hypothesis
• hunting
• dfir
• +3 more

267.olafhartong / sysmon-modular

A repository of sysmon configuration modules

• sysmon
• dfir
• threat-hunting
• mitre-attack
• modular
• security-tools

268.PowerShellMafia / PowerSploitArchived

PowerSploit - A PowerShell Post-Exploitation Framework

269.SpecterOps / BloodHound-Legacy

Six Degrees of Domain Admin

270.niklashigi / apk-mitm

🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection

• cli
• reverse-engineering
• android
• apk
• mitm
• certificate-pinning
• +2 more

271.a1ex4 / ownfoil

Nintendo Switch library manager, with automated management tasks, serving your library to multiple supported clients on your Switch, with shop customization and multi user authentication.

• tinfoil
• atmosphere
• homebrew
• switch
• nintendo-switch
• self-hosted

272.schemaspy / schemaspy

Database documentation built easy

• schemaspy
• java
• documentation
• database
• database-schemas
• database-diagrams
• +6 more

273.CryptoSignal / Crypto-Signal

Github.com/CryptoSignal - Trading & Technical Analysis Bot - 4,100+ stars, 1,100+ forks

• technical-analysis
• bittrex-api
• crypto
• bitcoin
• ethereum
• trading
• +14 more

274.authlib / authlib

The ultimate Python library in building OAuth, OpenID Connect clients and servers. JWS, JWE, JWK, JWA, JWT included.

• oauth
• oauth2
• oidc
• oauth2-server
• oauth2-provider
• openid-connect
• +7 more

275.ReversecLabs / drozer

The Leading Security Assessment Framework for Android.

• drozer
• android
• security
• pentesting
• java
• mobile
• +2 more

276.SteamRE / SteamKit

SteamKit2 is a .NET library designed to interoperate with Valve's Steam network. It aims to provide a simple, yet extensible, interface to perform various actions on the network.

• steamkit2
• c-sharp
• nuget
• steam
• valve
• networking
• +3 more

277.fuzzdb-project / fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

278.guardicore / monkey

Infection Monkey - An open-source adversary emulation platform

• penetration-testing
• security-tools
• security-automation
• infection-monkey
• adversary-emulation

279.benbusby / whoogle-searchArchived

A self-hosted, ad-free, privacy-respecting metasearch engine

• adblock
• privacy
• docker
• heroku
• flask
• metasearch
• +5 more

280.jwtk / jjwt

Java JWT: JSON Web Token for Java and Android

• jwt
• java
• java-jwt
• jjwt
• jwt-token
• jwt-tokens
• +14 more

281.ashvardanian / StringZilla

Up to 100x faster strings for C, C++, CUDA, Python, Rust, Swift, JS, & Go, leveraging NEON, AVX2, AVX-512, SVE, GPGPU, & SWAR to accelerate search, hashing, sorting, edit distances, sketches, and memory ops 🦖

• simd
• dataset
• string
• string-manipulation
• string-matching
• substring
• +12 more

282.spatie / laravel-permission

Associate users with roles and permissions

• laravel
• php
• permission
• secure

283.KuroLabs / stegcloak

Hide secrets with invisible characters in plain text securely using passwords 🧙🏻‍♂️⭐

• cryptography
• steganography
• compression
• functional-programming
• ramdajs
• hacking-tool
• +10 more

284.ElevenPaths / FOCA

Tool to find metadata and hidden information in the documents.

285.GerbenJavado / LinkFinder

A python script that finds endpoints in JavaScript files

• infosec
• endpoints

286.alephdata / aleph

Search and browse documents and data; find the people and companies you look for.

• python
• data-search
• graph-database
• journalism
• osint
• investigative-journalism

287.xmendez / wfuzz

Web application fuzzer

288.m0bilesecurity / RMS-Runtime-Mobile-Security

Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime

• mobile-security
• android-security
• frida
• reverse-engineering
• ios-security

289.rednaga / APKiD

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

• android
• antivirus
• machine-learning
• malware-detection
• malware-analysis
• malware-research
• +8 more

290.quay / clair

Vulnerability Static Analysis for Containers

• containers
• static-analysis
• go
• kubernetes
• docker
• oci
• +3 more

291.JPCERTCC / LogonTracer

Investigate malicious Windows logon by visualizing and analyzing Windows event log

• security
• dfir
• javascript
• visualization
• active-directory
• event-log
• +2 more

292.kimci86 / bkcrack

Crack legacy zip encryption with Biham and Kocher's known plaintext attack.

• crack
• zip
• multithread
• attack
• plaintext-attack
• ciphertext
• +5 more

293.google / uuid

Go package for UUIDs based on RFC 4122 and DCE 1.1: Authentication and Security Services.

• go
• uuid

294.cloud-custodian / cloud-custodian

Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources

• aws
• compliance
• cloud
• rules-engine
• cloud-computing
• management
• +8 more

295.twintproject / twintArchived

An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following, Tweets and more while evading most API limitations.

• osint
• twitter
• python
• scrape
• tweets
• elasticsearch
• +6 more

296.P-H-C / phc-winner-argon2

The password hash Argon2, winner of PHC

297.google / timesketch

Collaborative forensic timeline analysis

• forensics
• dfir
• security
• timeline
• analysis

298.martinus / unordered_dense

A fast & densely stored hashmap and hashset

• c-plus-plus
• cpp17
• cpp
• hash
• hash-tables
• header-only-library
• +4 more

299.ReversecLabs / damn-vulnerable-llm-agent

The repository host gives no description.

300.CorentinTh / enclosed

Minimalistic web app designed for sending private and secure notes.

• end-to-end-encryption
• minimalist
• note
• pastebin
• secure
• self-hosted
• +1 more