Trending repositories

201.pardeike / Harmony

A library for patching, replacing and decorating .NET and Mono methods during runtime

• csharp
• patcher
• detour
• detours
• runtime
• mono
• +5 more

202.Konloch / bytecode-viewer

A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

• java-decompiler
• apk
• java
• procyon
• cfr
• fernflower
• +14 more

203.chaitin / xray

TranslatedA comprehensive security assessment tool developed in-house by Chaitin (长亭), supporting scanning for common web security issues and custom PoCs | Be sure to read the documentation before use

• security
• vulnerability
• vulnerability-scanner
• passive-vulnerability-scanner
• xss
• sqlinjection
• +1 more

204.hugsy / gef

GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux

• python
• exploit
• gdb
• linux
• reverse-engineering
• ctf
• +13 more

205.APKLab / APKLab

Android Reverse-Engineering Workbench for VS Code

• apktool
• apk-decompiler
• apk-editor
• smali
• dalvik
• smalidea
• +12 more

206.CTFd / CTFd

CTFs as you need them

• ctf
• security
• education
• flask
• ctfd

207.nextauthjs / next-auth

Authentication for the Web.

• nodejs
• nextjs
• oauth
• react
• authentication
• nextauth
• +12 more

208.horsicq / DIE-engine

DIE engine

• signature
• reverse-engineering
• unpacker
• yara
• elf
• program-analysis
• +5 more

209.thinkst / canarytokens

Canarytokens helps track activity and actions on your network

210.spiffe / spire

The SPIFFE Runtime Environment

211.GrapheneOS / hardened_malloc

Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.

• malloc
• security
• memory-allocation
• malloc-library
• memory-allocator
• memory
• +4 more

212.bountyyfi / lonkero

Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.

• cve-scanning
• pentesting-tools
• rust
• vulnerability-scanners
• websecurity
• appsec
• +14 more

213.SwiftOnSecurity / sysmon-config

Sysmon configuration file template with default high-quality event tracing

• sysmon
• threatintel
• threat-hunting
• sysinternals
• windows
• netsec
• +2 more

214.lief-project / LIEF

LIEF - Library to Instrument Executable Formats (C++, Python, Rust)

• reverse-engineering
• malware-analysis
• binary-analysis
• parser
• modification
• executable-formats
• +13 more

215.evyatarmeged / Raccoon

A high performance offensive security tool for reconnaissance and vulnerability scanning

• reconnaissance
• scanner
• vulnerability-assessment
• vulnerability-scanner
• enumeration
• pentesting
• +9 more

216.thinkst / opencanary

Modular and decentralised honeypot

217.JonathanSalwan / Triton

Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.

• reverse-engineering
• symbolic-execution
• binary-analysis
• program-analysis
• taint-analysis
• binary-translation
• +5 more

218.threat9 / routersploit

Exploitation Framework for Embedded Devices

• python
• security
• infosec
• router-exploitation-framework
• routersploit-framework
• exploits
• +7 more

219.ayoubfaouzi / al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

• anti-analysis
• anti-debugging
• anti-sandbox
• anti-vm
• anti-emulation
• code-injection
• +5 more

220.cisagov / Malcolm

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

• network-security
• pcap
• security
• arkime
• cybersecurity
• infosec
• +7 more

221.str4d / rage

A simple, secure and modern file encryption tool (and Rust library) with small explicit keys, no config options, and UNIX-style composability.

• cli
• encryption
• zero-configuration
• secure-by-default
• unix-philosophy
• curve25519
• +5 more

222.future-architect / vuls

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

• vuls
• vulnerability-scanners
• golang
• go
• linux
• freebsd
• +14 more

223.momenbasel / htb-writeups

The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups

• active-directory
• cheatsheet
• ctf
• cybersecurity
• ethical-hacking
• hackthebox
• +14 more

224.extremecoders-re / pyinstxtractor

PyInstaller Extractor

• python
• pyinstaller
• decompile
• reverse-engineering
• pyinstaller-extractor
• python-decompiler
• +2 more

225.beelzebub-labs / beelzebub

A secure low code deception runtime framework, leveraging AI for System Virtualization.

• cybersecurity
• security
• honeypot
• framework
• go
• research-project
• +14 more

226.justauth / JustAuth

Translated🏆Gitee's most valuable open source project 🚀:100: A small, comprehensive and elegant open source component for third-party login. It currently supports authorized login via third-party platforms including Github, Gitee, Weibo, DingTalk, Baidu, Coding, Tencent Cloud Developer Platform, OSChina, Alipay, QQ, WeChat, Taobao, Google, Facebook, Douyin, LinkedIn, Xiaomi, Microsoft, Toutiao, Teambition, StackOverflow, Pinterest, Renren, Huawei, WeCom, Kujiale, Gitlab, Meituan, Ele.me, Twitter, Feishu, JD.com, Alibaba Cloud, Ximalaya, Amazon, Slack and Line. Login, so easy!

• justauth
• oauth2
• qqlogin
• googlelogin
• weixinlogin

227.mandiant / flare-floss

FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

• malware
• deobfuscation
• strings
• flare
• malware-analysis
• gsoc-2026

228.bitnami / sealed-secrets

A Kubernetes controller and tool for one-way encrypted Secrets

• kubernetes
• kubernetes-secrets
• devops-workflow
• encrypt-secrets
• gitops

229.korcankaraokcu / PINCE

Reverse engineering tool for Linux

• gdb
• cheat-engine
• reverse-engineering
• injection
• memory-hacking
• hex-editor
• +10 more

230.commixproject / commix

Automated Αll-in-One OS command injection exploitation tool.

• python
• command-injection
• detection
• exploitation
• pentesting
• vulnerability-scanner
• +4 more

231.stamparm / maltrail

Malicious traffic detection system

• security
• malware
• intrusion-detection
• sensor
• python
• network-monitoring
• +2 more

232.pglombardo / PasswordPusher

🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.

• security
• password-expiration
• password
• password-safety
• communicate-passwords
• password-pusher
• +13 more

233.evilsocket / pwnagotchi

(⌐■_■) - Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.

• ai
• deep-reinforcement-learning
• wpa-psk
• handshakes
• bettercap
• deep-learning
• +1 more

234.aboul3la / Sublist3r

Fast subdomains enumeration tool for penetration testers

235.java-decompiler / jd-gui

A standalone Java Decompiler GUI

236.motdotla / dotenv

Loads environment variables from .env for nodejs projects.

• dotenv
• environment-variables
• javascript
• node
• nodejs
• secrets
• +5 more

237.golang-jwt / jwt

Go implementation of JSON Web Tokens (JWT).

• go
• golang
• jwt
• auth
• ed25519
• security

238.turbot / steampipe

Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.

• steampipe
• postgresql
• postgresql-fdw
• cloud
• security
• aws
• +14 more

239.nccgroup / ScoutSuite

Multi-Cloud Security Auditing Tool

• aws
• azure
• gcp
• cloud
• security
• auditing

240.JPCERTCC / LogonTracer

Investigate malicious Windows logon by visualizing and analyzing Windows event log

• security
• dfir
• javascript
• visualization
• active-directory
• event-log
• +2 more

241.ivre / ivre

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.

• bro
• scans
• nmap
• network
• network-discovery
• scan-ports
• +14 more

242.stalniy / casl

CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access

• authorization
• permissions
• acl
• cancan
• casl
• isomorphic-javascript

243.Bo0oM / fuzz.txt

Potentially dangerous files

• list
• web
• vulnerability
• files
• fuzz
• dirbuster

244.onetimesecret / onetimesecret

Keep passwords and other sensitive information out of your chat logs and inboxes.

• privacy
• onetime
• secrets
• chat
• email
• messaging
• +1 more

245.aquasecurity / tracee

Linux Runtime Security and Forensics using eBPF

• ebpf
• linux
• bpf
• security
• golang
• docker
• +2 more

246.WithSecureOpenSource / chainsaw

Rapidly Search and Hunt through Windows Forensic Artefacts

• attack
• rust
• security
• threat-hunting
• blueteam
• chainsaw
• +7 more

247.umputun / remark42

comment engine

• commenting
• comment-system
• self-hosted
• commenting-engines
• comments-widget
• remark42
• +1 more

248.RhinoSecurityLabs / cloudgoat

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

249.alephdata / aleph

Search and browse documents and data; find the people and companies you look for.

• python
• data-search
• graph-database
• journalism
• osint
• investigative-journalism

250.googleapis / google-api-nodejs-client

Google's officially supported Node.js client library for accessing Google APIs. Support for authorization and authentication with OAuth 2.0, API Keys and JWT (Service Tokens) is included.

• google
• google-api
• nodejs
• client
• client-library

251.awslabs / git-secrets

Prevents you from committing secrets and credentials into git repositories

252.keeweb / keeweb

Free cross-platform password manager compatible with KeePass

• keeweb
• keepass
• security
• password-manager
• password
• electron
• +1 more

253.Volmarg / personal-management-system

Your web application for managing personal data.

• dashboard
• dashboards
• manager
• symfony
• mit
• self-hosted
• +14 more

254.m0bilesecurity / RMS-Runtime-Mobile-Security

Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime

• mobile-security
• android-security
• frida
• reverse-engineering
• ios-security

255.leibnitz27 / cfr

This is the public repository for the CFR Java decompiler

256.avast / retdec

RetDec is a retargetable machine-code decompiler based on LLVM.

257.wolfSSL / wolfssl

The wolfSSL library is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3 and DTLS 1.3! Update to wolfSSL 5.9.1 for the latest CVE fixes.

• ssl
• tls
• cryptography
• security
• openssl
• tls13
• +14 more

258.openiddict / openiddict-core

Flexible and versatile OAuth 2.0/OpenID Connect stack for .NET

• openidconnect
• oauth2
• aspnetcore
• dotnet

259.Yara-Rules / rules

Repository of yara rules

260.JetBrains / fernflower

Decompiler from Java bytecode to Java, used in IntelliJ IDEA.

• java
• decompiler
• reverse-engineering

261.KuroLabs / stegcloak

Hide secrets with invisible characters in plain text securely using passwords 🧙🏻‍♂️⭐

• cryptography
• steganography
• compression
• functional-programming
• ramdajs
• hacking-tool
• +10 more

262.OTRF / ThreatHunter-Playbook

A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.

• threat-hunting
• sysmon
• hunting-campaigns
• hypothesis
• hunting
• dfir
• +3 more

263.olafhartong / sysmon-modular

A repository of sysmon configuration modules

• sysmon
• dfir
• threat-hunting
• mitre-attack
• modular
• security-tools

264.dfir-iris / iris-web

Collaborative Incident Response platform

• forensic
• incident-response
• csirt-tooling
• python
• digital-forensics
• digital-forensics-incident-response
• +2 more

265.Karib0u / rustinel

Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.

• blue-team
• detection-engineering
• edr
• endpoint-detection
• etw
• incident-response
• +14 more

266.tclahr / uac

UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.

• incident-response
• forensics
• computer-forensics
• triage
• linux
• aix
• +14 more

267.martinus / unordered_dense

A fast & densely stored hashmap and hashset

• c-plus-plus
• cpp17
• cpp
• hash
• hash-tables
• header-only-library
• +4 more

268.kimci86 / bkcrack

Crack legacy zip encryption with Biham and Kocher's known plaintext attack.

• crack
• zip
• multithread
• attack
• plaintext-attack
• ciphertext
• +5 more

269.guardicore / monkey

Infection Monkey - An open-source adversary emulation platform

• penetration-testing
• security-tools
• security-automation
• infection-monkey
• adversary-emulation

270.ReversecLabs / drozer

The Leading Security Assessment Framework for Android.

• drozer
• android
• security
• pentesting
• java
• mobile
• +2 more

271.a1ex4 / ownfoil

Nintendo Switch library manager, with automated management tasks, serving your library to multiple supported clients on your Switch, with shop customization and multi user authentication.

• tinfoil
• atmosphere
• homebrew
• switch
• nintendo-switch
• self-hosted

272.cloud-custodian / cloud-custodian

Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources

• aws
• compliance
• cloud
• rules-engine
• cloud-computing
• management
• +8 more

273.skeeto / endlessh

SSH tarpit that slowly sends an endless banner

274.niklashigi / apk-mitm

🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection

• cli
• reverse-engineering
• android
• apk
• mitm
• certificate-pinning
• +2 more

275.rednaga / APKiD

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

• android
• antivirus
• machine-learning
• malware-detection
• malware-analysis
• malware-research
• +8 more

276.m0nad / Diamorphine

LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)

• rootkit
• lkm-rootkit
• c
• kernel
• kernel-module
• security-tools
• +14 more

277.RyanDFIR / hindsight

Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox

• google-chrome
• hindsight
• chrome
• forensics
• dfir
• browser-forensics
• +2 more

278.win-acme / win-acme

Automate SSL/TLS certificates on Windows with ease

• acme
• certificates
• windows
• iis
• exchange
• rds
• +4 more

279.CorentinTh / enclosed

Minimalistic web app designed for sending private and secure notes.

• end-to-end-encryption
• minimalist
• note
• pastebin
• secure
• self-hosted
• +1 more

280.in-toto / witness

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

• security-tools
• security
• attestation
• verification
• supply-chain

281.authpass / authpass

AuthPass - Password Manager based on Flutter for all platforms. Keepass 2.x (KDBX 3 and KDBX 4) compatible.

• flutter
• password-manager
• password-store
• android
• macos-application
• flutter-apps
• +14 more

282.SteamRE / SteamKit

SteamKit2 is a .NET library designed to interoperate with Valve's Steam network. It aims to provide a simple, yet extensible, interface to perform various actions on the network.

• steamkit2
• c-sharp
• nuget
• steam
• valve
• networking
• +3 more

283.digitalocean / nginxconfig.io

⚙️ NGINX config generator on steroids 💉

• nginx
• nginx-configuration
• php-fpm
• ssl
• letsencrypt
• cdn
• +14 more

284.bailey27 / cppcryptfs

cppcryptfs is an implementation of the gocryptfs encrypted overlay filesystem in C++ for Windows.

285.P-H-C / phc-winner-argon2

The password hash Argon2, winner of PHC

286.xmendez / wfuzz

Web application fuzzer

287.sleuthkit / sleuthkit

The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.

• sleuthkit
• tct
• ntfs
• forensics
• incident-response

288.CERT-Polska / Artemis

A modular vulnerability scanner with automatic report generation capabilities.

• artemis
• pentesting
• security
• security-scanner
• security-tools
• vulnerability-detection
• +2 more

289.twintproject / twintArchived

An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following, Tweets and more while evading most API limitations.

• osint
• twitter
• python
• scrape
• tweets
• elasticsearch
• +6 more

290.panva / node-oidc-provider

OpenID Certified™ OAuth 2.0 Authorization Server implementation for Node.js

• openid
• oidc
• openid-provider
• openid-connect
• connect
• server
• +4 more

291.ElevenPaths / FOCA

Tool to find metadata and hidden information in the documents.

292.goshs-labs / goshs

Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.

• golang
• http-server
• https-server
• ctf
• devtools
• file-transfer
• +14 more

293.quay / clair

Vulnerability Static Analysis for Containers

• containers
• static-analysis
• go
• kubernetes
• docker
• oci
• +3 more

294.CryptoSignal / Crypto-Signal

Github.com/CryptoSignal - Trading & Technical Analysis Bot - 4,100+ stars, 1,100+ forks

• technical-analysis
• bittrex-api
• crypto
• bitcoin
• ethereum
• trading
• +14 more

295.nilsteampassnet / TeamPass

Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.

• php
• access-control
• audit
• browser-extension
• compliance
• credentials
• +14 more

296.neon-mmd / websurfx

:rocket: An open source alternative to searx which provides a modern-looking :sparkles:, lightning-fast :zap:, privacy respecting :disguised_face:, secure :lock: meta search engine

• meta-search-engine
• rust
• search-engine
• fast
• privacy
• actix-web
• +14 more

297.dyc3 / steamguard-cli

A linux utility for generating 2FA codes for Steam and managing Steam trade, market, and other confirmations.

• steam
• steamguard-cli
• linux-utility
• sda
• 2fa
• steambot
• +1 more

298.fuzzdb-project / fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

299.authlib / authlib

The ultimate Python library in building OAuth, OpenID Connect clients and servers. JWS, JWE, JWK, JWA, JWT included.

• oauth
• oauth2
• oidc
• oauth2-server
• oauth2-provider
• openid-connect
• +7 more

300.zitadel / oidc

Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation

• oidc
• oauth2
• openidconnect
• server
• client
• go
• +13 more