Trending repositories

201.rustls / rustls

A modern TLS library in Rust

• tls
• cryptography
• rust
• ssl

202.passbolt / passbolt_api

Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!

• password-manager
• passbolt
• security
• cakephp
• productivity
• php
• +3 more

203.alephdata / aleph

Search and browse documents and data; find the people and companies you look for.

• python
• data-search
• graph-database
• journalism
• osint
• investigative-journalism

204.hashicorp / vault

A tool for secrets management, encryption as a service, and privileged access management

• vault
• go
• secrets

205.gentilkiwi / mimikatz

A little tool to play with Windows security

206.falcosecurity / falco

Cloud Native Runtime Security

• cncf
• containers
• security
• falco
• ebpf
• kubernetes
• +4 more

207.authzed / spicedb

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

• zanzibar
• permissions
• database
• distributed-systems
• security
• security-tools
• +12 more

208.Mbed-TLS / mbedtls

An open source, portable, easy to use, readable and flexible TLS library, and reference implementation of the PSA Cryptography API. Releases are on a varying cadence, typically around 3 - 6 months between releases.

• tls
• ssl
• crypto
• cryptography-library
• psa

209.Mebus / cupp

Common User Passwords Profiler (CUPP)

• wordlist-generator
• wordlist
• dictionary-attack
• password
• password-strength
• weak-passwords

210.n-delic / decompdecomp

A desktop app where AI agents decompile the games you own into C/C++ that rebuilds them byte for byte.

• ai
• artificial-intelligence
• artificialintelligence
• decompilation
• decompile
• decompiled
• +1 more

211.PrivateBin / PrivateBin

A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.

• self-hosted
• self-hosting
• pastebin
• security
• one-time
• self-destroy
• +6 more

212.MISP / MISP

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

• misp
• threat-sharing
• threat-hunting
• threatintel
• malware-analysis
• stix
• +14 more

213.lanmaster53 / recon-ng

Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.

214.emanuele-em / proxelar

Scriptable local traffic workbench for inspecting, intercepting, replaying, and rewriting HTTP/HTTPS and WebSocket traffic.

• mitm
• proxy
• rust
• cli
• http-proxy
• https-proxy
• +9 more

215.LINGYK352 / Watchtower

Watchtower | Self-hosted AI security assessment, asset intelligence, and evidence workflows.

• ai-agents
• attack-surface-management
• docker
• penetration-testing
• python
• security-assessment
• +4 more

216.thomasunise / argus

Open-source agentic security operations platform:

• agentic-ai
• agentic-security
• agentic-workflow
• cyber-security
• cyber-threat-intelligence
• cybersecurity
• +8 more

217.jedisct1 / libsodium

A modern, portable, easy to use crypto library.

• crypto
• cryptography
• c
• zig-package

218.Mail-0 / Zero

Experience email the way you want with Mail0 – the first open source email app that puts your privacy and safety first. Join the discord: https://mail0.link/discord

• ai
• email
• privacy
• security

219.sensepost / objection

📱 objection - runtime mobile exploration

• mobile
• pentest
• framework
• ios
• instrumentation
• frida
• +2 more

220.hugsy / gef

GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux

• python
• exploit
• gdb
• linux
• reverse-engineering
• ctf
• +13 more

221.lief-project / LIEF

LIEF - Library to Instrument Executable Formats (C++, Python, Rust)

• reverse-engineering
• malware-analysis
• binary-analysis
• parser
• modification
• executable-formats
• +13 more

222.x64dbg / ScyllaHide

Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide

• anti-debugging
• anti-debug
• debugging
• debugger
• debug
• x64dbg
• +3 more

223.elastic / detection-rules

The repository host gives no description.

• threat-detection
• threat-hunting

224.cure53 / DOMPurify

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

• xss
• sanitizer
• dom
• security
• javascript
• dompurify
• +5 more

225.shadow1ng / fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)

• fscan
• scanner
• scanning
• sec
• security-tools
• security

226.s0md3v / Photon

Incredibly fast crawler designed for OSINT.

• crawler
• spider
• python
• osint
• information-gathering

227.VirusTotal / yara

The pattern matching swiss knife

228.skeeto / endlessh

SSH tarpit that slowly sends an endless banner

229.Col-E / Recaf

The modern Java bytecode editor

• java
• bytecode
• bytecode-engineering
• reverse-engineering
• jvm-bytecode
• decompile
• +8 more

230.Ullaakut / cameradar

Cameradar hacks its way into RTSP videosurveillance cameras

• penetration-testing
• security
• hacking
• infosec
• rtsp
• cctv
• +5 more

231.cisagov / Malcolm

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

• network-security
• pcap
• security
• arkime
• cybersecurity
• infosec
• +7 more

232.owasp-noir / noir

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

• attack-surfaces
• pentesting
• security
• devsecops
• hacktoberfest
• owasp
• +5 more

233.test-zeus-ai / testzeus-hercules

Hercules is the world’s first open-source testing agent, enabling UI, API, Security, Accessibility, and Visual validations – all without code or maintenance. Automate testing effortlessly and let Hercules handle the heavy lifting! ⚡

• ai
• autogen
• automation
• browser
• end-to-end-testing
• hercules
• +12 more

234.coipond / coi

Give the agent a machine. Just not yours. Each AI coding agent gets its own isolated machine with root, Docker, and systemd - active defense detects and stops threats automatically.

• claude
• claude-code
• ai-tools
• anthropic
• coding-assistant
• containers
• +14 more

235.ory / hydra

Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.

• hydra
• oauth2
• openid-connect
• docker
• server
• security
• +14 more

236.cert-manager / cert-manager

Automatically provision and manage TLS certificates in Kubernetes

• kubernetes
• letsencrypt
• tls
• certificate
• crd
• hacktoberfest

237.future-architect / vuls

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

• vuls
• vulnerability-scanners
• golang
• go
• linux
• freebsd
• +14 more

238.chaitin / xray

TranslatedA comprehensive security assessment tool developed in-house by Chaitin (长亭), supporting scanning for common web security issues and custom PoCs | Be sure to read the documentation before use

• security
• vulnerability
• vulnerability-scanner
• passive-vulnerability-scanner
• xss
• sqlinjection
• +1 more

239.BLAKE3-team / BLAKE3

the official Rust and C implementations of the BLAKE3 cryptographic hash function

240.AzeemIdrisi / PhoneSploit-Pro

An all-in-one hacking tool to remotely take over Android devices.

• adb
• android
• android-debug-bridge
• cybersecurity
• exploit
• hacking
• +14 more

241.cloud-custodian / cloud-custodian

Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources

• aws
• compliance
• cloud
• rules-engine
• cloud-computing
• management
• +8 more

242.Volmarg / personal-management-system

Your web application for managing personal data.

• dashboard
• dashboards
• manager
• symfony
• mit
• self-hosted
• +14 more

243.szTheory / exifcleaner

Cross-platform desktop GUI app to clean image metadata

• exif
• exiftool
• electron
• javascript
• nodejs
• desktop-app
• +14 more

244.nilsteampassnet / TeamPass

Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.

• php
• access-control
• audit
• browser-extension
• compliance
• credentials
• +14 more

245.JoasASantos / php2shell-exploit

PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE

246.wifiphisher / wifiphisher

The Rogue Access Point Framework

• wifiphisher
• wifi
• rogue
• access-point
• python
• security
• +4 more

247.awslabs / git-secrets

Prevents you from committing secrets and credentials into git repositories

248.googleapis / google-api-nodejs-client

Google's officially supported Node.js client library for accessing Google APIs. Support for authorization and authentication with OAuth 2.0, API Keys and JWT (Service Tokens) is included.

• google
• google-api
• nodejs
• client
• client-library

249.screetsec / TheFatRat

Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .

• thefatrat
• bypass
• linux
• autorun
• bypass-av
• antivirus
• +14 more

250.anonaddy / anonaddy

Anonymous email forwarding

• privacy
• email
• pgp

251.JonathanSalwan / Triton

Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.

• reverse-engineering
• symbolic-execution
• binary-analysis
• program-analysis
• taint-analysis
• binary-translation
• +5 more

252.APKLab / APKLab

Android Reverse-Engineering Workbench for VS Code

• apktool
• apk-decompiler
• apk-editor
• smali
• dalvik
• smalidea
• +12 more

253.spiffe / spire

The SPIFFE Runtime Environment

254.Karib0u / rustinel

Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.

• blue-team
• detection-engineering
• edr
• endpoint-detection
• etw
• incident-response
• +14 more

255.OJ / gobuster

Directory/File, DNS and VHost busting tool written in Go

• go
• pentesting
• tool
• dns
• web

256.keeweb / keeweb

Free cross-platform password manager compatible with KeePass

• keeweb
• keepass
• security
• password-manager
• password
• electron
• +1 more

257.lucasg / Dependencies

A rewrite of the old legacy software "depends.exe" in C# for Windows devs to troubleshoot dll load dependencies issues.

• windows
• dll
• wpf
• csharp

258.dexidp / dex

OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors

• oidc
• kubernetes
• idp
• identity-provider
• hacktoberfest

259.beefproject / beef

The Browser Exploitation Framework Project

260.aboul3la / Sublist3r

Fast subdomains enumeration tool for penetration testers

261.bitnami / sealed-secrets

A Kubernetes controller and tool for one-way encrypted Secrets

• kubernetes
• kubernetes-secrets
• devops-workflow
• encrypt-secrets
• gitops

262.SwiftOnSecurity / sysmon-config

Sysmon configuration file template with default high-quality event tracing

• sysmon
• threatintel
• threat-hunting
• sysinternals
• windows
• netsec
• +2 more

263.sleuthkit / sleuthkit

The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.

• sleuthkit
• tct
• ntfs
• forensics
• incident-response

264.thinkst / opencanary

Modular and decentralised honeypot

265.momenbasel / htb-writeups

The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups

• active-directory
• cheatsheet
• ctf
• cybersecurity
• ethical-hacking
• hackthebox
• +14 more

266.openbin-ai / binny

BINNY: an open source agent harness for reverse engineering. Plug in any model, or a local one.

• ghidra
• llm-agent
• malware-analysis
• ollama
• reverse-engineering
• security-research

267.Anton-Barinov / php2shell-patches

php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.

• cve
• hestiacp
• opencart
• php
• php-fpm
• php5
• +10 more

268.kubescape / kubescape

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

• kubernetes
• security
• nsa
• mitre-attack
• devops
• best-practice
• +1 more

269.AlessandroZ / LaZagne

Credentials recovery project

270.AGWA / git-crypt

Transparent file encryption in git

271.nccgroup / ScoutSuite

Multi-Cloud Security Auditing Tool

• aws
• azure
• gcp
• cloud
• security
• auditing

272.pardeike / Harmony

A library for patching, replacing and decorating .NET and Mono methods during runtime

• csharp
• patcher
• detour
• detours
• runtime
• mono
• +5 more

273.RetireJS / retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

• vulnerabilities
• scanner
• firefox-extension
• grunt-plugins
• javascript
• vulnerable-libraries
• +8 more

274.RhinoSecurityLabs / cloudgoat

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

275.SpacehuhnTech / WiFiDuck

Wireless keystroke injection attack platform

• esp8266
• arduino
• hid
• hacktoberfest

276.horsicq / DIE-engine

DIE engine

• signature
• reverse-engineering
• unpacker
• yara
• elf
• program-analysis
• +5 more

277.beelzebub-labs / beelzebub

A secure low code deception runtime framework, leveraging AI for System Virtualization.

• cybersecurity
• security
• honeypot
• framework
• go
• research-project
• +14 more

278.CorentinTh / enclosed

Minimalistic web app designed for sending private and secure notes.

• end-to-end-encryption
• minimalist
• note
• pastebin
• secure
• self-hosted
• +1 more

279.forwardemail / forwardemail.net

Privacy-focused encrypted email for everyone. All-in-one alternative to Gmail + Mailchimp + Sendgrid.

• email
• forwarding
• forwarder
• free
• custom
• domain
• +11 more

280.Joe-B-Security / awesome-prompt-injection

Learn about a type of vulnerability that specifically targets machine learning models

• awesome-list
• awesome

281.tonyzedginidze / librecalculator

The universe in numbers. Free, open-source calculators for everything countable.

• astro
• bun
• calculator
• calculators
• education
• finance-calculator
• +9 more

282.sorkila / lockpaw

Cover your Mac's screen with a hotkey while AI agents keep running, even with the lid closed. The covered screen glows when Claude Code, Codex or Gemini needs you. Touch ID unlock.

• ai-agents
• developer-tools
• macos
• macos-app
• open-source
• privacy
• +13 more

283.kairowan / Shellsmith

TranslatedAndroid and iOS app hardening

• android
• apk-protection
• app-hardening
• ios
• mobile-security
• rasp
• +7 more

284.Wholiver / metis-reverse

High-Fidelity AI-Assisted Deterministic Reverse Engineering FastMCP Server

285.certbot / certbot

Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.

• acme
• acme-client
• certbot
• certificate
• letsencrypt
• python

286.Konloch / bytecode-viewer

A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

• java-decompiler
• apk
• java
• procyon
• cfr
• fernflower
• +14 more

287.java-decompiler / jd-gui

A standalone Java Decompiler GUI

288.ory / kratos

Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.

• identity
• identity-management
• user-management
• users
• user
• login
• +5 more

289.RsaCtfTool / RsaCtfTool

RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data

• rsa-attack
• rsa
• cryptography

290.ayoubfaouzi / al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

• anti-analysis
• anti-debugging
• anti-sandbox
• anti-vm
• anti-emulation
• code-injection
• +5 more

291.guardicore / monkey

Infection Monkey - An open-source adversary emulation platform

• penetration-testing
• security-tools
• security-automation
• infection-monkey
• adversary-emulation

292.MacPass / MacPass

A native macOS KeePass client

• keepass
• kdbx
• macpass
• password-manager
• password
• objective-c
• +2 more

293.umputun / remark42

comment engine

• commenting
• comment-system
• self-hosted
• commenting-engines
• comments-widget
• remark42
• +1 more

294.aquasecurity / tracee

Linux Runtime Security and Forensics using eBPF

• ebpf
• linux
• bpf
• security
• golang
• docker
• +2 more

295.LinkStackOrg / LinkStack

LinkStack - the ultimate solution for creating a personalized & professional profile page. Showcase all your important links in one place, forget the limitation of one link on social media. Set up your personal site on your own server with just a few clicks.

• php
• blade
• laravel
• self-hosted
• webapp
• open-source
• +6 more

296.jhaals / yopass

Secure sharing of secrets, passwords and files

• password-share
• encryption-decryption
• file-upload
• onetimelink
• onetimesecret
• secret-sharing

297.olafhartong / sysmon-modular

A repository of sysmon configuration modules

• sysmon
• dfir
• threat-hunting
• mitre-attack
• modular
• security-tools

298.techinz / browsers-benchmark

Browser automation engine benchmark - Test bypass rates, performance & stealth against Cloudflare, DataDome, reCAPTCHA, Kasada, Imperva, Akamai, PerimeterX and other bot detection systems. Find the best browser for scraping.

• anti-detect
• antidetect-browser
• automation
• browser
• captcha
• patchright
• +4 more

299.teodly / inferno

[MIRROR] unofficial implementation of Dante protocol (Audio over IP)

• audio-over-ip
• dante
• reverse-engineering
• aoip
• audinate

300.cschalle / hw-harness

Small set of tools for helping with reverse engineering Linux drivers