Trending repositories

301.GerbenJavado / LinkFinder

A python script that finds endpoints in JavaScript files

• infosec
• endpoints

302.RetireJS / retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

• vulnerabilities
• scanner
• firefox-extension
• grunt-plugins
• javascript
• vulnerable-libraries
• +8 more

303.goshs-labs / goshs

Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.

• golang
• http-server
• https-server
• ctf
• devtools
• file-transfer
• +14 more

304.stalniy / casl

CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access

• authorization
• permissions
• acl
• cancan
• casl
• isomorphic-javascript

305.MacPass / MacPass

A native macOS KeePass client

• keepass
• kdbx
• macpass
• password-manager
• password
• objective-c
• +2 more

306.ambionics / phpggc

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

307.rednaga / APKiD

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

• android
• antivirus
• machine-learning
• malware-detection
• malware-analysis
• malware-research
• +8 more

308.m0nad / Diamorphine

LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)

• rootkit
• lkm-rootkit
• c
• kernel
• kernel-module
• security-tools
• +14 more

309.splunk / security_content

Splunk Security Content

• splunk
• detection
• engineering
• responses
• cicd
• cybersecurity
• +1 more

310.RyanDFIR / hindsight

Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox

• google-chrome
• hindsight
• chrome
• forensics
• dfir
• browser-forensics
• +2 more

311.authlib / authlib

The ultimate Python library in building OAuth, OpenID Connect clients and servers. JWS, JWE, JWK, JWA, JWT included.

• oauth
• oauth2
• oidc
• oauth2-server
• oauth2-provider
• openid-connect
• +7 more

312.RustCrypto / hashes

Collection of cryptographic hash functions written in pure Rust

• cryptographic-hash-functions
• blake2
• gost
• streebog
• groestl
• md2
• +13 more

313.neon-mmd / websurfx

:rocket: An open source alternative to searx which provides a modern-looking :sparkles:, lightning-fast :zap:, privacy respecting :disguised_face:, secure :lock: meta search engine

• meta-search-engine
• rust
• search-engine
• fast
• privacy
• actix-web
• +14 more

314.Hakky54 / certificate-ripper

🔐 A CLI tool to extract server certificates

• certificate
• ssl
• x509
• tls
• java
• macos
• +7 more

315.objective-see / BlockBlock

BlockBlock provides continual protection by monitoring persistence locations.

316.pxb1988 / dex2jar

Tools to work with android .dex and java .class files

317.spatie / laravel-permission

Associate users with roles and permissions

• laravel
• php
• permission
• secure

318.weidai11 / cryptopp

free C++ class library of cryptographic schemes

• cryptography
• crypto
• c-plus-plus

319.panva / node-oidc-provider

OpenID Certified™ OAuth 2.0 Authorization Server implementation for Node.js

• openid
• oidc
• openid-provider
• openid-connect
• connect
• server
• +4 more

320.JPCERTCC / LogonTracer

Investigate malicious Windows logon by visualizing and analyzing Windows event log

• security
• dfir
• javascript
• visualization
• active-directory
• event-log
• +2 more

321.CERT-Polska / Artemis

A modular vulnerability scanner with automatic report generation capabilities.

• artemis
• pentesting
• security
• security-scanner
• security-tools
• vulnerability-detection
• +2 more

322.apereo / cas

Apereo CAS - Identity & Single Sign On for all earthlings and beyond.

• sso-authentication
• authentication
• authorization
• java
• websso
• saml2
• +14 more

323.quay / clair

Vulnerability Static Analysis for Containers

• containers
• static-analysis
• go
• kubernetes
• docker
• oci
• +3 more

324.SpecterOps / BloodHound-Legacy

Six Degrees of Domain Admin

325.P-H-C / phc-winner-argon2

The password hash Argon2, winner of PHC

326.SpacehuhnTech / WiFiDuck

Wireless keystroke injection attack platform

• esp8266
• arduino
• hid
• hacktoberfest

327.Legrandin / pycryptodome

A self-contained cryptographic library for Python

• cryptography
• security
• python

328.padloc / padloc

A modern, open source password manager for individuals and teams.

• javascript
• lit-element
• lit-html
• password-generator
• password-manager
• progressive-web-app
• +5 more

329.CorentinTh / enclosed

Minimalistic web app designed for sending private and secure notes.

• end-to-end-encryption
• minimalist
• note
• pastebin
• secure
• self-hosted
• +1 more

330.martinus / unordered_dense

A fast & densely stored hashmap and hashset

• c-plus-plus
• cpp17
• cpp
• hash
• hash-tables
• header-only-library
• +4 more

331.OneKeePass / desktop

A secure password manager for macOS,Linux and Windows platforms

332.teodly / inferno

[MIRROR] unofficial implementation of Dante protocol (Audio over IP)

• audio-over-ip
• dante
• reverse-engineering
• aoip
• audinate

333.fuzzdb-project / fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

334.aws / s2n-tls

An implementation of the TLS/SSL protocols

• tls
• ssl
• s2n
• encryption
• c
• c99
• +2 more

335.JetBrains / fernflower

Decompiler from Java bytecode to Java, used in IntelliJ IDEA.

• java
• decompiler
• reverse-engineering

336.google / timesketch

Collaborative forensic timeline analysis

• forensics
• dfir
• security
• timeline
• analysis

337.SteamRE / SteamKit

SteamKit2 is a .NET library designed to interoperate with Valve's Steam network. It aims to provide a simple, yet extensible, interface to perform various actions on the network.

• steamkit2
• c-sharp
• nuget
• steam
• valve
• networking
• +3 more

338.Ettercap / ettercap

Ettercap Project

339.log2timeline / plaso

Super timeline all the things

• forensics
• parsing
• timeline

340.zitadel / oidc

Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation

• oidc
• oauth2
• openidconnect
• server
• client
• go
• +13 more

341.fox-it / dissect

Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part of NCC Group).

• dfir
• dissect
• python

342.twintproject / twintArchived

An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following, Tweets and more while evading most API limitations.

• osint
• twitter
• python
• scrape
• tweets
• elasticsearch
• +6 more

343.xmendez / wfuzz

Web application fuzzer

344.coreos / go-oidc

A Go OpenID Connect client.

• golang

345.bitcoin-core / secp256k1

Optimized C library for EC operations on curve secp256k1

346.step-security / harden-runner

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.

• github-actions
• actions
• supply-chain-security
• hardening
• security-hardening
• runners
• +3 more

347.paulmillr / noble-hashes

Audited & minimal JS implementation of hash functions, MACs and KDFs.

• cryptography
• hash
• kdf
• hashing
• sha256
• sha512
• +13 more

348.markbates / goth

Package goth provides a simple, clean, and idiomatic way to write authentication packages for Go web applications.

349.caddyserver / certmagic

Automatic HTTPS for any Go program: fully-managed TLS certificate issuance and renewal

• https
• acme
• letsencrypt
• golang
• go
• automatic-https
• +2 more

350.pry0cc / axiom

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

• hacking-vps
• bug-bounty
• tmux
• axiom
• masscan
• gowitness
• +12 more

351.odedshimon / BruteShark

Network Analysis Tool

• hacking
• pcap-files
• pcap
• cyber
• network-analysis
• hashcat
• +11 more

352.codingo / NoSQLMap

Automated NoSQL database enumeration and web application exploitation tool.

• nosql
• nosql-databases
• penetration-testing
• scanner
• security-audit
• security-tools
• +14 more

353.alexedwards / scs

HTTP Session Management for Go

• go
• golang
• session
• sessions
• http
• context

354.epsylon / ufonet

UFONet - Denial of Service Toolkit

• dos
• ddos
• ufonet
• botnet
• disruption
• cryptography
• +1 more

355.cider-security-research / cicd-goat

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

• appsec
• cicd
• devops
• infosec
• devsecops
• security
• +3 more

356.mandiant / flare-fakenet-ng

FakeNet-NG - Next Generation Dynamic Network Analysis Tool

• fakenet-ng
• traffic-redirection
• malware-analysis
• mandiant-flare
• gsoc-2026

357.SSLMate / certspotter

Lightweight Certificate Transparency Log Monitor

• certificate-transparency
• pki
• x509
• security
• webpki

358.yunginnanet / HellPot

HellPot is a cross-platform portal to endless suffering meant to punish unruly HTTP bots.

• honeypot
• http
• web
• deception
• stress
• cross-platform
• +6 more

359.CaringCaribou / caringcaribou

A friendly car security exploration tool for the CAN bus

• python
• can-bus
• security-scanner
• security-testing
• fuzzing
• xcp
• +1 more

360.wagga40 / Zircolite

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs

• sigma
• python3
• evtx
• sigma-rules
• detection
• auditd
• +9 more

361.dnSpy / dnSpyArchived

.NET debugger and assembly editor

362.google / uuid

Go package for UUIDs based on RFC 4122 and DCE 1.1: Authentication and Security Services.

• go
• uuid

363.ashvardanian / StringZilla

Up to 100x faster strings for C, C++, CUDA, Python, Rust, Swift, JS, & Go, leveraging NEON, AVX2, AVX-512, SVE, GPGPU, & SWAR to accelerate search, hashing, sorting, edit distances, sketches, and memory ops 🦖

• simd
• dataset
• string
• string-manipulation
• string-matching
• substring
• +12 more

364.Bo0oM / fuzz.txt

Potentially dangerous files

• list
• web
• vulnerability
• files
• fuzz
• dirbuster

365.rabbitstack / fibratus

Security sensor for realtime threat detection and protection

• windows
• windows-kernel
• instrumentation
• security
• etw
• blue-team
• +13 more

366.ZerBea / hcxtools

A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper.

• wlan
• wpa
• wpa2
• raspberry-pi
• hashcat
• handshake
• +8 more

367.lestrrat-go / jwx

Complete implementation of JWx (Javascript Object Signing and Encryption/JOSE) technologies for Go. #golang #jwt #jws #jwk #jwe

• jwt
• jwe
• jws
• jwk
• go
• golang
• +1 more

368.OpenSCAP / openscap

NIST Certified SCAP 1.2 toolkit

• scap
• xccdf
• oval
• cpe
• compliance
• openscap
• +2 more

369.hashtopolis / server

Hashtopolis - distributed password cracking with Hashcat

• cracking
• distributed
• hashcat
• pentesting
• passwords
• hashtopussy
• +8 more

370.Rurik / Noriben

Noriben - Portable, Simple, Malware Analysis Sandbox

371.sigstore / rekor

Software Supply Chain Transparency Log

• supply-chain
• provenance
• security
• transparency-log

372.activecm / rita

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

• beacons
• blue-team
• c2
• command-and-control
• cyber-security
• network-traffic-analysis
• +10 more

373.jwtk / jjwt

Java JWT: JSON Web Token for Java and Android

• jwt
• java
• java-jwt
• jjwt
• jwt-token
• jwt-tokens
• +14 more

374.digitalbazaar / forge

A native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps

• crypto
• cryptography
• x509
• message-digest
• aes
• asn1
• +14 more

375.vvo / iron-session

🛠 Secure, stateless, and cookie-based session library for Next.js or any JavaScript framework

• nextjs
• authentication
• session
• stateless
• cookies
• expressjs
• +2 more

376.ElevenPaths / FOCA

Tool to find metadata and hidden information in the documents.

377.CrimsonForge-io / king-phisher

Phishing Campaign Toolkit

• king-phisher
• python
• phishing
• security

378.jtsylve / LiME

LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures from Android devices. It also minimizes its interaction between user and kernel space processes during acquisition, which allows it to produce memory captures that are more forensically sound than those of other tools designed for Linux memory acquisition.

379.simsong / bulk_extractor

This is the development tree. Production downloads are at:

380.latchset / clevis

Automated Encryption Framework

381.safedep / vet

Protect against malicious open source packages 🤖

• devsecops
• security
• supply-chain-security
• policy-as-code
• software-composition-analysis
• golang
• +5 more

382.ReversecLabs / damn-vulnerable-llm-agent

The repository host gives no description.

383.helmetjs / helmet

Help secure Express apps with various HTTP headers

• javascript
• middleware
• security
• helmet
• http-headers

384.ory / keto

The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.

• hacktoberfest
• abac
• access-control
• acl
• authorization
• fine-grained-permissions
• +8 more

385.iagox86 / dnscat2

The repository host gives no description.

386.authpass / authpass

AuthPass - Password Manager based on Flutter for all platforms. Keepass 2.x (KDBX 3 and KDBX 4) compatible.

• flutter
• password-manager
• password-store
• android
• macos-application
• flutter-apps
• +14 more

387.nil0x42 / phpsploit

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

• post-exploitation
• hacking
• backdoor
• stealth
• hacktool
• blackhat
• +12 more

388.panva / openid-client

OAuth 2 / OpenID Connect Client API for JavaScript Runtimes

• oidc
• openid
• openid-client
• openid-connect
• passport
• connect
• +1 more

389.htrgouvea / nipe

An engine to make Tor network your default gateway

• tor
• anonymity
• network
• nipe
• privacy
• perl
• +3 more

390.microsoft / Sysmon-Linux

Sysmon for Linux

391.last-byte / PersistenceSniper

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte

• incident-response
• malware-detection
• persistence
• powershell
• powershell-module
• powershell-script
• +3 more

392.uNetworking / uSockets

Miniscule cross-platform eventing, networking & crypto for async applications

• miniscule
• cross-platform
• async
• tcp
• ssl

393.NtQuery / Scylla

Imports Reconstructor

394.vanhoefm / fragattacks

The repository host gives no description.

395.crypto2011 / IDR

Interactive Delphi Reconstructor

396.fwdai / rowel

🔑 Local-first Secrets Manager

• password
• password-manager
• desktop
• credentials
• security
• cipher
• +11 more

397.cursey / safetyhook

C++23 procedure hooking library.

• hook
• hooks
• detour
• detours
• hooking
• cmkr

398.paulmillr / noble-post-quantum

Auditable & minimal JS implementation of public-key post-quantum cryptography

• dilithium
• kyber
• ml-kem
• post-quantum-cryptography
• sphincs
• sphincs-plus
• +14 more

399.Mutasem-mk4 / procscope

Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.

• bpf
• ebpf
• forensics
• golang
• linux-security
• reverse-engineering
• +14 more

400.pennersr / django-allauth

Integrated set of Django applications addressing authentication, registration, account management as well as 3rd party (social) account authentication. 🔁 Mirror of https://codeberg.org/allauth/django-allauth/

• authentication
• django
• oauth2
• openid-connect
• python
• saml
• +8 more