Ranked by Attention Score: stars gained over the last 7 complete days
301–400 of 772 by Attention Score · Oct 29, 2026 – Nov 4, 2026 (UTC)
The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
Reko is a binary decompiler.
Collection of cryptographic hash functions written in pure Rust
Splunk Security Content
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
The universe in numbers. Free, open-source calculators for everything countable.
Cover your Mac's screen with a hotkey while AI agents keep running, even with the lid closed. The covered screen glows when Claude Code, Codex or Gemini needs you. Touch ID unlock.
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
Open source alternative to Auth0 / Firebase Auth / AWS Cognito
A rewrite of the old legacy software "depends.exe" in C# for Windows devs to troubleshoot dll load dependencies issues.
Malicious traffic detection system
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
CTFs as you need them
The password hash Argon2, winner of PHC
Cloud Security Posture Management (CSPM)
Up to 100x faster strings for C, C++, CUDA, Python, Rust, Swift, JS, & Go, leveraging NEON, AVX2, AVX-512, SVE, GPGPU, & SWAR to accelerate search, hashing, sorting, edit distances, sketches, and memory ops 🦖
Keep passwords and other sensitive information out of your chat logs and inboxes.
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
Security sensor for realtime threat detection and protection
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
Canarytokens helps track activity and actions on your network
LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines.
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.
Digital Forensics Investigation Platform
BlockBlock provides continual protection by monitoring persistence locations.
The AI Agent for Cyber Security.
What The Function: your AI agent decompiles games you own into C that compiles to the exact same bytes. Runs locally.
BINNY: an open source agent harness for reverse engineering. Plug in any model, or a local one.
An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following, Tweets and more while evading most API limitations.
A powerful obfuscator for JavaScript and Node.js
Most advanced XSS scanner.
Tools to work with android .dex and java .class files
Go implementation of JSON Web Tokens (JWT).
(⌐■_■) - Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.
RetDec is a retargetable machine-code decompiler based on LLVM.
CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access
A native macOS KeePass client
The ultimate Python library in building OAuth, OpenID Connect clients and servers. JWS, JWE, JWK, JWA, JWT included.
Linux Runtime Security and Forensics using eBPF
A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
Automated NoSQL database enumeration and web application exploitation tool.
A self-contained cryptographic library for Python
🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.
A toolset to make a system look as if it was the victim of an APT attack
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte
A fast & densely stored hashmap and hashset
UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.
Creates up to a thousand WiFi access points with custom SSIDs.
HellPot is a cross-platform portal to endless suffering meant to punish unruly HTTP bots.
A friendly car security exploration tool for the CAN bus
The repository host gives no description.
Runtime defense against memory poisoning in AI agents (OWASP ASI06). Drop-in for LangChain, OpenAI Agents, AutoGen, CrewAI and mem0.
Loads environment variables from .env for nodejs projects.
Dshell is a network forensic analysis framework.
GRR Rapid Response: remote live forensics for incident response
OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.
PyInstaller Extractor
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
Decrypted content of eqgrp-auction-file.tar.xz
OpenID Certified™ OAuth 2.0 Authorization Server implementation for Node.js
Tool to look for several security related Android application vulnerabilities
Cloud native secrets management for developers - never leave your command line for secrets.
A family of header-only, very fast and memory-friendly hashmap and btree containers.
SteamKit2 is a .NET library designed to interoperate with Valve's Steam network. It aims to provide a simple, yet extensible, interface to perform various actions on the network.
Reverse engineering tool for Linux
Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime
Entity Framework Core Power Tools - reverse engineering, migrations and model visualization in Visual Studio & CLI
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
Optimized C library for EC operations on curve secp256k1
A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper.
XRay is a tool for recon, mapping and OSINT gathering from public networks.
FakeNet-NG - Next Generation Dynamic Network Analysis Tool
Super timeline all the things
Reconnaissance Swiss Army Knife
Basic implementations of standard cryptography algorithms, like AES and SHA-1.
self-hosted tag-based time tracking
Small utilities that are useful in advanced password cracking
Collaborative Incident Response platform
ECDH and ECDSA for 8-bit, 32-bit, and 64-bit processors.
This is the development tree. Production downloads are at:
A multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks.
:rocket: An open source alternative to searx which provides a modern-looking :sparkles:, lightning-fast :zap:, privacy respecting :disguised_face:, secure :lock: meta search engine
Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part of NCC Group).
A Rust implementation of the Noise Protocol Framework
A linux utility for generating 2FA codes for Steam and managing Steam trade, market, and other confirmations.
:key: Hash type identifier (CLI & lib)
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
🔑 Local-first Secrets Manager
Nintendo Switch library manager, with automated management tasks, serving your library to multiple supported clients on your Switch, with shop customization and multi user authentication.