Trending repositories

301.dstotijn / hetty

An HTTP toolkit for security research.

• mitm
• proxy
• http
• pentesting
• infosec
• bugbounty

302.avast / retdec

RetDec is a retargetable machine-code decompiler based on LLVM.

303.xmendez / wfuzz

Web application fuzzer

304.authlib / authlib

The ultimate Python library in building OAuth, OpenID Connect clients and servers. JWS, JWE, JWK, JWA, JWT included.

• oauth
• oauth2
• oidc
• oauth2-server
• oauth2-provider
• openid-connect
• +7 more

305.P-H-C / phc-winner-argon2

The password hash Argon2, winner of PHC

306.openiddict / openiddict-core

Flexible and versatile OAuth 2.0/OpenID Connect stack for .NET

• openidconnect
• oauth2
• aspnetcore
• dotnet

307.aquasecurity / cloudsploit

Cloud Security Posture Management (CSPM)

• aws
• security
• security-audit
• cloud
• azure
• cspm
• +5 more

308.str4d / rage

A simple, secure and modern file encryption tool (and Rust library) with small explicit keys, no config options, and UNIX-style composability.

• cli
• encryption
• zero-configuration
• secure-by-default
• unix-philosophy
• curve25519
• +5 more

309.uxmal / reko

Reko is a binary decompiler.

• decompiler
• dotnet
• decompiler-engine
• decompile
• reverse-engineering
• x86
• +7 more

310.mandiant / flare-fakenet-ng

FakeNet-NG - Next Generation Dynamic Network Analysis Tool

• fakenet-ng
• traffic-redirection
• malware-analysis
• mandiant-flare
• gsoc-2026

311.GrapheneOS / hardened_malloc

Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.

• malloc
• security
• memory-allocation
• malloc-library
• memory-allocator
• memory
• +4 more

312.openappsec / openappsec

open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.

• api-security
• application-security
• kubernetes
• nginx
• web-application-firewall
• appsec
• +9 more

313.martinus / unordered_dense

A fast & densely stored hashmap and hashset

• c-plus-plus
• cpp17
• cpp
• hash
• hash-tables
• header-only-library
• +4 more

314.TalEliyahu / awesome-security-newsletters

Periodic cyber security newsletters that capture the latest news, summaries of conference talks, research, best practices, tools, events, vulnerabilities, and analysis of trending threats and attacks

• cybersecurity
• newsletter

315.CERT-Polska / Artemis

A modular vulnerability scanner with automatic report generation capabilities.

• artemis
• pentesting
• security
• security-scanner
• security-tools
• vulnerability-detection
• +2 more

316.dyc3 / steamguard-cli

A linux utility for generating 2FA codes for Steam and managing Steam trade, market, and other confirmations.

• steam
• steamguard-cli
• linux-utility
• sda
• 2fa
• steambot
• +1 more

317.FrancescoStabile / numasec

The AI Agent for Cyber Security.

• ai-agent
• ai-security
• appsec
• bug-bounty
• cybersecurity
• devsecops
• +14 more

318.BlessedRebuS / Krawl

Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.

• anti-crawling
• cloud-native
• crawler
• deception
• honeypot
• kubernetes
• +11 more

319.ibericode / koko-analytics

Privacy-friendly, open-source analytics for WordPress — GDPR compliant, cookieless, and fast

• analytics
• privacy
• wordpress
• google-analytics
• website
• koko-analytics
• +4 more

320.Mutasem-mk4 / procscope

Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.

• bpf
• ebpf
• forensics
• golang
• linux-security
• reverse-engineering
• +14 more

321.supertokens / supertokens-core

Open source alternative to Auth0 / Firebase Auth / AWS Cognito

• authentication
• session-management
• login
• supertokens
• java
• signin
• +13 more

322.threat9 / routersploit

Exploitation Framework for Embedded Devices

• python
• security
• infosec
• router-exploitation-framework
• routersploit-framework
• exploits
• +7 more

323.pxb1988 / dex2jar

Tools to work with android .dex and java .class files

324.evilsocket / pwnagotchi

(⌐■_■) - Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.

• ai
• deep-reinforcement-learning
• wpa-psk
• handshakes
• bettercap
• deep-learning
• +1 more

325.stalniy / casl

CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access

• authorization
• permissions
• acl
• cancan
• casl
• isomorphic-javascript

326.Yara-Rules / rules

Repository of yara rules

327.google / nsjail

A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

• security
• linux-namespaces
• linux
• process-isolation
• seccomp-bpf-policies
• chroot

328.evyatarmeged / Raccoon

A high performance offensive security tool for reconnaissance and vulnerability scanning

• reconnaissance
• scanner
• vulnerability-assessment
• vulnerability-scanner
• enumeration
• pentesting
• +9 more

329.ashvardanian / StringZilla

Up to 100x faster strings for C, C++, CUDA, Python, Rust, Swift, JS, & Go, leveraging NEON, AVX2, AVX-512, SVE, GPGPU, & SWAR to accelerate search, hashing, sorting, edit distances, sketches, and memory ops 🦖

• simd
• dataset
• string
• string-manipulation
• string-matching
• substring
• +12 more

330.google / timesketch

Collaborative forensic timeline analysis

• forensics
• dfir
• security
• timeline
• analysis

331.rednaga / APKiD

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

• android
• antivirus
• machine-learning
• malware-detection
• malware-analysis
• malware-research
• +8 more

332.rabbitstack / fibratus

Security sensor for realtime threat detection and protection

• windows
• windows-kernel
• instrumentation
• security
• etw
• blue-team
• +13 more

333.ZerBea / hcxtools

A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper.

• wlan
• wpa
• wpa2
• raspberry-pi
• hashcat
• handshake
• +8 more

334.cider-security-research / cicd-goat

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

• appsec
• cicd
• devops
• infosec
• devsecops
• security
• +3 more

335.RustCrypto / hashes

Collection of cryptographic hash functions written in pure Rust

• cryptographic-hash-functions
• blake2
• gost
• streebog
• groestl
• md2
• +13 more

336.zitadel / oidc

Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation

• oidc
• oauth2
• openidconnect
• server
• client
• go
• +13 more

337.aptabase / aptabase

✨ Open Source, Privacy-First and Simple Analytics for Mobile, Desktop and Web Apps

• analytics
• electron
• flutter
• maui
• privacy
• react-native
• +5 more

338.libtom / libtomcrypt

LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines.

• libtomcrypt
• cryptography
• c
• encryption

339.splunk / security_content

Splunk Security Content

• splunk
• detection
• engineering
• responses
• cicd
• cybersecurity
• +1 more

340.mateusz-bak / openreads

A mobile books tracker written in Flutter that respects your privacy.

• android
• books
• flutter
• mobile
• flutter-app
• flutter-apps
• +4 more

341.den4uk / andriller

📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.

• forensics
• python
• android

342.Zibbp / ganymede

Twitch VOD and Live Stream archiving platform. Includes a rendered and real-time chat for each archive.

• archive
• archived
• chat
• streaming
• twitch
• vod
• +4 more

343.Tencent / BqLog

A lightweight, high-performance, industrial-grade cross-language logging library (C++/Java/C#/Kotlin/TS/Python/Go), battle-tested in Honor of Kings.

• cross-platform
• high-performance
• java
• logging
• cpp
• csharp
• +14 more

344.i12bp8 / decomp.wtfArchived

What The Function: your AI agent decompiles games you own into C that compiles to the exact same bytes. Runs locally.

• ai-agents
• claude-code
• decompilation
• matching-decompilation
• mcp
• n64
• +7 more

345.HMAKT99 / UnTouchID

Use your phone's Face ID or fingerprint to approve sudo and unlock your Mac. QR pairing, encrypted BLE, Secure Enclave signing — keys never leave your phone. Works with iPhone, Android, Apple Watch, Wear OS, or any browser. No $199 Magic Keyboard needed.

• android
• biometrics
• kotlin
• mac-mini
• macbook
• macos
• +13 more

346.motdotla / dotenv

Loads environment variables from .env for nodejs projects.

• dotenv
• environment-variables
• javascript
• node
• nodejs
• secrets
• +5 more

347.javascript-obfuscator / javascript-obfuscator

A powerful obfuscator for JavaScript and Node.js

• javascript-obfuscator
• obfuscation
• uglify
• javascript
• protection
• obfuscate
• +14 more

348.win-acme / win-acme

Automate SSL/TLS certificates on Windows with ease

• acme
• certificates
• windows
• iis
• exchange
• rds
• +4 more

349.elceef / dnstwist

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

• phishing
• typosquatting
• domains
• dns
• osint
• idn
• +6 more

350.ReversecLabs / drozer

The Leading Security Assessment Framework for Android.

• drozer
• android
• security
• pentesting
• java
• mobile
• +2 more

351.mandiant / flare-floss

FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

• malware
• deobfuscation
• strings
• flare
• malware-analysis
• gsoc-2026

352.ivre / ivre

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.

• bro
• scans
• nmap
• network
• network-discovery
• scan-ports
• +14 more

353.Legrandin / pycryptodome

A self-contained cryptographic library for Python

• cryptography
• security
• python

354.pglombardo / PasswordPusher

🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.

• security
• password-expiration
• password
• password-safety
• communicate-passwords
• password-pusher
• +13 more

355.tellerops / teller

Cloud native secrets management for developers - never leave your command line for secrets.

• secrets
• secret-management
• vault
• hashicorp
• aws
• rust
• +1 more

356.onetimesecret / onetimesecret

Keep passwords and other sensitive information out of your chat logs and inboxes.

• privacy
• onetime
• secrets
• chat
• email
• messaging
• +1 more

357.leibnitz27 / cfr

This is the public repository for the CFR Java decompiler

358.log2timeline / plaso

Super timeline all the things

• forensics
• parsing
• timeline

359.s0md3v / ReconDog

Reconnaissance Swiss Army Knife

• recon
• information-gathering
• honeypot-detector
• subdomain-enumeration
• cms-detector

360.aptnotes / data

APTnotes data

• apt
• malware
• analysis

361.sqlancer / sqlancer

Automated testing to find logic and performance bugs in database systems

• testing
• sql
• dbms
• fuzzing
• dbms-testing
• sqlite
• +5 more

362.Rurik / Noriben

Noriben - Portable, Simple, Malware Analysis Sandbox

363.mozillazg / ptcpdump

Process-aware, eBPF-based tcpdump

• ebpf
• ebpf-tc
• tcpdump
• tcpdump-like
• ebpf-go
• network-capture
• +9 more

364.latchset / clevis

Automated Encryption Framework

365.fox-it / dissect

Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part of NCC Group).

• dfir
• dissect
• python

366.yunginnanet / HellPot

HellPot is a cross-platform portal to endless suffering meant to punish unruly HTTP bots.

• honeypot
• http
• web
• deception
• stress
• cross-platform
• +6 more

367.safedep / vet

Protect against malicious open source packages 🤖

• devsecops
• security
• supply-chain-security
• policy-as-code
• software-composition-analysis
• golang
• +5 more

368.a1ex4 / ownfoil

Nintendo Switch library manager, with automated management tasks, serving your library to multiple supported clients on your Switch, with shop customization and multi user authentication.

• tinfoil
• atmosphere
• homebrew
• switch
• nintendo-switch
• self-hosted

369.paulmillr / noble-hashes

Audited & minimal JS implementation of hash functions, MACs and KDFs.

• cryptography
• hash
• kdf
• hashing
• sha256
• sha512
• +13 more

370.pret / pokeyellow

Disassembly of Pokemon Yellow

• pokemon
• disassembly
• gameboy
• reverse-engineering
• gbz80

371.gravitee-io / gravitee-api-management

Gravitee.io - OpenSource API Management

• api
• api-management
• gateway
• java
• vertx
• api-gateway
• +1 more

372.securityfirst / Umbrella_android

Open source Android, iOS and Web app for learning about and managing digital and physical security. From how to send a secure message to dealing with a kidnap. Umbrella has best practice guides in over 40 topics in multiple languages. Used daily by people working in high risk countries - journalists, activists, diplomats, business travelers etc.

• opensource
• security
• risk
• human-rights-defenders
• activism
• infosec
• +10 more

373.NodePassProject / nodepass

A secure, efficient TCP/UDP tunneling solution that delivers fast, reliable access across network restrictions using pre-established TCP/QUIC/WebSocket or HTTP/2 connections.

• api-rest
• connection-pooling
• cybersecurity
• devops
• golang
• http2
• +14 more

374.OWASP / www-project-agent-memory-guard

Runtime defense against memory poisoning in AI agents (OWASP ASI06). Drop-in for LangChain, OpenAI Agents, AutoGen, CrewAI and mem0.

• ai-agents
• langchain
• llm-security
• memory-poisoning
• owasp
• prompt-injection
• +14 more

375.assetnote / h3fuzz

Content discovery and fuzzing with HTTP/3 support (100k requests per second)

376.justauth / JustAuth

Translated🏆Gitee's most valuable open source project 🚀:100: A small, comprehensive and elegant open source component for third-party login. It currently supports authorized login via third-party platforms including Github, Gitee, Weibo, DingTalk, Baidu, Coding, Tencent Cloud Developer Platform, OSChina, Alipay, QQ, WeChat, Taobao, Google, Facebook, Douyin, LinkedIn, Xiaomi, Microsoft, Toutiao, Teambition, StackOverflow, Pinterest, Renren, Huawei, WeCom, Kujiale, Gitlab, Meituan, Ele.me, Twitter, Feishu, JD.com, Alibaba Cloud, Ximalaya, Amazon, Slack and Line. Login, so easy!

• justauth
• oauth2
• qqlogin
• googlelogin
• weixinlogin

377.spatie / laravel-permission

Associate users with roles and permissions

• laravel
• php
• permission
• secure

378.apereo / cas

Apereo CAS - Identity & Single Sign On for all earthlings and beyond.

• sso-authentication
• authentication
• authorization
• java
• websso
• saml2
• +14 more

379.pennersr / django-allauth

Integrated set of Django applications addressing authentication, registration, account management as well as 3rd party (social) account authentication. 🔁 Mirror of https://codeberg.org/allauth/django-allauth/

• authentication
• django
• oauth2
• openid-connect
• python
• saml
• +8 more

380.stamparm / maltrail

Malicious traffic detection system

• security
• malware
• intrusion-detection
• sensor
• python
• network-monitoring
• +2 more

381.de4dot / de4dotArchived

.NET deobfuscator and unpacker.

382.dwisiswant0 / apkleaks

Scanning APK file for URIs, endpoints & secrets.

• mobile-security
• android-security
• reverse-engineering
• bugbounty
• static-analysis
• apk
• +2 more

383.CryptoSignal / Crypto-Signal

Github.com/CryptoSignal - Trading & Technical Analysis Bot - 4,100+ stars, 1,100+ forks

• technical-analysis
• bittrex-api
• crypto
• bitcoin
• ethereum
• trading
• +14 more

384.USArmyResearchLab / Dshell

Dshell is a network forensic analysis framework.

385.google / grr

GRR Rapid Response: remote live forensics for incident response

386.OTRF / ThreatHunter-Playbook

A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.

• threat-hunting
• sysmon
• hunting-campaigns
• hypothesis
• hunting
• dfir
• +3 more

387.extremecoders-re / pyinstxtractor

PyInstaller Extractor

• python
• pyinstaller
• decompile
• reverse-engineering
• pyinstaller-extractor
• python-decompiler
• +2 more

388.JetBrains / fernflower

Decompiler from Java bytecode to Java, used in IntelliJ IDEA.

• java
• decompiler
• reverse-engineering

389.KuroLabs / stegcloak

Hide secrets with invisible characters in plain text securely using passwords 🧙🏻‍♂️⭐

• cryptography
• steganography
• compression
• functional-programming
• ramdajs
• hacking-tool
• +10 more

390.ambionics / phpggc

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

391.epinna / weevely3

Weaponized web shell

392.odedshimon / BruteShark

Network Analysis Tool

• hacking
• pcap-files
• pcap
• cyber
• network-analysis
• hashcat
• +11 more

393.codingo / NoSQLMap

Automated NoSQL database enumeration and web application exploitation tool.

• nosql
• nosql-databases
• penetration-testing
• scanner
• security-audit
• security-tools
• +14 more

394.SteamRE / SteamKit

SteamKit2 is a .NET library designed to interoperate with Valve's Steam network. It aims to provide a simple, yet extensible, interface to perform various actions on the network.

• steamkit2
• c-sharp
• nuget
• steam
• valve
• networking
• +3 more

395.korcankaraokcu / PINCE

Reverse engineering tool for Linux

• gdb
• cheat-engine
• reverse-engineering
• injection
• memory-hacking
• hex-editor
• +10 more

396.m0bilesecurity / RMS-Runtime-Mobile-Security

Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime

• mobile-security
• android-security
• frida
• reverse-engineering
• ios-security

397.wolfSSL / wolfssl

The wolfSSL library is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3 and DTLS 1.3! Update to wolfSSL 5.9.1 for the latest CVE fixes.

• ssl
• tls
• cryptography
• security
• openssl
• tls13
• +14 more

398.epsylon / ufonet

UFONet - Denial of Service Toolkit

• dos
• ddos
• ufonet
• botnet
• disruption
• cryptography
• +1 more

399.ErikEJ / EFCorePowerTools

Entity Framework Core Power Tools - reverse engineering, migrations and model visualization in Visual Studio & CLI

• entity-framework-core
• visual-studio
• entity-framework
• model-visualization
• sql-server
• hacktoberfest
• +3 more

400.nil0x42 / phpsploit

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

• post-exploitation
• hacking
• backdoor
• stealth
• hacktool
• blackhat
• +12 more