Trending repositories

401.traggo / server

self-hosted tag-based time tracking

• golang
• selfhosted
• freesoftware
• privacy
• self-hosted
• timetracking
• +2 more

402.mushorg / conpot

ICS/SCADA honeypot

• honeypot
• scada
• ics
• python
• security
• hacktoberfest

403.lucia-auth / lucia

Authentication, simple and clean

• oauth
• typescript
• auth

404.google / tsunami-security-scanner

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

405.digitalbazaar / forge

A native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps

• crypto
• cryptography
• x509
• message-digest
• aes
• asn1
• +14 more

406.aquasecurity / cloudsploit

Cloud Security Posture Management (CSPM)

• aws
• security
• security-audit
• cloud
• azure
• cspm
• +5 more

407.node9-ai / node9-proxy

Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.

• ai-safety
• ai-security
• claude-code
• llm-agent
• agent-security
• dlp
• +14 more

408.pii-shield / pii-shield

Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️

• devsecops
• entropy
• gdpr
• golang
• json
• kubernetes
• +7 more

409.google / grr

GRR Rapid Response: remote live forensics for incident response

410.rocky / python-uncompyle6

A cross-version Python bytecode decompiler

• decompiler
• python
• bytecode

411.TheOfficialFloW / PPPwn

PPPwn - PlayStation 4 PPPoE RCE

412.authts / oidc-client-ts

OpenID Connect (OIDC) and OAuth2 protocol support for browser-based JavaScript applications

• oidc
• oidc-client
• typescript

413.paulmillr / noble-curves

Audited & minimal JS implementation of elliptic curve cryptography.

• crypto
• cryptography
• ecdsa
• ed25519
• ed448
• eddsa
• +14 more

414.OneKeePass / desktop

A secure password manager for macOS,Linux and Windows platforms

415.jesseduffield / horcrux

Split your file into encrypted fragments so that you don't need to remember a passcode

416.panda-re / panda

Platform for Architecture-Neutral Dynamic Analysis

• reverse-engineering
• dynamic-analysis
• qemu
• pandare
• pypanda

417.Neo23x0 / Loki

Loki - Simple IOC and YARA Scanner

• python
• yara
• signature
• scanner
• ioc
• otx
• +4 more

418.Legrandin / pycryptodome

A self-contained cryptographic library for Python

• cryptography
• security
• python

419.de4dot / de4dotArchived

.NET deobfuscator and unpacker.

420.yunginnanet / HellPot

HellPot is a cross-platform portal to endless suffering meant to punish unruly HTTP bots.

• honeypot
• http
• web
• deception
• stress
• cross-platform
• +6 more

421.longld / peda

PEDA - Python Exploit Development Assistance for GDB

422.sc0tfree / mentalist

Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.

• wordlist
• wordlist-generator
• password
• cracking
• cracking-hashes
• wordlist-technique

423.zed-0xff / zsteg

detect stegano-hidden data in PNG & BMP

424.wagga40 / Zircolite

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs

• sigma
• python3
• evtx
• sigma-rules
• detection
• auditd
• +9 more

425.CaringCaribou / caringcaribou

A friendly car security exploration tool for the CAN bus

• python
• can-bus
• security-scanner
• security-testing
• fuzzing
• xcp
• +1 more

426.react-cosmos / react-cosmos

Sandbox for developing and testing UI components in isolation

• react
• devtools
• ui
• components
• testing
• sandbox

427.greg7mdp / parallel-hashmap

A family of header-only, very fast and memory-friendly hashmap and btree containers.

• hash
• tables
• unordered-map
• unordered-set
• hash-container
• parallel
• +4 more

428.NextronSystems / APTSimulator

A toolset to make a system look as if it was the victim of an APT attack

429.yeti-platform / yeti

Your Everyday Threat Intelligence

• infosec
• threatintel
• threat-sharing
• threat-hunting
• enrichment
• intelligence
• +1 more

430.eliben / pyelftools

Parsing ELF and DWARF in Python

• debugging
• dwarf
• elf
• elf-binaries
• elf-parser
• python

431.ydkhatri / mac_apt

macOS (& ios) Artifact Parsing Tool

• dfir
• forensics
• macos

432.vw2x / Mira

Mobile runtime detection workbench for AI (iOS and Android)

• frida
• reverse-engineering
• android-security-tools
• frida-gadget
• ios-security-tool
• mcp-client
• +3 more

433.doorkeeper-gem / doorkeeper

Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.

• doorkeeper
• oauth
• oauth2-provider
• oauth2-server
• ruby-on-rails
• grape
• +4 more

434.Storyyeller / Krakatau

Java decompiler, assembler, and disassembler

435.profanity-im / profanity

Ncurses based XMPP client

• xmpp-client
• c
• xmpp
• chat
• ncurses
• decentralization
• +6 more

436.uNetworking / uSockets

Miniscule cross-platform eventing, networking & crypto for async applications

• miniscule
• cross-platform
• async
• tcp
• ssl

437.tklengyel / drakvuf

DRAKVUF Black-box Binary Analysis

• malware-analysis
• virtualization
• xen
• introspection

438.krzyzanowskim / CryptoSwift

CryptoSwift is a growing collection of standard and secure cryptographic algorithms implemented in Swift

• swift
• aes
• cryptography
• commoncrypto
• cryptoswift
• md5
• +7 more

439.EmpireProject / EmpireArchived

Empire is a PowerShell and Python post-exploitation agent.

440.hashcat / hashcat-utils

Small utilities that are useful in advanced password cracking

441.globaleaks / globaleaks-whistleblowing-software

GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.

• digital-human-rights
• anonymity
• security
• python
• twisted
• sqlalchemy
• +14 more

442.Luzifer / ots

One-Time-Secret sharing platform with a symmetric 256bit AES encryption in the browser

• one-time-secret
• golang
• encryption
• aes256

443.phra / PEzor

Open-Source Shellcode & PE Packer

• shellcode
• antivirus-evasion
• redteam
• hacktoberfest

444.zlib-ng / minizip-ng

Fork of the popular zip manipulation library found in the zlib distribution.

• minizip
• zip
• zlib
• lzma
• bzip2
• winzip-aes
• +9 more

445.SSLMate / certspotter

Lightweight Certificate Transparency Log Monitor

• certificate-transparency
• pki
• x509
• security
• webpki

446.Rurik / Noriben

Noriben - Portable, Simple, Malware Analysis Sandbox

447.HemmeligOrg / Hemmelig.appArchived

Keep your sensitive information out of chat logs, emails, and more with encrypted secrets.

• secret
• encryption
• onetimesecret
• password
• personal-data
• gdpr
• +9 more

448.TypeError / secure

Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).

• fastapi
• flask
• django
• content-security-policy
• http-headers
• python
• +7 more

449.christophetd / CloudFlair

🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.

• cloudflare
• pentest-tool
• pentest
• censys

450.in-toto / in-toto

in-toto is a framework to protect supply chain integrity.

• supply-chain
• security
• new-york-university
• secure-systems-lab

451.SpacehuhnTech / DeauthDetector

Detect deauthentication frames using an ESP8266

• arduino
• esp8266
• deauth
• attack
• deauthentication
• disassociation
• +6 more

452.dolevf / graphql-cop

Security Auditor Utility for GraphQL APIs

• security
• penetration-testing
• auditing
• graphql
• hacking
• red-team
• +2 more

453.omniauth / omniauth

OmniAuth is a flexible authentication system utilizing Rack middleware.

• omniauth
• authentication
• hacktoberfest
• ruby

454.michenriksen / gitrobArchived

Reconnaissance tool for GitHub organizations

• security
• osint
• github-api
• golang

455.cliffe / SecGen

Create randomly insecure VMs

• security
• security-vulnerability
• virtualization
• randomization
• provisioning
• labs
• +2 more

456.sundaysec / Android-Exploits

A collection of android Exploits and Hacks

• android
• android-architecture
• hacking
• exploit
• exploits
• dos

457.mcginty / snow

A Rust implementation of the Noise Protocol Framework

• cryptography
• crypto
• noise-protocol-framework
• noise-protocol
• noise
• rust
• +1 more

458.RustCrypto / AEADs

Authenticated Encryption with Associated Data Algorithms: high-level encryption ciphers

459.vvo / iron-session

🛠 Secure, stateless, and cookie-based session library for Next.js or any JavaScript framework

• nextjs
• authentication
• session
• stateless
• cookies
• expressjs
• +2 more

460.briansmith / ring

An experiment.

• rust
• cryptography
• security

461.nil0x42 / phpsploit

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

• post-exploitation
• hacking
• backdoor
• stealth
• hacktool
• blackhat
• +12 more

462.jkroepke / helm-secrets

A helm plugin that help manage secrets with Git workflow and store them anywhere

• helm
• helm-plugin
• helm-plugins
• kubernetes
• k8s
• helm-charts
• +14 more

463.cmu-sei / pharos

Automated static analysis tools for binary programs

• binary-analysis
• reverse-engineering

464.Juliusolsson05 / pharos-ai

Open-source OSINT intelligence dashboard tracking the Iran conflict in real time — live DeckGL/MapLibre conflict map, 30 bias-labeled feeds, actor dossiers, and daily briefs. Live at conflicts.app.

• deckgl
• geopolitics
• intelligence
• maplibre
• nextjs
• osint
• +1 more

465.phpseclib / phpseclib

PHP Secure Communications Library

• php
• ssh
• sftp
• rsa
• aes
• x509
• +7 more

466.CalebFenton / simplify

Android virtual machine and deobfuscator

• deobfuscation
• java
• optimization
• android
• reverse-engineering
• malware-analysis
• +9 more

467.ory / polis

Streamline your web application's authentication with Polis, an SSO service supporting SAML and OpenID Connect protocols. Beyond enterprise-grade Single Sign-On, it also supports Directory Sync via the SCIM 2.0 protocol for automatic user and group provisioning/de-provisioning.

• enterprise-software
• saml
• saml2
• saml-service-provider
• saml-authentication
• sso
• +14 more

468.erocarrera / pefile

pefile is a Python module to read and work with PE (Portable Executable) files

469.microsoft / avml

AVML - Acquire Volatile Memory for Linux

• rust
• memory-forensics
• linux-security

470.paulmillr / noble-post-quantum

Auditable & minimal JS implementation of public-key post-quantum cryptography

• dilithium
• kyber
• ml-kem
• post-quantum-cryptography
• sphincs
• sphincs-plus
• +14 more

471.doyensec / inql

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

• graphql
• security-scanner
• graphql-security
• api-documentation-tool
• security-tools
• security-audit
• +5 more

472.pompelmi / pompelmi

ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.

• clamscan
• file-scanner
• virus-scan
• docker-compose
• upload-file
• virus
• +8 more

473.paulmillr / noble-ciphers

Audited & minimal JS implementation of Salsa20, ChaCha and AES

• aes-siv
• chacha20
• chacha20-poly1305
• chacha20poly1305
• cipher
• cryptography
• +11 more

474.openpgpjs / openpgpjs

OpenPGP implementation for JavaScript

475.jeremyevans / rodauth

Ruby's Most Advanced Authentication Framework

476.jaksi / sshesame

An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity

• ssh
• honeypot
• go
• golang
• security

477.ForensicArtifacts / artifacts

Digital Forensics artifact repository

478.crypto2011 / IDR

Interactive Delphi Reconstructor

479.boazeb / papervault

Paper vault for passwords and secrets

• cryptocurrency
• cryptography
• cybersecurity
• digital-asset-security
• password-manager

480.michenriksen / aquatoneArchived

A Tool for Domain Flyovers

• security
• osint
• golang
• chrome-headless
• reconnaissance
• chromium

481.FutureComputing4AI / EMBER2024

The repository host gives no description.

482.nginx-proxy / acme-companion

Automated ACME SSL certificate generation for nginx-proxy

• nginx-proxy
• letsencrypt
• docker
• ssl
• acme
• acme-v2
• +3 more

483.sobolevn / git-secret

:busts_in_silhouette: A bash-tool to store your private data inside a git repository.

• git-secret
• git
• git-addons
• gpg
• encryption
• secret-management

484.vanhoefm / krackattacks-scripts

The repository host gives no description.

485.david942j / one_gadget

The best tool for finding one gadget RCE in libc.so.6

• ctf
• pwnable
• pwn
• glibc
• one-gadget-rce
• shell
• +3 more

486.eset / malware-ioc

Indicators of Compromises (IOC) of our various investigations

• ioc
• malware
• yara
• misp

487.SpiderLabs / ResponderArchived

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

488.last-byte / PersistenceSniper

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte

• incident-response
• malware-detection
• persistence
• powershell
• powershell-module
• powershell-script
• +3 more

489.trustedsec / hate_crack

A tool for automating cracking methodologies through Hashcat from the TrustedSec team.

490.vanhoefm / fragattacks

The repository host gives no description.

491.PlumHound / PlumHound

Bloodhound Reporting for Blue and Purple Teams

• active
• directory
• blueteam
• purpleteam
• bloodhound
• bloodhoundad
• +14 more

492.padloc / padloc

A modern, open source password manager for individuals and teams.

• javascript
• lit-element
• lit-html
• password-generator
• password-manager
• progressive-web-app
• +5 more

493.libtom / libtomcrypt

LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines.

• libtomcrypt
• cryptography
• c
• encryption

494.emalderson / ThePhish

ThePhish: an automated phishing email analysis tool

• email
• detection
• malware
• phishing
• cybersecurity
• misp
• +14 more

495.kelektiv / node.bcrypt.js

bcrypt for NodeJs

• bcrypt

496.epinna / weevely3

Weaponized web shell

497.linkedin / qark

Tool to look for several security related Android application vulnerabilities

498.flipkart-incubator / Astra

Automated Security Testing For REST API's

• security
• restapiautomation
• python
• owasp
• penetration-testing-framework
• postman-collection
• +4 more

499.sans-blue-team / DeepBlueCLI

The repository host gives no description.

500.B-Con / crypto-algorithms

Basic implementations of standard cryptography algorithms, like AES and SHA-1.