Trending repositories

401.jpadilla / pyjwt

JSON Web Token implementation in Python

• python
• jwt
• hacktoberfest

402.ossec / ossec-hids

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

• hids
• security
• pci-dss
• nist800-53
• ossec
• compliance
• +5 more

403.kokke / tiny-AES-c

Small portable AES128/192/256 in C

404.epinna / tplmap

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

405.aquasecurity / cloudsploit

Cloud Security Posture Management (CSPM)

• aws
• security
• security-audit
• cloud
• azure
• cspm
• +5 more

406.greg7mdp / parallel-hashmap

A family of header-only, very fast and memory-friendly hashmap and btree containers.

• hash
• tables
• unordered-map
• unordered-set
• hash-container
• parallel
• +4 more

407.ashmind / SharpLab

.NET language playground

408.christophetd / CloudFlair

🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.

• cloudflare
• pentest-tool
• pentest
• censys

409.NextronSystems / APTSimulator

A toolset to make a system look as if it was the victim of an APT attack

410.s0md3v / ReconDog

Reconnaissance Swiss Army Knife

• recon
• information-gathering
• honeypot-detector
• subdomain-enumeration
• cms-detector

411.lukechilds / reverse-shell

Reverse Shell as a Service

• reverse-shell
• exploit
• vulnerability
• pentesting
• microservice
• security

412.den4uk / andriller

📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.

• forensics
• python
• android

413.elastic / protections-artifacts

Elastic Security detection content for Endpoint

414.spacehuhn / esp8266_beaconSpam

Creates up to a thousand WiFi access points with custom SSIDs.

• ssid
• custom-ssids
• wifi
• esp8266
• spam
• flood
• +1 more

415.mcginty / snow

A Rust implementation of the Noise Protocol Framework

• cryptography
• crypto
• noise-protocol-framework
• noise-protocol
• noise
• rust
• +1 more

416.Luzifer / ots

One-Time-Secret sharing platform with a symmetric 256bit AES encryption in the browser

• one-time-secret
• golang
• encryption
• aes256

417.WebDecoy / FCaptcha

Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.

• anti-bot
• behavioral-analysis
• bot-detection
• captcha
• fingerprinting
• go
• +14 more

418.Permify / permify

An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉

• access-control
• authorization
• rbac
• rebac
• zanzibar
• acl
• +13 more

419.doorkeeper-gem / doorkeeper

Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.

• doorkeeper
• oauth
• oauth2-provider
• oauth2-server
• ruby-on-rails
• grape
• +4 more

420.lanjelot / patator

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

• pentest
• brute-force

421.epinna / weevely3

Weaponized web shell

422.panda-re / panda

Platform for Architecture-Neutral Dynamic Analysis

• reverse-engineering
• dynamic-analysis
• qemu
• pandare
• pypanda

423.erocarrera / pefile

pefile is a Python module to read and work with PE (Portable Executable) files

424.profanity-im / profanity

Ncurses based XMPP client

• xmpp-client
• c
• xmpp
• chat
• ncurses
• decentralization
• +6 more

425.PlumHound / PlumHound

Bloodhound Reporting for Blue and Purple Teams

• active
• directory
• blueteam
• purpleteam
• bloodhound
• bloodhoundad
• +14 more

426.panva / oauth4webapi

Low-Level OAuth 2 / OpenID Connect Client API for JavaScript Runtimes

• oauth2
• openid
• openid-connect
• oidc
• authentication
• authorization
• +10 more

427.auth0 / node-jsonwebtoken

JsonWebToken implementation for node.js http://self-issued.info/docs/draft-ietf-oauth-json-web-token.html

428.phpseclib / phpseclib

PHP Secure Communications Library

• php
• ssh
• sftp
• rsa
• aes
• x509
• +7 more

429.Greenwolf / social_mapper

A Social Media Enumeration & Correlation Tool by Jacob Wilkin(Greenwolf)

430.animir / node-rate-limiter-flexible

Atomic and non-atomic counters and rate limiting tools. Limit resource access at any scale.

• security
• limit
• ratelimter
• bruteforce
• throttle
• koa
• +11 more

431.cliffe / SecGen

Create randomly insecure VMs

• security
• security-vulnerability
• virtualization
• randomization
• provisioning
• labs
• +2 more

432.Moham3dRiahi / Th3inspector

Th3Inspector 🕵️ Best Tool For Information Gathering 🔎

• information-gathering
• reverse-phone-lookup
• mx-lookup
• whois-lookup
• geo-ip
• cloudflare
• +14 more

433.B-Con / crypto-algorithms

Basic implementations of standard cryptography algorithms, like AES and SHA-1.

434.authts / oidc-client-ts

OpenID Connect (OIDC) and OAuth2 protocol support for browser-based JavaScript applications

• oidc
• oidc-client
• typescript

435.Bert-JanP / Hunting-Queries-Detection-Rules

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

• azure
• defender-for-endpoint
• dfir
• kql
• sentinel
• threat-hunting
• +9 more

436.microsoft / avml

AVML - Acquire Volatile Memory for Linux

• rust
• memory-forensics
• linux-security

437.paulmillr / noble-curves

Audited & minimal JS implementation of elliptic curve cryptography.

• crypto
• cryptography
• ecdsa
• ed25519
• ed448
• eddsa
• +14 more

438.mit-plv / fiat-crypto

Cryptographic Primitive Code Generation by Fiat

439.momenbasel / keyFinder

Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.

• pentesting
• security
• chrome-extension
• api-keys
• api-security
• browser-extension
• +14 more

440.brix / crypto-js

JavaScript library of crypto standards.

441.tennc / webshell

This is a webshell open source project

• webshell
• webshell-sniper
• php
• jsp
• asp
• aspx
• +3 more

442.USArmyResearchLab / Dshell

Dshell is a network forensic analysis framework.

443.CalebFenton / simplify

Android virtual machine and deobfuscator

• deobfuscation
• java
• optimization
• android
• reverse-engineering
• malware-analysis
• +9 more

444.TheOfficialFloW / PPPwn

PPPwn - PlayStation 4 PPPoE RCE

445.h3xduck / TripleCross

A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.

• backdoor
• ebpf
• kernel
• rootkit
• security
• libbpf

446.libtom / libtomcrypt

LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines.

• libtomcrypt
• cryptography
• c
• encryption

447.ev-flow / quark-engine

The repository host gives no description.

• defcon
• android
• blackhat
• blackbox
• malware-analysis
• malware-detection

448.matanolabs / matano

Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS

• aws
• cloud
• security
• big-data
• serverless
• apache-iceberg
• +14 more

449.globaleaks / globaleaks-whistleblowing-software

GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.

• digital-human-rights
• anonymity
• security
• python
• twisted
• sqlalchemy
• +14 more

450.dastergon / postmortem-templates

A collection of postmortem templates

• site-reliability-engineering
• site-reliability
• devops
• postmortem
• incident-reports
• post-mortem
• +4 more

451.tklengyel / drakvuf

DRAKVUF Black-box Binary Analysis

• malware-analysis
• virtualization
• xen
• introspection

452.ydkhatri / mac_apt

macOS (& ios) Artifact Parsing Tool

• dfir
• forensics
• macos

453.noraj / haiti

:key: Hash type identifier (CLI & lib)

• security-tools
• hash
• identify
• digest
• hashing
• security
• +14 more

454.SpacehuhnTech / DeauthDetector

Detect deauthentication frames using an ESP8266

• arduino
• esp8266
• deauth
• attack
• deauthentication
• disassociation
• +6 more

455.jedisct1 / libhydrogen

A lightweight, secure, easy-to-use crypto library suitable for constrained environments.

• crypto
• embedded-systems
• cryptography
• embedded
• c
• arduino
• +3 more

456.dec0dOS / amazing-github-template

🚀 Useful README.md, LICENSE, CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, GitHub Issues, Pull Requests and Actions templates to jumpstart your projects.

• readme
• documentation
• docs
• docs-generator
• documentation-generator
• template
• +13 more

457.agentrhq / authsome

Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.

• ai-agents
• authentication
• cli
• headless
• local-first
• mcp
• +14 more

458.digitalocean / nginxconfig.io

⚙️ NGINX config generator on steroids 💉

• nginx
• nginx-configuration
• php-fpm
• ssl
• letsencrypt
• cdn
• +14 more

459.zedeus / nitterArchived

Alternative Twitter front-end

• nim
• twitter
• privacy
• self-hosted
• x

460.nginx-proxy / acme-companion

Automated ACME SSL certificate generation for nginx-proxy

• nginx-proxy
• letsencrypt
• docker
• ssl
• acme
• acme-v2
• +3 more

461.longld / peda

PEDA - Python Exploit Development Assistance for GDB

462.jesseduffield / horcrux

Split your file into encrypted fragments so that you don't need to remember a passcode

463.sobolevn / git-secret

:busts_in_silhouette: A bash-tool to store your private data inside a git repository.

• git-secret
• git
• git-addons
• gpg
• encryption
• secret-management

464.Neo23x0 / Loki

Loki - Simple IOC and YARA Scanner

• python
• yara
• signature
• scanner
• ioc
• otx
• +4 more

465.flipkart-incubator / Astra

Automated Security Testing For REST API's

• security
• restapiautomation
• python
• owasp
• penetration-testing-framework
• postman-collection
• +4 more

466.pac4j / pac4j

Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...

• java
• security
• authentication
• authorization
• cas
• oauth
• +14 more

467.sc0tfree / mentalist

Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.

• wordlist
• wordlist-generator
• password
• cracking
• cracking-hashes
• wordlist-technique

468.traggo / server

self-hosted tag-based time tracking

• golang
• selfhosted
• freesoftware
• privacy
• self-hosted
• timetracking
• +2 more

469.hashcat / hashcat-utils

Small utilities that are useful in advanced password cracking

470.mushorg / conpot

ICS/SCADA honeypot

• honeypot
• scada
• ics
• python
• security
• hacktoberfest

471.kmackay / micro-ecc

ECDH and ECDSA for 8-bit, 32-bit, and 64-bit processors.

472.D4Vinci / elpscrk

An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)

• elliot
• cupp
• passwords
• hacking-tool
• bruteforce
• brute-force
• +6 more

473.RustCrypto / signatures

Cryptographic signature algorithms: DSA, ECDSA, Ed25519

• ecdsa
• ed25519
• signatures
• dsa
• rust

474.go-jose / go-jose

An implementation of JOSE standards (JWE, JWS, JWT) in Go

475.paulmillr / noble-ciphers

Audited & minimal JS implementation of Salsa20, ChaCha and AES

• aes-siv
• chacha20
• chacha20-poly1305
• chacha20poly1305
• cipher
• cryptography
• +11 more

476.node9-ai / node9-proxy

Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.

• ai-safety
• ai-security
• claude-code
• llm-agent
• agent-security
• dlp
• +14 more

477.react-cosmos / react-cosmos

Sandbox for developing and testing UI components in isolation

• react
• devtools
• ui
• components
• testing
• sandbox

478.golang / oauth2

Go OAuth2

• go
• golang
• oauth2
• oauth2-client

479.microcosm-cc / bluemonday

bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS

• sanitization
• html
• security
• xss
• go
• owasp
• +2 more

480.linkedin / qark

Tool to look for several security related Android application vulnerabilities

481.awnumar / memguard

Software sandbox for storage of sensitive information in memory.

• security
• golang
• go
• cryptography
• memory
• crypto

482.sans-blue-team / DeepBlueCLI

The repository host gives no description.

483.david942j / one_gadget

The best tool for finding one gadget RCE in libc.so.6

• ctf
• pwnable
• pwn
• glibc
• one-gadget-rce
• shell
• +3 more

484.ory / polis

Streamline your web application's authentication with Polis, an SSO service supporting SAML and OpenID Connect protocols. Beyond enterprise-grade Single Sign-On, it also supports Directory Sync via the SCIM 2.0 protocol for automatic user and group provisioning/de-provisioning.

• enterprise-software
• saml
• saml2
• saml-service-provider
• saml-authentication
• sso
• +14 more

485.phra / PEzor

Open-Source Shellcode & PE Packer

• shellcode
• antivirus-evasion
• redteam
• hacktoberfest

486.cossacklabs / themis

Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms.

• cryptography-library
• cryptography
• security
• golang
• ios
• swift
• +14 more

487.mufeedvh / pdfrip

A multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks.

• rust
• security
• security-tools
• pdf
• password
• password-cracker
• +1 more

488.emalderson / ThePhish

ThePhish: an automated phishing email analysis tool

• email
• detection
• malware
• phishing
• cybersecurity
• misp
• +14 more

489.ExeinfoASL / ASL

Free Windows Detector Software

• exeinfo
• detector

490.JusticeRage / Manalyze

A static analyzer for PE executables.

• malware
• static
• analysis
• pe

491.DFIRKuiper / Kuiper

Digital Forensics Investigation Platform

• dfir
• security
• incident-response
• artifacts
• parser
• digital-forensics

492.FutureComputing4AI / EMBER2024

The repository host gives no description.

493.bad-antics / nullkia

NullKia Mobile Security Framework - Tools in Nim, Crystal, V, D, Red, Odin, Haxe, Zig, Kotlin, Lua, PHP, Python | bad-antics | github.com/bad-antics

• android-hacking
• baseband
• bootloader-unlock
• checkm8
• firmware-hacking
• ios-jailbreak
• +14 more

494.stefanoviana / deepalpha

AI crypto trading bot with deep neural network (84.9% accuracy, 25 coins). BiLSTM + Attention trained on GPU. Bybit, Binance, OKX, Gate.io. Free cloud or self-hosted.

• algorithmic-trading
• lightgbm
• machine-learning
• trading-bot
• bybit
• crypto
• +14 more

495.bad-antics / blackflag-ecu

Professional ECU Diagnostics & Tuning Suite

• automotive
• csharp
• diagnostics
• dotnet
• ecu
• j2534
• +11 more

496.docker / docker-bench-security

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

497.99designs / aws-vault

A vault for securely storing and accessing AWS credentials in development environments

• aws
• iam
• temporary-credentials
• keychain
• credentials
• cli
• +2 more

498.x0rz / EQGRP

Decrypted content of eqgrp-auction-file.tar.xz

• exploits
• shadowbrokers
• equationgroup
• hacking
• nsa
• tao

499.briansmith / ring

An experiment.

• rust
• cryptography
• security

500.tellerops / teller

Cloud native secrets management for developers - never leave your command line for secrets.

• secrets
• secret-management
• vault
• hashicorp
• aws
• rust
• +1 more