Trending repositories

501.ac-pm / Inspeckage

Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)

• android-application
• security-analysis
• dynamic-analysis
• xposed

502.sbousseaden / EVTX-ATTACK-SAMPLES

Windows Events Attack Samples

• threat-hunting
• evtx
• windows-security
• mitre-attack
• detection-engineering
• dataset
• +2 more

503.evilsocket / xrayArchived

XRay is a tool for recon, mapping and OSINT gathering from public networks.

• osint
• security
• network
• shodan
• intelligence
• mapping

504.eliben / pyelftools

Parsing ELF and DWARF in Python

• debugging
• dwarf
• elf
• elf-binaries
• elf-parser
• python

505.eset / malware-ioc

Indicators of Compromises (IOC) of our various investigations

• ioc
• malware
• yara
• misp

506.dirkjanm / mitm6

pwning IPv4 via IPv6

507.Neo23x0 / yarGen

yarGen is a generator for YARA rules

• python
• yara
• malware
• malware-research
• malware-analysis
• malwareanalysis

508.zlib-ng / minizip-ng

Fork of the popular zip manipulation library found in the zlib distribution.

• minizip
• zip
• zlib
• lzma
• bzip2
• winzip-aes
• +9 more

509.securitybunker / databunker

Secure Vault for Customer PII/PHI/PCI/KYC Records

• gdpr
• pii
• piidata
• security
• privacy
• privacy-by-design
• +14 more

510.ForensicArtifacts / artifacts

Digital Forensics artifact repository

511.mstrobel / procyon

Procyon is a suite of Java metaprogramming tools, including a rich reflection API, a LINQ-inspired expression tree API for runtime code generation, and a Java decompiler.

512.tomac / yersinia

A framework for layer 2 attacks

513.struppigel / PortEx

Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness

514.whad-team / whad-client

Wireless Hacking Devices Protocol client

515.OneKeePass / mobile

A secure password manager for iOS and Android platforms

516.JeongJaeSoon / agent-guard

Real-time secret-leak guardrails for AI coding agents (Claude Code, Codex), Git hooks, and CI.

• ai-agents
• claude-code
• claude-code-plugin
• codex
• devsecops
• github-actions
• +3 more

517.heartcombo / devise

Flexible authentication solution for Rails with Warden.

• rails
• ruby
• authentication
• devise

518.lucia-auth / lucia

Authentication, simple and clean

• oauth
• typescript
• auth

519.de4dot / de4dotArchived

.NET deobfuscator and unpacker.

520.openpgpjs / openpgpjs

OpenPGP implementation for JavaScript

521.aarondl / authboss

The boss of http auth.

522.schemaspy / schemaspy

Database documentation built easy

• schemaspy
• java
• documentation
• database
• database-schemas
• database-diagrams
• +6 more

523.deepfence / SecretScanner

:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:

• scanning-tool
• secret-keys
• secrets-management
• infosectools
• vulnerability-scanners
• k8s
• +10 more

524.django-oauth / django-oauth-toolkit

OAuth2 goodies for the Djangonauts!

• python
• django
• oauth2

525.wemake-services / wemake-django-template

Bleeding edge django template focused on code quality and security.

• django
• docker
• caddy
• gitlab-ci
• pytest
• cookiecutter-template
• +4 more

526.yeti-platform / yeti

Your Everyday Threat Intelligence

• infosec
• threatintel
• threat-sharing
• threat-hunting
• enrichment
• intelligence
• +1 more

527.jkroepke / helm-secrets

A helm plugin that help manage secrets with Git workflow and store them anywhere

• helm
• helm-plugin
• helm-plugins
• kubernetes
• k8s
• helm-charts
• +14 more

528.jeremyevans / rodauth

Ruby's Most Advanced Authentication Framework

529.airbus-seclab / bincat

Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection

• ida-plugin
• taint-analysis
• reverse-engineering
• disassembly

530.x0rz / phishing_catcher

Phishing catcher using Certstream

• phishing
• threat-intelligence
• certificate-transparency
• osint
• threatintel

531.doyensec / inql

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

• graphql
• security-scanner
• graphql-security
• api-documentation-tool
• security-tools
• security-audit
• +5 more

532.kost / dvcs-ripper

Rip web accessible (distributed) version control systems: SVN/GIT/HG...

533.NotSoSecure / password_cracking_rules

One rule to crack all passwords. or atleast we hope so.

534.zed-0xff / zsteg

detect stegano-hidden data in PNG & BMP

535.EgeBalci / amber

Reflective PE packer.

• packer
• pe
• crypter
• assembly
• stub
• shellcode
• +3 more

536.ahmedkhlief / APT-Hunter

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

• threat-hunting
• purpleteam
• python3
• windows-eventlog
• apt-attacks
• incident-response
• +2 more

537.brannondorsey / naive-hashcat

Crack password hashes without the fuss :cat2:

• password-cracking
• hashcat
• hash-cracking
• hacking

538.nccgroup / singularity

A DNS rebinding attack framework.

• dns-rebinding
• dns
• vulnerability
• attack
• iot

539.khast3x / Redcloud

Automated Red Team Infrastructure deployement using Docker

• offensive
• pentest
• bugbounty
• hacking
• kali
• docker
• +2 more

540.EnableSecurity / sipvicious

SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.

• sip
• voip
• password-cracker
• svwar
• svcrack
• svmap
• +6 more

541.clarkeash / doorman

Limit access to your Laravel applications by using invite codes

• php
• laravel
• laravel-package
• doorman
• invite

542.ohmybahgosh / RockYou2021.txt

RockYou2021.txt is a MASSIVE WORDLIST compiled of various other wordlists. RockYou2021.txt DOES NOT CONTAIN USER:PASS logins!

• wordlist
• rockyou
• rockyou2021
• wordlists
• password-strength
• password-safety
• +5 more

543.RustCrypto / AEADs

Authenticated Encryption with Associated Data Algorithms: high-level encryption ciphers

544.OpenIdentityPlatform / OpenAM

OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications

• openam
• sso
• oauth
• saml
• aaa
• authentication
• +14 more

545.Password4j / password4j

Java cryptographic library that supports Argon2, bcrypt, scrypt and PBKDF2 aimed to protect passwords in databases. Easy to use by design, highly customizable, secure and portable. All the implementations follow the standards and have been reviewed to perform better in the JVM.

• pbkdf2
• bcrypt
• scrypt
• argon2
• password
• hashing
• +10 more

546.Xor-el / HashLib4Pascal

Hashing for Modern Object Pascal

• delphi
• fpc
• checksum
• stream
• encoding
• byte-array
• +4 more

547.iamsopotatoe-coder / TinyLoad

Open source Windows x64 PE packer and crypter. Compresses and encrypts executables with a custom virtual machine into a self extracting stub.

• compression
• packer
• pe-packer
• pe-compress
• pe-protection
• pepacker
• +13 more

548.RaffaDNDM / HacknDroid

Automation of some MAPT activities and interaction with the mobile Android device.

• android-analysis
• frida
• mobile-hacking
• mobile-penetration-testing
• mobile-pentest
• mobile-pentest-toolkit
• +3 more

549.lcobucci / jwt

A simple library to work with JSON Web Token and JSON Web Signature

• php
• jwt
• tokens
• hacktoberfest

550.JesusFreke / smaliArchived

smali/baksmali

551.build-trust / ockam

Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.

• messaging
• authentication
• key-management
• identity
• trust
• kafka
• +12 more

552.Cyb3rWard0g / HELK

The Hunting ELK

• hunting
• elasticsearch
• kibana
• logstash
• hunting-platforms
• elk
• +7 more

553.vanhoefm / krackattacks-scripts

The repository host gives no description.

554.github / secure_headers

Manages application of security headers with many safe defaults

• secure-headers
• csp
• hsts
• referrer-policy
• rack
• middleware
• +4 more

555.pallets / itsdangerous

Safely pass trusted data to untrusted environments and back.

• python
• security
• hmac
• serialization
• itsdangerous
• pallets

556.jbevain / cecil

Cecil is a library to inspect, modify and create .NET programs and libraries.

• dotnet
• library
• bytecode
• cil
• c-sharp
• mono

557.mewebstudio / captcha

Captcha for Laravel 5+

• laravel
• php
• captcha
• security

558.ErikEJ / EFCorePowerTools

Entity Framework Core Power Tools - reverse engineering, migrations and model visualization in Visual Studio & CLI

• entity-framework-core
• visual-studio
• entity-framework
• model-visualization
• sql-server
• hacktoberfest
• +3 more

559.BinaryAnalysisPlatform / bap

Binary Analysis Platform

• binary-analysis
• reverse-engineering
• program-analysis
• static-analysis
• dynamic-analysis
• program-verification
• +13 more

560.Storyyeller / Krakatau

Java decompiler, assembler, and disassembler

561.antonioribeiro / google2fa

A One Time Password Authentication package, compatible with Google Authenticator.

• php
• 2fa
• two-factor-authentication
• google2fa
• agnostic
• hacktoberfest
• +1 more

562.Gregwar / Captcha

PHP Captcha library

• captcha
• php
• security
• bots
• anti-bot
• anti-spam

563.cmu-sei / pharos

Automated static analysis tools for binary programs

• binary-analysis
• reverse-engineering

564.zeustrojancode / ZeusArchived

NOT MY CODE! Zeus trojan horse - leaked in 2011, I am not the author. This repository is for study purposes only, do not message me about your lame hacking attempts.

• c
• c-plus-plus
• malware
• russian
• virus
• leaks

565.pyca / bcrypt

Modern(-ish) password hashing for your software and your servers

• python

566.cr-marcstevens / sha1collisiondetection

Library and command line tool to detect SHA-1 collision in a file

567.fkie-cad / cwe_checker

cwe_checker finds vulnerable patterns in binary executables

• cwe
• binary-analysis
• static-analyzer
• vulnerability-scanner
• reverse-engineering
• program-analysis
• +4 more

568.petoolse / petools

PE Tools - Portable executable (PE) manipulation toolkit

• pefile
• hex-editor
• disassembler
• entropy
• analysis
• resources
• +2 more

569.Thalhammer / jwt-cpp

A header only library for creating and validating json web tokens in c++

• cpp
• header-only
• jwt
• json-web-token

570.mildsunrise / protobuf-inspector

🕵️ Tool to reverse-engineer Protocol Buffers with unknown definition

• reverse-engineering
• protocol-buffers
• serialization

571.mgeeky / ProtectMyTooling

Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.

572.rfunix / Pompem

Find exploit tool

• exploit-database
• python
• pentest-tool
• exploits
• security-tools

573.RustCrypto / password-hashes

Password hashing functions / KDFs

574.Aegrah / PANIX

Customizable Linux Persistence Tool for Security Research and Detection Engineering.

• bash
• linux
• persistence
• backdoor
• security

575.honeynet / apkinspector

APKinspector is a powerful GUI tool for analysts to analyze the Android applications.

576.counteractive / incident-response-plan-template

A concise, directive, specific, flexible, and free incident response plan template

• incident-response
• incident
• incident-management
• infosec
• information-security
• cybersecurity

577.keydet89 / RegRipper3.0

RegRipper3.0

578.dolevf / graphql-cop

Security Auditor Utility for GraphQL APIs

• security
• penetration-testing
• auditing
• graphql
• hacking
• red-team
• +2 more

579.0x4D31 / galah

Galah: An LLM-powered web honeypot.

• golang
• honeypot
• llm
• openai
• openai-api
• security
• +1 more

580.Revadike / InternalSteamWebAPI

Documenting the unofficial and internal Steam Web API

• documentation
• docs
• wiki
• api-documentation
• api
• steam
• +9 more

581.ramosbugs / openidconnect-rs

OpenID Connect Library for Rust

• oauth2-client
• oauth2-authentication
• openid-connect
• openid-client
• openidconnect-client
• security
• +4 more

582.jasonish / docker-suricata

A Suricata Docker image.

• suricata
• ids
• nsm
• docker
• container
• podman

583.MagnetForensics / dumpit-linux

Memory acquisition for Linux that makes sense.

584.AlexanderBagel / ProcessMemoryMap

Deep memory analysis for Windows processes — the tool that saves you hours of debugging

• analyzer
• binary-analysis
• delphi
• dissassembler
• memory-analysis
• pe-format
• +2 more

585.eunomia-bpf / ActPlane

eBPF Information Flow Enforcement for AI Agent safety, security and effectiveness

• ebpf
• harness
• ifc
• policy-engine

586.tymondesigns / jwt-auth

🔐 JSON Web Token Authentication for Laravel & Lumen

• jwt
• laravel
• authentication
• php

587.krzyzanowskim / CryptoSwift

CryptoSwift is a growing collection of standard and secure cryptographic algorithms implemented in Swift

• swift
• aes
• cryptography
• commoncrypto
• cryptoswift
• md5
• +7 more

588.google / tsunami-security-scanner

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

589.omniauth / omniauth

OmniAuth is a flexible authentication system utilizing Rack middleware.

• omniauth
• authentication
• hacktoberfest
• ruby

590.kelektiv / node.bcrypt.js

bcrypt for NodeJs

• bcrypt

591.travist / jsencrypt

A tiny (18.5 kB gzip), zero-dependency, Javascript library to perform OpenSSL RSA Encryption, Decryption, and Key Generation.

592.deepfence / ThreatMapper

Open Source Cloud Native Application Protection Platform (CNAPP)

• cloud-native
• vulnerability-management
• threat-analysis
• devsecops
• secops
• registry-scanning
• +13 more

593.RoganDawes / P4wnP1

P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W.

594.a0rtega / pafishArchived

Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do

• malware
• reverse-engineering
• virtual-machine
• malware-families
• analysis-environments
• sandbox
• +3 more

595.baidu / openrasp

🔥Open source RASP solution

• waf
• devsecops
• security
• iast
• rasp

596.apache / casbin-node-casbin

An authorization library that supports access control models like ACL, RBAC, ABAC in Node.js and Browser

• casbin
• nodejs
• node
• js
• javascript
• access-control
• +8 more

597.GoSecure / pyrdp

RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact

• hacktoberfest
• rdp
• pentest
• honeypot
• mitm
• pyrdp
• +1 more

598.davehull / Kansa

A Powershell incident response framework

599.fofapro / fapro

Fake Protocol Server

• rdp
• ssh
• ftp
• protocols
• samba
• simulation
• +12 more

600.cossacklabs / acra

Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.

• encryption-server
• encryption
• crypto
• cryptography
• security
• intrusion-detection
• +7 more