Ranked by Attention Score: stars gained over the last 90 complete days
501–600 of 1,301 by Attention Score · Aug 7, 2026 – Nov 4, 2026 (UTC)
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
One rule to crack all passwords. or atleast we hope so.
Secure Vault for Customer PII/PHI/PCI/KYC Records
cwe_checker finds vulnerable patterns in binary executables
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
🔑 Local-first Secrets Manager
🚀 Useful README.md, LICENSE, CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, GitHub Issues, Pull Requests and Actions templates to jumpstart your projects.
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
Dshell is a network forensic analysis framework.
Safely pass trusted data to untrusted environments and back.
Cecil is a library to inspect, modify and create .NET programs and libraries.
A helm plugin that help manage secrets with Git workflow and store them anywhere
A lightweight, secure, easy-to-use crypto library suitable for constrained environments.
Automatic and platform-independent unpacker for Windows binaries based on emulation
Real-time secret-leak guardrails for AI coding agents (Claude Code, Codex), Git hooks, and CI.
The repository host gives no description.
The repository host gives no description.
Binary Analysis Platform
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte
Procyon is a suite of Java metaprogramming tools, including a rich reflection API, a LINQ-inspired expression tree API for runtime code generation, and a Java decompiler.
Galah: An LLM-powered web honeypot.
An implementation of JOSE standards (JWE, JWS, JWT) in Go
Security training for the apps you actually ship. Open your browser and start hacking.
Professional ECU Diagnostics & Tuning Suite
Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
Crack password hashes without the fuss :cat2:
:key: Hash type identifier (CLI & lib)
Customizable Linux Persistence Tool for Security Research and Detection Engineering.
A concise, directive, specific, flexible, and free incident response plan template
OpenXPKI Code
A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule
A secure password manager for iOS and Android platforms
PowerSploit - A PowerShell Post-Exploitation Framework
Automated ACME SSL certificate generation for nginx-proxy
Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.
Decrypted content of eqgrp-auction-file.tar.xz
XRay is a tool for recon, mapping and OSINT gathering from public networks.
Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection
🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥
Collection of android malware samples
A Game of Hackers (CTF Scoreboard & Game Manager)
Dynamic unpacker based on PE-sieve
OpenID Connect Library for Rust
Tink is a multi-language, cross-platform, open source library that provides cryptographic APIs that are secure, easy to use correctly, and hard(er) to misuse.
P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W.
Cloud native secrets management for developers - never leave your command line for secrets.
Software sandbox for storage of sensitive information in memory.
Rip web accessible (distributed) version control systems: SVN/GIT/HG...
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
A collection of postmortem templates
ECDH and ECDSA for 8-bit, 32-bit, and 64-bit processors.
An authorization library that supports access control models like ACL, RBAC, ABAC in .NET (C#)
Digital Forensics Investigation Platform
Security Auditor Utility for GraphQL APIs
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.
Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️
Laravel wrapper around OAuth 1 & OAuth 2 libraries.
OAuth2 goodies for the Djangonauts!
Entity Framework Core Power Tools - reverse engineering, migrations and model visualization in Visual Studio & CLI
Library and command line tool to detect SHA-1 collision in a file
PE Tools - Portable executable (PE) manipulation toolkit
A header only library for creating and validating json web tokens in c++
Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.
Cryptographic signature algorithms: DSA, ECDSA, Ed25519
Documenting the unofficial and internal Steam Web API
Paaster is a secure and user-friendly pastebin application that prioritizes privacy and simplicity. With end-to-end encryption and paste history, Paaster ensures that your pasted code remains confidential and accessible.
Automation of some MAPT activities and interaction with the mobile Android device.
Zama Bounty Program: Contribute to the FHE space and Zama's open source libraries and get rewarded 💰
An authorization library that supports access control models like ACL, RBAC, ABAC in Node.js and Browser
PHP Captcha library
A pure Python HTML5 parser that just works. No C extensions to compile. No system dependencies to install. No complex API to learn.
RockYou2021.txt is a MASSIVE WORDLIST compiled of various other wordlists. RockYou2021.txt DOES NOT CONTAIN USER:PASS logins!
Collection of pure Rust elliptic curve implementations: NIST P-224, P-256, P-384, P-521, secp256k1, SM2
ebpfkit is a rootkit powered by eBPF
Cryptographic Primitive Code Generation by Fiat
ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.
A USB proxy based on raw-gadget and libusb
Crypto for Modern Object Pascal
The MPT (Mobile Pentest Toolkit) is a must-have solution for your android penetration testing workflow.
AI crypto trading bot with deep neural network (84.9% accuracy, 25 coins). BiLSTM + Attention trained on GPU. Bybit, Binance, OKX, Gate.io. Free cloud or self-hosted.
OmniAuth is a flexible authentication system utilizing Rack middleware.
A generic, spec-compliant, thorough implementation of the OAuth request-signing logic
Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms.
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
☁️ Python package for interacting with Steam