Trending repositories

601.USArmyResearchLab / Dshell

Dshell is a network forensic analysis framework.

602.lijiejie / subDomainsBrute

A fast sub domain brute tool for pentesters

603.segmentio / chamber

CLI for managing secrets

604.ThreatRecall / zettelforge

Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents

• claude-code
• cti
• llm
• rag
• threat-hunting
• threat-intelligence
• +14 more

605.bad-antics / blackflag-ecu

Professional ECU Diagnostics & Tuning Suite

• automotive
• csharp
• diagnostics
• dotnet
• ecu
• j2534
• +11 more

606.Cyb3rWard0g / HELK

The Hunting ELK

• hunting
• elasticsearch
• kibana
• logstash
• hunting-platforms
• elk
• +7 more

607.Security-Onion-Solutions / security-onionArchived

Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management

• intrusion-detection
• network-security-monitoring
• log-management
• ids
• nsm
• hunting
• +1 more

608.bee-san / Name-That-Hash

🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥

• hash
• infosec
• cyber
• security
• hacking
• tool
• +7 more

609.xFFFFF / Gekko-Strategies

Strategies to Gekko trading bot with backtests results and some useful tools.

• gekko
• strategies
• gekko-strategies
• gekko-backtest
• backtest-database
• cryptocurrency
• +14 more

610.OpenIdentityPlatform / OpenAM

OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications

• openam
• sso
• oauth
• saml
• aaa
• authentication
• +14 more

611.keydet89 / RegRipper3.0

RegRipper3.0

612.laravel / socialite

Laravel wrapper around OAuth 1 & OAuth 2 libraries.

• laravel
• oauth

613.jboss-javassist / javassist

Java bytecode engineering toolkit

• java-bytecode
• java

614.thephpleague / oauth2-client

Easy integration with OAuth 2.0 service providers.

• php
• oauth2
• oauth
• authorization
• sso
• authentication

615.qeeqbox / honeypots

30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)

• pypi
• monitoring-tool
• network-analysis
• malware-analysis
• credentials
• honeypot
• +5 more

616.muellerberndt / apkx

One-Step APK Decompilation With Multiple Backends

617.mewebstudio / captcha

Captcha for Laravel 5+

• laravel
• php
• captcha
• security

618.antonioribeiro / google2fa

A One Time Password Authentication package, compatible with Google Authenticator.

• php
• 2fa
• two-factor-authentication
• google2fa
• agnostic
• hacktoberfest
• +1 more

619.jesparza / peepdf

Powerful Python tool to analyze PDF documents

620.ohmybahgosh / RockYou2021.txt

RockYou2021.txt is a MASSIVE WORDLIST compiled of various other wordlists. RockYou2021.txt DOES NOT CONTAIN USER:PASS logins!

• wordlist
• rockyou
• rockyou2021
• wordlists
• password-strength
• password-safety
• +5 more

621.DinoTools / dionaea

Home of the dionaea honeypot

• honeypot
• dionaea
• security

622.Xor-el / CryptoLib4Pascal

Crypto for Modern Object Pascal

• ecdsa
• cryptography
• delphi
• fpc
• eddsa
• rsa
• +1 more

623.coorasse / cancancan

The authorization Gem for Ruby on Rails.

• authorization
• cancancan
• rails

624.deathmarine / Luyten

An Open Source Java Decompiler Gui for Procyon

625.paragonie / paseto

Platform-Agnostic Security Tokens

• php
• paseto
• paseto-tokens

626.x0rz / EQGRP

Decrypted content of eqgrp-auction-file.tar.xz

• exploits
• shadowbrokers
• equationgroup
• hacking
• nsa
• tao

627.evilcos / xssor2

XSS'OR - Hack with JavaScript.

• probe
• pentest-tool
• xss
• csrf
• encoding
• hacking-tool
• +2 more

628.Gregwar / Captcha

PHP Captcha library

• captcha
• php
• security
• bots
• anti-bot
• anti-spam

629.GoSecure / pyrdp

RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact

• hacktoberfest
• rdp
• pentest
• honeypot
• mitm
• pyrdp
• +1 more

630.petoolse / petools

PE Tools - Portable executable (PE) manipulation toolkit

• pefile
• hex-editor
• disassembler
• entropy
• analysis
• resources
• +2 more

631.e-ago / bitcracker

BitCracker is the first open source password cracking tool for memory units encrypted with BitLocker

• bitlocker
• password-cracker
• cuda
• cryptography
• gpgpu
• windows
• +10 more

632.Gui774ume / ebpfkit

ebpfkit is a rootkit powered by eBPF

• ebpf
• security
• rootkit
• linux
• linux-kernel
• linux-kernel-hacking
• +2 more

633.MagnetForensics / dumpit-linux

Memory acquisition for Linux that makes sense.

634.lirantal / is-website-vulnerable

finds publicly known security vulnerabilities in a website's frontend JavaScript libraries

• security-vulnerabilities
• security
• vulnerabilities
• lighthouse
• scan
• nodejs
• +1 more

635.kost / dvcs-ripper

Rip web accessible (distributed) version control systems: SVN/GIT/HG...

636.zeustrojancode / ZeusArchived

NOT MY CODE! Zeus trojan horse - leaked in 2011, I am not the author. This repository is for study purposes only, do not message me about your lame hacking attempts.

• c
• c-plus-plus
• malware
• russian
• virus
• leaks

637.cossacklabs / acra

Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.

• encryption-server
• encryption
• crypto
• cryptography
• security
• intrusion-detection
• +7 more

638.gorilla / csrf

Package gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services 🔒

• csrf-protection
• gorilla
• middleware
• golang
• security
• csrf
• +4 more

639.pedramamini / ThreatIngestor

Extract and aggregate threat intelligence.

• ioc
• indicators-of-compromise
• threatintel
• threat-intelligence
• osint
• dfir
• +12 more

640.mesquidar / adbsploitArchived

A python based tool for exploiting and managing Android devices via ADB

• adb
• android
• hacking
• exploit
• exploiting
• apk
• +2 more

641.DosX-dev / Astral-PE

Astral-PE is a low-level mutator (Headers/EP obfuscator) for native Windows PE files (x32/x64)

• cybersecurity
• hacktoberfest
• low-level
• mutator
• obfuscation
• obfuscator
• +12 more

642.rubysec / bundler-audit

Patch-level verification for Bundler

• bundler-audit
• ruby-advisory-db
• ruby
• dependency-checker
• patch-management
• security
• +2 more

643.vaguileradiaz / tinfoleak

The most complete open-source tool for Twitter intelligence analysis

• osint
• socmint
• socialmedia
• twitter
• intelligence

644.ankane / lockbox

Modern encryption for Ruby and Rails

• encryption
• activerecord
• activestorage
• carrierwave
• mongoid
• libsodium

645.BcryptNet / bcrypt.net

BCrypt.Net - Bringing updates to the original bcrypt package

• blowfish
• bcrypt
• c-sharp
• algorithm
• hash
• netcore
• +6 more

646.fwdai / rowel

🔑 Local-first Secrets Manager

• password
• password-manager
• desktop
• credentials
• security
• cipher
• +11 more

647.panther-labs / panther-analysis

Built-in Panther detection rules and policies

• security
• python
• cybersecurity
• siem

648.shrec / UltrafastSecp256k1

Ultra high-performance secp256k1 ECC engine | Python, Node.js, Rust, Go, C#, Swift, Java bindings | CUDA, Metal, OpenCL GPU | ECDSA, Schnorr, FROST, MuSig2, BIP-352 | 15+ platforms

• cryptography
• cuda
• riscv
• secp256k1
• arm64
• opencl
• +14 more

649.coregx / gxpdf

GxPDF - Enterprise-grade PDF library for Go. Table extraction, text parsing, encryption, document creation.

• go
• golang
• open-source
• pdf
• pdf-encryption
• pdf-generation
• +4 more

650.lcobucci / jwt

A simple library to work with JSON Web Token and JSON Web Signature

• php
• jwt
• tokens
• hacktoberfest

651.geohot / qira

QEMU Interactive Runtime Analyser

652.github / secure_headers

Manages application of security headers with many safe defaults

• secure-headers
• csp
• hsts
• referrer-policy
• rack
• middleware
• +4 more

653.oauthlib / oauthlib

A generic, spec-compliant, thorough implementation of the OAuth request-signing logic

• python
• python3
• python-3
• authentication
• library
• oauth
• +10 more

654.cossacklabs / themis

Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms.

• cryptography-library
• cryptography
• security
• golang
• ios
• swift
• +14 more

655.0xInfection / TIDoS-Framework

The Offensive Manual Web Application Penetration Testing Framework.

• web-penetration-testing
• reconnaissance
• vulnerability-analysis
• scanning-enumeration
• web-fuzzer
• osint
• +7 more

656.justinas / nosurf

CSRF protection middleware for Go.

• csrf
• go
• security
• middleware

657.nil0x42 / duplicut

Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)

• hashcat
• password
• hashes
• cracking
• c
• wordlist
• +9 more

658.iphelix / pack

PACK (Password Analysis and Cracking Kit)

659.oasis-open / cti-python-stix2

OASIS TC Open Repository: Python APIs for STIX 2

• python
• stix
• stix2
• cyber-threat-intelligence
• json
• cti
• +1 more

660.chrislusf / seaweedfs

SeaweedFS is a fast distributed storage system for blobs, objects, files, and data lake, for billions of files! Blob store has O(1) disk seek, cloud tiering. Filer supports Cloud Drive, xDC replication, Kubernetes, POSIX FUSE mount, S3 API, S3 Gateway, Hadoop, WebDAV, encryption, Erasure Coding. Enterprise version is at seaweedfs.com.

661.iagox86 / hash_extender

The repository host gives no description.

662.elastic / emberArchived

Elastic Malware Benchmark for Empowering Researchers

663.Xor-el / HashLib4Pascal

Hashing for Modern Object Pascal

• delphi
• fpc
• checksum
• stream
• encoding
• byte-array
• +4 more

664.n0kovo / hashcat-rules-collection

Hascat Rules Collection – Probably the largest collection of hashcat rule-files anywhere.

• hashcat
• hashcat-rules
• hashcat-rule
• password-cracking
• password-cracking-tool
• wordlist-generator
• +2 more

665.vahiiiid / go-rest-api-boilerplate

🚀 Production-ready AI-friendly Go REST API boilerplate with Clean Architecture, JWT auth, RBAC, PostgreSQL migrations, and highly tested. AI-optimized with built-in guidelines for most used IDEs. Docker hot-reload, Swagger docs, one-command setup. Build production APIs in minutes, not weeks.

• api
• api-documentation
• authentication
• backend
• boilerplate
• clean-architecture
• +14 more

666.unrolled / secure

HTTP middleware for Go that facilitates some quick security wins.

• golang
• go
• middleware
• security

667.honeytrap / honeytrap

Advanced Honeypot framework.

• honeypot
• framework
• security

668.nascentxyz / simple-security-toolkit

A collection of practical security-focused guides and checklists for smart contract development

• crypto
• security
• security-tools
• smart-contracts
• solidity

669.sh4hin / Androl4b

A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis

• mobile-security
• android
• malware-analyzer
• penetration-testing
• reverse-engineering
• application-security

670.microsoftgraph / microsoft-graph-toolkitArchived

Authentication Providers and UI components for Microsoft Graph 🦒

• web-components
• microsoft-graph-toolkit
• microsoft-graph
• mgt
• msal
• hacktoberfest
• +10 more

671.mentebinaria / readpe

The PE file analysis toolkit

• binary-analysis
• reverse-engineering
• pe-file
• portable-executable
• malware-analysis
• malware-research

672.seemoo-lab / internalblue

Bluetooth experimentation framework for Broadcom and Cypress chips.

• bluetooth
• broadcom
• firmware
• ios
• bluez
• linux
• +5 more

673.Cybereason-Public / owLSM

Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities

• ebpf
• security
• linux-kernel
• linux-security-module
• sigma-rule

674.hectorm / cardea

Cardea is an SSH bastion server with access control, session recording, and optional TPM-backed key protection.

• audit
• bastion
• firewall
• networking
• security
• ssh
• +1 more

675.loov / lensm

Go assembly and source viewer

676.sensepost / ruler

A tool to abuse Exchange services

• mapi
• exchange
• shells
• pentesting

677.ruby-oauth / oauth2

🔐 oauth2 - A Ruby wrapper for the OAuth 2.0, & 2.1 Authorization Frameworks, including OpenID Connect (OIDC)

• authentication
• authorization
• oauth2
• oauth2-client
• security
• oidc
• +1 more

678.RobThree / TwoFactorAuth

PHP library for Two Factor Authentication (TFA / 2FA)

• qrcode
• php
• two-factor
• twofactorauth
• totp
• multi-factor
• +1 more

679.paulmillr / noble-secp256k1

Fastest 5KB JS implementation of secp256k1 signatures and ECDH

• secp256k1
• ecdsa
• ecc
• cryptography
• rfc6979
• noble
• +6 more

680.HynekPetrak / javascript-malware-collection

Collection of almost 40.000 javascript malware samples

• malware-samples
• malware-research
• javascript
• malware-jail

681.B3nac / InjuredAndroidArchived

A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.

• android
• android-studio
• security-testing
• android-security
• webview
• bug-bounty
• +9 more

682.allaboutapps / go-starter

An opinionated production-ready SQL-/Swagger-first RESTful JSON API written in Go, highly integrated with VSCode DevContainers by allaboutapps.

• golang-development
• vscode-devcontainers
• golang
• go
• server
• oauth2
• +9 more

683.mojocn / base64Captcha

captcha of base64 image string

• captcha
• image-captcha
• audio-captchas
• captcha-generator
• anti-spam
• golang
• +4 more

684.dchest / captcha

Go package captcha implements generation and verification of image and audio CAPTCHAs.

• captcha
• image-captcha
• go
• audio-captchas

685.davehull / Kansa

A Powershell incident response framework

686.martinus / robin-hood-hashingArchived

Fast & memory efficient hashtable based on robin hood hashing for C++11/14/17/20

• c-plus-plus
• hash-tables
• unordered-maps
• hash
• container
• header-only
• +6 more

687.andrewlock / NetEscapades.AspNetCore.SecurityHeaders

Small package to allow adding security headers to ASP.NET Core websites

• hacktoberfest

688.paulmillr / noble-ed25519

Fastest 5KB JS implementation of ed25519 signatures

• ed25519
• curve25519
• eddsa
• cryptography
• noble
• x25519
• +6 more

689.hashcat / maskprocessor

High-Performance word generator with a per-position configureable charset

690.Password4j / password4j

Java cryptographic library that supports Argon2, bcrypt, scrypt and PBKDF2 aimed to protect passwords in databases. Easy to use by design, highly customizable, secure and portable. All the implementations follow the standards and have been reviewed to perform better in the JVM.

• pbkdf2
• bcrypt
• scrypt
• argon2
• password
• hashing
• +10 more

691.Cap-go / capacitor-social-login

Capacitor plugin to make login with Google,Apple,Facebook and so on, simple and fast to implement

• capacitor
• plugin
• capacitor-plugin

692.byt3bl33d3r / SILENTTRINITYArchived

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

• security-tools
• c-sharp
• dotnet
• ironpython
• python3
• red-teams
• +4 more

693.sidebase / nuxt-auth

Authentication built for Nuxt! Easily add authentication via OAuth providers, credentials or Email Magic URLs!

• authentication
• nuxt
• users
• session
• typescript
• local
• +1 more

694.jordanpotti / AWSBucketDump

Security Tool to Look For Interesting Files in S3 Buckets

• s3-bucket
• penetration-testing
• bugbounty
• enumeration

695.Invoke-IR / PowerForensics

PowerForensics provides an all in one platform for live disk forensic analysis

696.buffer / thug

Python low-interaction honeyclient

• honeyclient
• client-honeypot
• python
• security-tools
• shellcode
• virustotal
• +1 more

697.fportantier / habu

Hacking Toolkit

• network-analysis
• networking
• scapy
• python3
• security-tools
• hacking
• +9 more

698.ronin-rb / ronin

Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.

• ruby
• hacking
• infosec
• ctf-tools
• console
• cli
• +10 more

699.mattcurrie / mgbdis

Game Boy ROM disassembler with RGBDS compatible output

• rgbds
• disassembler
• reverse-engineering
• game-boy
• gameboy

700.theronic / eacl

🦅 EACL: Enterprise Access ControL is a ReBAC Authorization library inspired by SpiceDB, built in Clojure and backed by Datomic Pro, Datahike, Datalevin or DataScript.

• access-control
• clojure
• datalog
• authorization
• datomic
• rebac
• +9 more