Trending repositories

601.jesparza / peepdf

Powerful Python tool to analyze PDF documents

602.DaGenix / rust-crypto

A (mostly) pure-Rust implementation of various cryptographic algorithms.

603.apache / casbin-Casbin.NET

An authorization library that supports access control models like ACL, RBAC, ABAC in .NET (C#)

• casbin
• access-control
• authorization
• rbac
• abac
• acl
• +4 more

604.vbuterin / pybitcointools

SImple, common-sense Bitcoin-themed Python ECC library

605.greg7mdp / sparsepp

A fast, memory efficient hash map for C++

• hash-tables
• sparse-containers
• unordered
• sparsehash
• hashmap
• hash
• +2 more

606.ClaudiuGeorgiu / ObfuscapkArchived

An automatic obfuscation tool for Android apps that works in a black-box fashion, supports advanced obfuscation features and has a modular architecture easily extensible with new techniques

• android
• application
• app
• apk
• obfuscation
• black-box
• +3 more

607.ashishb / android-malware

Collection of android malware samples

608.RobThree / TwoFactorAuth

PHP library for Two Factor Authentication (TFA / 2FA)

• qrcode
• php
• two-factor
• twofactorauth
• totp
• multi-factor
• +1 more

609.sh4hin / Androl4b

A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis

• mobile-security
• android
• malware-analyzer
• penetration-testing
• reverse-engineering
• application-security

610.EmilStenstrom / justhtml

A pure Python HTML5 parser that just works. No C extensions to compile. No system dependencies to install. No complex API to learn.

• html5
• parser
• python
• html
• sanitization
• security

611.certtools / intelmq

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

• cybersecurity
• threat
• ioc
• malware
• phishing
• cert
• +10 more

612.moloch-- / RootTheBox

A Game of Hackers (CTF Scoreboard & Game Manager)

• security
• scoring-engine
• ctf

613.endgameinc / RTA

The repository host gives no description.

614.in-toto / in-toto

in-toto is a framework to protect supply chain integrity.

• supply-chain
• security
• new-york-university
• secure-systems-lab

615.nil0x42 / duplicut

Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)

• hashcat
• password
• hashes
• cracking
• c
• wordlist
• +9 more

616.cisagov / untitledgoosetool

Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.

617.RustCrypto / elliptic-curves

Collection of pure Rust elliptic curve implementations: NIST P-224, P-256, P-384, P-521, secp256k1, SM2

• ecdsa
• nist
• rust
• schnorr
• taproot

618.Gui774ume / ebpfkit

ebpfkit is a rootkit powered by eBPF

• ebpf
• security
• rootkit
• linux
• linux-kernel
• linux-kernel-hacking
• +2 more

619.openxpki / openxpki

OpenXPKI Code

• pki
• enterprise-software
• workflow-based
• x509
• hsm-support
• opensource-pki
• +1 more

620.pompelmi / pompelmi

ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.

• clamscan
• file-scanner
• virus-scan
• docker-compose
• upload-file
• virus
• +8 more

621.stealthsploit / OneRuleToRuleThemStill

A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule

622.danielberkompas / cloak

Elixir encryption library designed for Ecto

• elixir
• encryption
• ecto
• hex

623.algolia / sup3rS3cretMes5age

Simple to use, simple to deploy, one time self destruct messaging service, with hashicorp vault as a backend

• golang
• vault
• security
• secrets
• hashicorp-vault

624.mozilla / mozilla-django-oidc

A django OpenID Connect library

625.maaaaz / androwarn

Yet another static code analyzer for malicious Android applications

626.chronicle / detection-rules

Collection of example YARA-L rules for use within Google Security Operations

627.panther-labs / panther-analysis

Built-in Panther detection rules and policies

• security
• python
• cybersecurity
• siem

628.DFIR-ORC / dfir-orc

Forensics artefact collection tool for systems running Microsoft Windows

• dfir
• incident-response
• collection

629.spieglt / Cloaker

Simple, drag-and-drop, password-based file encryption

• encryption-utility
• cross-platform
• encryption
• gui
• drag-and-drop
• simple
• +2 more

630.WangYihang / Webshell-Sniper

:hammer: Manage your website via terminal

• php
• security-tools
• python
• pentest
• webshell-sniper
• webshell

631.HightechSec / git-scanner

A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public

• hacking-tools
• bash
• git-dumper
• pentesting
• pentest-tool
• security-audit
• +1 more

632.log2timeline / dftimewolf

A framework for orchestrating forensic collection, processing and data export

633.kacos2000 / MFT_Browser

$MFT directory tree reconstruction & FILE record info

• mft-browser
• mft
• powershell
• winform
• gui-application
• mft-files
• +10 more

634.tink-crypto / tink-java

Java implementation of Tink

• crypto
• cryptography
• java
• security

635.AristoChen / usb-proxy

A USB proxy based on raw-gadget and libusb

• usb
• proxy
• libusb
• otg
• raspberry-pi
• usb-otg
• +7 more

636.Xor-el / CryptoLib4Pascal

Crypto for Modern Object Pascal

• ecdsa
• cryptography
• delphi
• fpc
• eddsa
• rsa
• +1 more

637.dalibo / ldap2pg

:elephant: :busts_in_silhouette: Manage PostgreSQL roles and privileges from YAML or LDAP

• ldap
• postgresql
• yaml
• roles
• acl
• privileges
• +4 more

638.omar2535 / GraphQLer

🔍A cutting edge context aware GraphQL API fuzzing tool!

• api-testing-framework
• graphql
• api
• automated-testing
• cybersecurity
• pentesting
• +3 more

639.shipcod3 / canTot

quick and dirty canbus h4xing framework

• automotive-security
• canbus
• car-hacking

640.ppomes / myanon

A mysqldump anonymizer

• mysqldump
• anonymizer
• database-anonymizer
• rgpd
• anonymization
• mysql
• +12 more

641.SECFORCE / droidground

A flexible playground for Android CTF challenges.

• android
• ctf
• cybersecurity
• playground
• pentesting
• training

642.SAP / cloud-active-defense

Add a layer of active defense to your cloud applications.

• cybersecurity
• deception
• decoy
• honeytoken
• infosec
• security

643.squidKid-deluxe / QTradeX-Algo-Trading-SDK

AI-powered SDK featuring algorithmic trading, backtesting, deployment on 100+ exchanges, and multiple optimization engines.

• ai
• algorithmic-trading
• crypto
• machine-learning
• python
• trading-platform
• +13 more

644.bombinisecurity / bombini

eBPF Security Monitoring and Sandboxing Agent Based on Aya

• aya
• bpf
• ebpf
• security
• kernel
• runtime-security
• +6 more

645.stacklok / brood-box

CLI tool for running coding agents inside hardware-isolated microVMs

• ai-agents
• claude-code
• codex
• developer-tools
• microvm
• sandbox
• +1 more

646.boazeb / papervault

Paper vault for passwords and secrets

• cryptocurrency
• cryptography
• cybersecurity
• digital-asset-security
• password-manager

647.msinger / dmg-schematics

Reverse engineered schematics of the Game Boy's DMG-CPU B chip

• dmg-cpu
• game-boy
• gameboy
• kicad-schematics
• reverse-engineering
• asic
• +6 more

648.kOaDT / oss-oopssec-store

Security training for the apps you actually ship. Open your browser and start hacking.

• appsec
• ctf
• cybersecurity
• nextjs
• typescript
• owasp-top10
• +8 more

649.hookprobe / hookprobe

🛡️ Free AI that blocks hackers while you sleep. Runs on cheap hardware. When someone in Tokyo gets attacked, you're protected in 30 seconds. No fees. No experts needed. Just protection. One node's detection → everyone's protection.

• ai-security
• cybersecurity
• ids
• iot-security
• ips
• open-source-security
• +14 more

650.chrislusf / seaweedfs

SeaweedFS is a fast distributed storage system for blobs, objects, files, and data lake, for billions of files! Blob store has O(1) disk seek, cloud tiering. Filer supports Cloud Drive, xDC replication, Kubernetes, POSIX FUSE mount, S3 API, S3 Gateway, Hadoop, WebDAV, encryption, Erasure Coding. Enterprise version is at seaweedfs.com.

651.anpa1200 / adversarygraph

Self-hosted AI-assisted CTI-to-detection workbench for ATT&CK mapping, IOC/CVE intelligence, Threat Radar, malware triage, Attack Simulation, and SIEM validation.

• cybersecurity
• docker
• fastapi
• llm
• mitre-attack
• react
• +14 more

652.crenoxhq / crenox

Statically compiled, zero-dependency Git pre-commit secret scanner and credentials detector written in Go. An alternative to Gitleaks and git-secrets.

• aho-corasick
• cybersecurity
• devops
• git-hook
• go
• golang
• +6 more

653.Yousha / DFIR-Specialist-Roadmap

Digital forensic (DFIR) specialist roadmap.

• chfi
• cyber-defense
• cyber-forensics
• dfir
• digital-forensics
• incident-response
• +3 more

654.sE2EEnd / sE2EEnd

File transfer solution with end-to-end encryption.

• e2ee
• e2ee-encryption
• encryption
• filetransfer
• e2e-encryption
• file-transfer

655.jaredhanson / passport

Simple, unobtrusive authentication for Node.js.

• nodejs
• express
• passport
• oauth
• oauth2
• saml
• +2 more

656.QuipNetwork / hashsigs-solidity

Solidity contracts implementing hash based post quantum signatures

657.volatilityfoundation / volatilityArchived

An advanced memory forensics framework

• python
• malware
• volatility-framework
• memory
• ram

658.google / android-classysharkArchived

Android and Java bytecode viewer

• dex
• classyshark
• jar
• android
• java
• apk
• +4 more

659.samyk / poisontap

Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.

660.laravel / socialite

Laravel wrapper around OAuth 1 & OAuth 2 libraries.

• laravel
• oauth

661.SpiderLabs / ResponderArchived

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

662.rocky / python-uncompyle6

A cross-version Python bytecode decompiler

• decompiler
• python
• bytecode

663.abraham / twitteroauth

The most popular PHP library for use with the Twitter OAuth REST API.

• twitter-oauth
• php
• twitter-api
• php-library
• twitter
• twitteroauth
• +1 more

664.jboss-javassist / javassist

Java bytecode engineering toolkit

• java-bytecode
• java

665.django-guardian / django-guardian

Per object permissions for Django

666.loov / lensm

Go assembly and source viewer

667.jwt / ruby-jwt

A ruby implementation of the RFC 7519 OAuth JSON Web Token (JWT) standard.

• jwt
• ruby-jwt
• oauth-json-web
• ruby
• jwt-token
• jwk

668.oauthlib / oauthlib

A generic, spec-compliant, thorough implementation of the OAuth request-signing logic

• python
• python3
• python-3
• authentication
• library
• oauth
• +10 more

669.rubysec / bundler-audit

Patch-level verification for Bundler

• bundler-audit
• ruby-advisory-db
• ruby
• dependency-checker
• patch-management
• security
• +2 more

670.DuendeArchive / identity-model-oidc-client-jsArchived

OpenID Connect (OIDC) and OAuth2 protocol support for browser-based JavaScript applications

671.tunz / js-vuln-db

A collection of JavaScript engine CVEs with PoCs

• javascript
• cve
• vulnerability

672.evilcos / xssor2

XSS'OR - Hack with JavaScript.

• probe
• pentest-tool
• xss
• csrf
• encoding
• hacking-tool
• +2 more

673.ruby-oauth / oauth2

🔐 oauth2 - A Ruby wrapper for the OAuth 2.0, & 2.1 Authorization Frameworks, including OpenID Connect (OIDC)

• authentication
• authorization
• oauth2
• oauth2-client
• security
• oidc
• +1 more

674.hlandau / acmetool

:lock: acmetool, an automatic certificate acquisition tool for ACME (Let's Encrypt)

• acmetool
• certificate
• acme-server
• acme
• letsencrypt
• ssl
• +2 more

675.0xInfection / TIDoS-Framework

The Offensive Manual Web Application Penetration Testing Framework.

• web-penetration-testing
• reconnaissance
• vulnerability-analysis
• scanning-enumeration
• web-fuzzer
• osint
• +7 more

676.justinas / nosurf

CSRF protection middleware for Go.

• csrf
• go
• security
• middleware

677.desaster / kippo

Kippo - SSH Honeypot

678.bee-san / Name-That-Hash

🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥

• hash
• infosec
• cyber
• security
• hacking
• tool
• +7 more

679.hellman / xortool

A tool to analyze multi-byte xor cipher

• xortool
• xor-cipher
• cryptography
• cryptanalysis

680.nccgroup / house

A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.

• frida
• mobile
• pentest-tool
• android

681.0xInfection / XSRFProbe

The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.

• csrf
• crawler
• csrf-attacks
• token-generation
• csrf-scanner
• crafted-tokens
• +5 more

682.aspnet / SecurityArchived

[Archived] Middleware for security and authorization of web apps. Project moved to https://github.com/aspnet/AspNetCore

• aspnet-product

683.nascentxyz / simple-security-toolkit

A collection of practical security-focused guides and checklists for smart contract development

• crypto
• security
• security-tools
• smart-contracts
• solidity

684.gorilla / csrf

Package gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services 🔒

• csrf-protection
• gorilla
• middleware
• golang
• security
• csrf
• +4 more

685.strazzere / android-unpacker

Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0

• android-unpacker
• gdb
• qemu
• reverse-engineering
• android
• unpacker

686.uber-common / metta

An information security preparedness tool to do adversarial simulation.

• uber
• vagrant
• yaml
• celery
• python
• redis
• +7 more

687.TypeError / secure

Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).

• fastapi
• flask
• django
• content-security-policy
• http-headers
• python
• +7 more

688.sonyxperiadev / ApkAnalyserArchived

The repository host gives no description.

689.sundaysec / Android-Exploits

A collection of android Exploits and Hacks

• android
• android-architecture
• hacking
• exploit
• exploits
• dos

690.HaschekSolutions / pictshare

:camera: PictShare is an open source image, mp4, pastebin hosting service with a simple resizing and upload API that you can host yourself. :rice_scene:

• docker
• images
• selfhosted
• picture
• mp4-uploads
• image-uploader
• +1 more

691.f0cker / crackq

CrackQ: A Python Hashcat cracking queue system

692.iphelix / pack

PACK (Password Analysis and Cracking Kit)

693.viaduct-ai / kustomize-sops

KSOPS - A Flexible Kustomize Plugin for SOPS Encrypted Resources

694.DinoTools / dionaea

Home of the dionaea honeypot

• honeypot
• dionaea
• security

695.mentebinaria / readpe

The PE file analysis toolkit

• binary-analysis
• reverse-engineering
• pe-file
• portable-executable
• malware-analysis
• malware-research

696.unipacker / unipacker

Automatic and platform-independent unpacker for Windows binaries based on emulation

• reverse-engineering
• unpacker
• pefile
• windows
• python
• security
• +5 more

697.XKCP / XKCP

eXtended Keccak Code Package

698.openwall / johnny

GUI frontend to John the Ripper password cracker

• gui
• qt
• john
• password
• cracker

699.electron / osx-sign

Codesign Electron macOS apps

• electron-osx-sign
• macos
• entitlements
• provisioning-profiles
• electron
• codesigning
• +4 more

700.allaboutapps / go-starter

An opinionated production-ready SQL-/Swagger-first RESTful JSON API written in Go, highly integrated with VSCode DevContainers by allaboutapps.

• golang-development
• vscode-devcontainers
• golang
• go
• server
• oauth2
• +9 more