Ranked by Attention Score: stars gained over the last 7 complete days
601–700 of 767 by Attention Score · Oct 29, 2026 – Nov 4, 2026 (UTC)
Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection
The Offensive Manual Web Application Penetration Testing Framework.
Analyze the security of any domain by finding all the information possible. Made in python.
A tool for automating cracking methodologies through Hashcat from the TrustedSec team.
VirusTotal Wanna Be - Now with 100% more Hipster
PHP Captcha library
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
SSH man-in-the-middle tool
A network sniffer that logs all DNS server replies for use in a passive DNS setup
🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥
One rule to crack all passwords. or atleast we hope so.
Fast & memory efficient hashtable based on robin hood hashing for C++11/14/17/20
Fast strong hash functions: SipHash/HighwayHash
Authentication built for Nuxt! Easily add authentication via OAuth providers, credentials or Email Magic URLs!
Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox
ICS/SCADA honeypot
Password cracking rules for Hashcat based on statistics and industry patterns
GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.
Security Tool to Look For Interesting Files in S3 Buckets
A collection of postmortem templates
A (mostly) pure-Rust implementation of various cryptographic algorithms.
BARF : A multiplatform open source Binary Analysis and Reverse engineering Framework
Strategies to Gekko trading bot with backtests results and some useful tools.
Crack password hashes without the fuss :cat2:
Go server for two-man rule style file encryption and decryption.
Full featured multi arch/os debugger built on top of PyQt5 and frida
Advanced Honeypot framework.
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
Digital Forensics artifact repository
Procyon is a suite of Java metaprogramming tools, including a rich reflection API, a LINQ-inspired expression tree API for runtime code generation, and a Java decompiler.
The repository host gives no description.
Program to reverse Docker images into Dockerfiles
PHP library for Two Factor Authentication (TFA / 2FA)
Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0
A header only library for creating and validating json web tokens in c++
TranslatedA lightweight DDD forward/reverse business modeling framework that supports the architectural evolution of complex business systems!
An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction
Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance and exploitation of information systems.
Limit access to your Laravel applications by using invite codes
RockYou2021.txt is a MASSIVE WORDLIST compiled of various other wordlists. RockYou2021.txt DOES NOT CONTAIN USER:PASS logins!
Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)
pure-python ECDSA signature/verification and ECDH key agreement
The repository host gives no description.
OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications
Customizable Linux Persistence Tool for Security Research and Detection Engineering.
Small package to allow adding security headers to ASP.NET Core websites
Cryptographic Primitive Code Generation by Fiat
A work-in-progress deobfuscator for movfuscated binaries
Framework for Making Environmental Keyed Payloads (NO LONGER SUPPORTED)
Rails integration for Rodauth authentication framework
Usable, easy and safe pure-Rust crypto
Andromeda - Interactive Reverse Engineering Tool for Android Applications
MIRACL Cryptographic SDK: Multiprecision Integer and Rational Arithmetic Cryptographic Library is a C software library that is widely regarded by developers as the gold standard open source SDK for elliptic curve cryptography (ECC).
Security Auditor Utility for GraphQL APIs
Scirius is a web application for Suricata ruleset management and threat hunting.
Galah: An LLM-powered web honeypot.
Fake sshd that logs ip addresses, usernames, and passwords.
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
List DTDs and generate XXE payloads using those local DTDs.
Charm: A Framework for Rapidly Prototyping Cryptosystems
OpenID Connect Library for Rust
Nginx common useful configuration
Defanged Indicator of Compromise (IOC) Extractor.
Password cracking rules and masks for hashcat that I generated from cracked passwords.
Fastest 5KB JS implementation of ed25519 signatures
Delphi implementation of JOSE (JSON Object Signing and Encryption) and JWT (JSON Web Token)
Django web application to store and manage vouchers, coupons, loyalty and gift cards digitally. Supports PWA, offline caching, expiry notifications, transaction histories, file uploads and OIDC SSO.
Security profiling for blackbox Android
Security Analysis tool for WebAssembly module (wasm) and Blockchain Smart Contracts (BTC/ETH/NEO/EOS)
Super Next generation Advanced Reactive honEypot
A tiny Elixir library for time-based one time passwords (TOTP)
GitHub strategy for OmniAuth
Robust ABC (ActionScript Bytecode) [Dis-]Assembler
Forensics artefact collection tool for systems running Microsoft Windows
JSON Web Token library for C++
Simple, drag-and-drop, password-based file encryption
Java cryptographic library that supports Argon2, bcrypt, scrypt and PBKDF2 aimed to protect passwords in databases. Easy to use by design, highly customizable, secure and portable. All the implementations follow the standards and have been reviewed to perform better in the JVM.
Secure, Unified, Powerful and Extensible Rust Android Analyzer
:hammer: Manage your website via terminal
teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.
Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools
tool for generating wordlists or extending an existing one using mutations.
🗜️ A packer for Windows x86 executable files written in C and Intel x86 Assembly. The new file after packing can obstruct reverse engineering（使用C和Intel x86汇编开发的Windows x86可执行文件打包工具，打包后的新文件可以阻碍逆向工程）
Astral-PE is a low-level mutator (Headers/EP obfuscator) for native Windows PE files (x32/x64)
DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.
Tools for building and disassembling Pokémon Red and Pokémon Crystal
$MFT directory tree reconstruction & FILE record info
Various wordlists FR & EN - Cracking French passwords