Trending repositories

601.DosX-dev / Astral-PE

Astral-PE is a low-level mutator (Headers/EP obfuscator) for native Windows PE files (x32/x64)

• cybersecurity
• hacktoberfest
• low-level
• mutator
• obfuscation
• obfuscator
• +12 more

602.tink-crypto / tink-java

Java implementation of Tink

• crypto
• cryptography
• java
• security

603.crenoxhq / crenox

Statically compiled, zero-dependency Git pre-commit secret scanner and credentials detector written in Go. An alternative to Gitleaks and git-secrets.

• aho-corasick
• cybersecurity
• devops
• git-hook
• go
• golang
• +6 more

604.tymondesigns / jwt-auth

🔐 JSON Web Token Authentication for Laravel & Lumen

• jwt
• laravel
• authentication
• php

605.de4dot / de4dotArchived

.NET deobfuscator and unpacker.

606.michenriksen / gitrobArchived

Reconnaissance tool for GitHub organizations

• security
• osint
• github-api
• golang

607.a0rtega / pafishArchived

Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do

• malware
• reverse-engineering
• virtual-machine
• malware-families
• analysis-environments
• sandbox
• +3 more

608.Cyb3rWard0g / HELK

The Hunting ELK

• hunting
• elasticsearch
• kibana
• logstash
• hunting-platforms
• elk
• +7 more

609.thephpleague / oauth2-client

Easy integration with OAuth 2.0 service providers.

• php
• oauth2
• oauth
• authorization
• sso
• authentication

610.baidu / openrasp

🔥Open source RASP solution

• waf
• devsecops
• security
• iast
• rasp

611.mewebstudio / captcha

Captcha for Laravel 5+

• laravel
• php
• captcha
• security

612.antonioribeiro / google2fa

A One Time Password Authentication package, compatible with Google Authenticator.

• php
• 2fa
• two-factor-authentication
• google2fa
• agnostic
• hacktoberfest
• +1 more

613.cossacklabs / acra

Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.

• encryption-server
• encryption
• crypto
• cryptography
• security
• intrusion-detection
• +7 more

614.xFFFFF / Gekko-Strategies

Strategies to Gekko trading bot with backtests results and some useful tools.

• gekko
• strategies
• gekko-strategies
• gekko-backtest
• backtest-database
• cryptocurrency
• +14 more

615.certtools / intelmq

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

• cybersecurity
• threat
• ioc
• malware
• phishing
• cert
• +10 more

616.mentebinaria / readpe

The PE file analysis toolkit

• binary-analysis
• reverse-engineering
• pe-file
• portable-executable
• malware-analysis
• malware-research

617.struppigel / PortEx

Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness

618.chronicle / detection-rules

Collection of example YARA-L rules for use within Google Security Operations

619.panther-labs / panther-analysis

Built-in Panther detection rules and policies

• security
• python
• cybersecurity
• siem

620.ppomes / myanon

A mysqldump anonymizer

• mysqldump
• anonymizer
• database-anonymizer
• rgpd
• anonymization
• mysql
• +12 more

621.shrec / UltrafastSecp256k1

Ultra high-performance secp256k1 ECC engine | Python, Node.js, Rust, Go, C#, Swift, Java bindings | CUDA, Metal, OpenCL GPU | ECDSA, Schnorr, FROST, MuSig2, BIP-352 | 15+ platforms

• cryptography
• cuda
• riscv
• secp256k1
• arm64
• opencl
• +14 more

622.travist / jsencrypt

A tiny (18.5 kB gzip), zero-dependency, Javascript library to perform OpenSSL RSA Encryption, Decryption, and Key Generation.

623.jboss-javassist / javassist

Java bytecode engineering toolkit

• java-bytecode
• java

624.defuse / php-encryption

Simple Encryption in PHP.

625.lirantal / is-website-vulnerable

finds publicly known security vulnerabilities in a website's frontend JavaScript libraries

• security-vulnerabilities
• security
• vulnerabilities
• lighthouse
• scan
• nodejs
• +1 more

626.ankane / lockbox

Modern encryption for Ruby and Rails

• encryption
• activerecord
• activestorage
• carrierwave
• mongoid
• libsodium

627.kspearrin / Otp.NET

A .NET implementation of TOTP and HOTP for things like two-factor authentication codes.

• otp
• totp
• two-factor-authentication
• 2fa
• csharp
• dotnet
• +1 more

628.nascentxyz / simple-security-toolkit

A collection of practical security-focused guides and checklists for smart contract development

• crypto
• security
• security-tools
• smart-contracts
• solidity

629.gorilla / csrf

Package gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services 🔒

• csrf-protection
• gorilla
• middleware
• golang
• security
• csrf
• +4 more

630.r3nt0n / bopscrk

Generate smart and powerful wordlists

• wordlist
• password
• hacking-tool
• password-cracking
• wordlist-generator
• cracking
• +13 more

631.qeeqbox / honeypots

30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)

• pypi
• monitoring-tool
• network-analysis
• malware-analysis
• credentials
• honeypot
• +5 more

632.e-ago / bitcracker

BitCracker is the first open source password cracking tool for memory units encrypted with BitLocker

• bitlocker
• password-cracker
• cuda
• cryptography
• gpgpu
• windows
• +10 more

633.mesquidar / adbsploitArchived

A python based tool for exploiting and managing Android devices via ADB

• adb
• android
• hacking
• exploit
• exploiting
• apk
• +2 more

634.iphelix / pack

PACK (Password Analysis and Cracking Kit)

635.DinoTools / dionaea

Home of the dionaea honeypot

• honeypot
• dionaea
• security

636.l4rm4nd / VoucherVault

Django web application to store and manage vouchers, coupons, loyalty and gift cards digitally. Supports PWA, offline caching, expiry notifications, transaction histories, file uploads and OIDC SSO.

• coupons
• vouchers
• conventional-commits
• apprise
• asset-manager
• coupon-management-system
• +14 more

637.oasis-open / cti-python-stix2

OASIS TC Open Repository: Python APIs for STIX 2

• python
• stix
• stix2
• cyber-threat-intelligence
• json
• cti
• +1 more

638.mattcurrie / mgbdis

Game Boy ROM disassembler with RGBDS compatible output

• rgbds
• disassembler
• reverse-engineering
• game-boy
• gameboy

639.Xor-el / HashLib4Pascal

Hashing for Modern Object Pascal

• delphi
• fpc
• checksum
• stream
• encoding
• byte-array
• +4 more

640.MagnetForensics / dumpit-linux

Memory acquisition for Linux that makes sense.

641.EmpireProject / EmpireArchived

Empire is a PowerShell and Python post-exploitation agent.

642.michenriksen / aquatoneArchived

A Tool for Domain Flyovers

• security
• osint
• golang
• chrome-headless
• reconnaissance
• chromium

643.deathmarine / Luyten

An Open Source Java Decompiler Gui for Procyon

644.github / secure_headers

Manages application of security headers with many safe defaults

• secure-headers
• csp
• hsts
• referrer-policy
• rack
• middleware
• +4 more

645.rubysec / bundler-audit

Patch-level verification for Bundler

• bundler-audit
• ruby-advisory-db
• ruby
• dependency-checker
• patch-management
• security
• +2 more

646.vaguileradiaz / tinfoleak

The most complete open-source tool for Twitter intelligence analysis

• osint
• socmint
• socialmedia
• twitter
• intelligence

647.justinas / nosurf

CSRF protection middleware for Go.

• csrf
• go
• security
• middleware

648.zeustrojancode / ZeusArchived

NOT MY CODE! Zeus trojan horse - leaked in 2011, I am not the author. This repository is for study purposes only, do not message me about your lame hacking attempts.

• c
• c-plus-plus
• malware
• russian
• virus
• leaks

649.honeytrap / honeytrap

Advanced Honeypot framework.

• honeypot
• framework
• security

650.aspnet / SecurityArchived

[Archived] Middleware for security and authorization of web apps. Project moved to https://github.com/aspnet/AspNetCore

• aspnet-product

651.sh4hin / Androl4b

A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis

• mobile-security
• android
• malware-analyzer
• penetration-testing
• reverse-engineering
• application-security

652.HynekPetrak / javascript-malware-collection

Collection of almost 40.000 javascript malware samples

• malware-samples
• malware-research
• javascript
• malware-jail

653.paulmillr / noble-ed25519

Fastest 5KB JS implementation of ed25519 signatures

• ed25519
• curve25519
• eddsa
• cryptography
• noble
• x25519
• +6 more

654.hashcat / maskprocessor

High-Performance word generator with a per-position configureable charset

655.Juliusolsson05 / pharos-ai

Open-source OSINT intelligence dashboard tracking the Iran conflict in real time — live DeckGL/MapLibre conflict map, 30 bias-labeled feeds, actor dossiers, and daily briefs. Live at conflicts.app.

• deckgl
• geopolitics
• intelligence
• maplibre
• nextjs
• osint
• +1 more

656.vahiiiid / go-rest-api-boilerplate

🚀 Production-ready AI-friendly Go REST API boilerplate with Clean Architecture, JWT auth, RBAC, PostgreSQL migrations, and highly tested. AI-optimized with built-in guidelines for most used IDEs. Docker hot-reload, Swagger docs, one-command setup. Build production APIs in minutes, not weeks.

• api
• api-documentation
• authentication
• backend
• boilerplate
• clean-architecture
• +14 more

657.msinger / dmg-schematics

Reverse engineered schematics of the Game Boy's DMG-CPU B chip

• dmg-cpu
• game-boy
• gameboy
• kicad-schematics
• reverse-engineering
• asic
• +6 more

658.JesusFreke / smaliArchived

smali/baksmali

659.lijiejie / subDomainsBrute

A fast sub domain brute tool for pentesters

660.byt3bl33d3r / SILENTTRINITYArchived

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

• security-tools
• c-sharp
• dotnet
• ironpython
• python3
• red-teams
• +4 more

661.404labfr / laravel-impersonate

Laravel Impersonate is a plugin that allows you to authenticate as your users.

• laravel-package
• impersonate
• php
• user-management
• laravel

662.davehull / Kansa

A Powershell incident response framework

663.nccgroup / house

A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.

• frida
• mobile
• pentest-tool
• android

664.DaGenix / rust-crypto

A (mostly) pure-Rust implementation of various cryptographic algorithms.

665.vbuterin / pybitcointools

SImple, common-sense Bitcoin-themed Python ECC library

666.ClaudiuGeorgiu / ObfuscapkArchived

An automatic obfuscation tool for Android apps that works in a black-box fashion, supports advanced obfuscation features and has a modular architecture easily extensible with new techniques

• android
• application
• app
• apk
• obfuscation
• black-box
• +3 more

667.RobThree / TwoFactorAuth

PHP library for Two Factor Authentication (TFA / 2FA)

• qrcode
• php
• two-factor
• twofactorauth
• totp
• multi-factor
• +1 more

668.fportantier / habu

Hacking Toolkit

• network-analysis
• networking
• scapy
• python3
• security-tools
• hacking
• +9 more

669.nil0x42 / duplicut

Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)

• hashcat
• password
• hashes
• cracking
• c
• wordlist
• +9 more

670.HaschekSolutions / pictshare

:camera: PictShare is an open source image, mp4, pastebin hosting service with a simple resizing and upload API that you can host yourself. :rice_scene:

• docker
• images
• selfhosted
• picture
• mp4-uploads
• image-uploader
• +1 more

671.pedramamini / ThreatIngestor

Extract and aggregate threat intelligence.

• ioc
• indicators-of-compromise
• threatintel
• threat-intelligence
• osint
• dfir
• +12 more

672.paulmillr / noble-secp256k1

Fastest 5KB JS implementation of secp256k1 signatures and ECDH

• secp256k1
• ecdsa
• ecc
• cryptography
• rfc6979
• noble
• +6 more

673.openwall / johnny

GUI frontend to John the Ripper password cracker

• gui
• qt
• john
• password
• cracker

674.electron / osx-sign

Codesign Electron macOS apps

• electron-osx-sign
• macos
• entitlements
• provisioning-profiles
• electron
• codesigning
• +4 more

675.spieglt / Cloaker

Simple, drag-and-drop, password-based file encryption

• encryption-utility
• cross-platform
• encryption
• gui
• drag-and-drop
• simple
• +2 more

676.Password4j / password4j

Java cryptographic library that supports Argon2, bcrypt, scrypt and PBKDF2 aimed to protect passwords in databases. Easy to use by design, highly customizable, secure and portable. All the implementations follow the standards and have been reviewed to perform better in the JVM.

• pbkdf2
• bcrypt
• scrypt
• argon2
• password
• hashing
• +10 more

677.n0kovo / hashcat-rules-collection

Hascat Rules Collection – Probably the largest collection of hashcat rule-files anywhere.

• hashcat
• hashcat-rules
• hashcat-rule
• password-cracking
• password-cracking-tool
• wordlist-generator
• +2 more

678.vw2x / Mira

Mobile runtime detection workbench for AI (iOS and Android)

• frida
• reverse-engineering
• android-security-tools
• frida-gadget
• ios-security-tool
• mcp-client
• +3 more

679.theronic / eacl

🦅 EACL: Enterprise Access ControL is a ReBAC Authorization library inspired by SpiceDB, built in Clojure and backed by Datomic Pro, Datahike, Datalevin or DataScript.

• access-control
• clojure
• datalog
• authorization
• datomic
• rebac
• +9 more

680.chrislusf / seaweedfs

SeaweedFS is a fast distributed storage system for blobs, objects, files, and data lake, for billions of files! Blob store has O(1) disk seek, cloud tiering. Filer supports Cloud Drive, xDC replication, Kubernetes, POSIX FUSE mount, S3 API, S3 Gateway, Hadoop, WebDAV, encryption, Erasure Coding. Enterprise version is at seaweedfs.com.

681.cleatdev / cleat

Give the agent a cage, not your keys. One-command Docker sandbox for AI coding agents: full autonomous permissions, per-project isolation, your host stays untouched.

• ai-agents
• ai-coding
• ai-safety
• autonomous-coding
• claude-code
• cli
• +13 more

682.lcobucci / jwt

A simple library to work with JSON Web Token and JSON Web Signature

• php
• jwt
• tokens
• hacktoberfest

683.unrolled / secure

HTTP middleware for Go that facilitates some quick security wins.

• golang
• go
• middleware
• security

684.hannob / snallygaster

Tool to scan for secret files on HTTP servers

• security
• websecurity

685.0xInfection / TIDoS-Framework

The Offensive Manual Web Application Penetration Testing Framework.

• web-penetration-testing
• reconnaissance
• vulnerability-analysis
• scanning-enumeration
• web-fuzzer
• osint
• +7 more

686.hellman / xortool

A tool to analyze multi-byte xor cipher

• xortool
• xor-cipher
• cryptography
• cryptanalysis

687.khast3x / Redcloud

Automated Red Team Infrastructure deployement using Docker

• offensive
• pentest
• bugbounty
• hacking
• kali
• docker
• +2 more

688.mildsunrise / protobuf-inspector

🕵️ Tool to reverse-engineer Protocol Buffers with unknown definition

• reverse-engineering
• protocol-buffers
• serialization

689.buffer / thug

Python low-interaction honeyclient

• honeyclient
• client-honeypot
• python
• security-tools
• shellcode
• virustotal
• +1 more

690.seemoo-lab / internalblue

Bluetooth experimentation framework for Broadcom and Cypress chips.

• bluetooth
• broadcom
• firmware
• ios
• bluez
• linux
• +5 more

691.mandiant / stringsifter

A machine learning tool that ranks strings based on their relevance for malware analysis.

• machine-learning
• fireeye-flare
• strings
• malware-analysis
• learning-to-rank
• reverse-engineering
• +1 more

692.ronin-rb / ronin

Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.

• ruby
• hacking
• infosec
• ctf-tools
• console
• cli
• +10 more

693.orlikoski / CyLR

CyLR - Live Response Collection Tool

694.DFIR-ORC / dfir-orc

Forensics artefact collection tool for systems running Microsoft Windows

• dfir
• incident-response
• collection

695.log2timeline / dftimewolf

A framework for orchestrating forensic collection, processing and data export

696.boazeb / papervault

Paper vault for passwords and secrets

• cryptocurrency
• cryptography
• cybersecurity
• digital-asset-security
• password-manager

697.anpa1200 / adversarygraph

Self-hosted AI-assisted CTI-to-detection workbench for ATT&CK mapping, IOC/CVE intelligence, Threat Radar, malware triage, Attack Simulation, and SIEM validation.

• cybersecurity
• docker
• fastapi
• llm
• mitre-attack
• react
• +14 more

698.sorkila / tintpad

It falls out of your notch. Hotkey, repo, Return: your terminal opens with Claude Code, Codex or any agent already running. Free, MIT, local-only macOS.

• ai
• claude
• cli
• codex
• developer-tools
• launcher
• +13 more

699.Flowtriq / nethawk

Real-time network traffic analysis in your terminal.

• cli
• ddos
• ddos-detection
• go
• network-monitoring
• network-security
• +8 more

700.SpiderLabs / ResponderArchived

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.