Trending repositories

701.malicialab / avclass

AVClass malware labeling tool

702.mushorg / snare

Super Next generation Advanced Reactive honEypot

• honeypot
• security
• hacktoberfest

703.vitaly-kamluk / bitscout

Remote forensics meta tool

704.akamai-threat-research / mqtt-pwn

MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.

• python
• mqtt
• mqtt-broker
• mqtt-client
• iot
• exploitation
• +1 more

705.ektrah / nsec

A modern and easy-to-use cryptographic library for .NET based on libsodium

• aead
• aes-gcm
• blake2b
• chacha20-poly1305
• crypto
• cryptography
• +14 more

706.OpenIdentityPlatform / OpenDJ

OpenDJ is an open-source LDAP directory server written in Java. It provides robust, scalable, and secure directory services for identity management, access control, and authentication in enterprise environments. OpenDJ supports LDAPv3 standard, replication, REST APIs, and high-performance

• ldap-server
• ldap
• opendj
• rest
• rest2ldap
• opends
• +6 more

707.oasis-open / cti-python-stix2

OASIS TC Open Repository: Python APIs for STIX 2

• python
• stix
• stix2
• cyber-threat-intelligence
• json
• cti
• +1 more

708.kpcyrd / authoscope

Scriptable network authentication cracker

• rust
• cracking
• lua
• dictionary-attack
• concurrency
• password
• +2 more

709.smallwat3r / shhh

Share sensitive info without leaving a trace in your chat logs or email accounts.

710.DosX-dev / Astral-PE

Astral-PE is a low-level mutator (Headers/EP obfuscator) for native Windows PE files (x32/x64)

• cybersecurity
• hacktoberfest
• low-level
• mutator
• obfuscation
• obfuscator
• +12 more

711.potatosalad / erlang-jose

JSON Object Signing and Encryption (JOSE) for Erlang and Elixir

• jose
• cryptography
• jwt
• erlang
• elixir

712.mattcurrie / mgbdis

Game Boy ROM disassembler with RGBDS compatible output

• rgbds
• disassembler
• reverse-engineering
• game-boy
• gameboy

713.avaneev / komihash

Very fast, high-quality hash function, discrete-incremental and streamed hashing-capable (non-cryptographic, header-only C/C++) 27GB/s + PRNG

• hash
• hashing
• hashing-algorithm
• hash-function
• hash-table
• prng
• +14 more

714.89luca89 / pakkero

Pakkero is a binary packer written in Go made for fun and educational purpose. Its main goal is to take in input a program file (elf binary, script, even appimage) and compress it, protect it from tampering and intrusion.

• launcher
• payload
• elf
• elf-binaries
• golang
• upx
• +4 more

715.Hexastrike / PyrsistenceSniper

We took PersistenceSniper, merged it with Python, and misspelled it on purpose. Meet PyrsistenceSniper.

• cybersecurity
• cybersecurity-tools
• incident-response
• security
• security-audit
• security-tools

716.Warxim / petep

PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡

• proxy
• tcp
• tcp-proxy
• penetration-testing
• hacking
• security
• +14 more

717.dogoncouch / LogESP

Open Source SIEM (Security Information and Event Management system).

• siem
• risk-management
• risk-assessment
• vulnerability-management
• security
• security-tools
• +14 more

718.Cap-go / capacitor-social-login

Capacitor plugin to make login with Google,Apple,Facebook and so on, simple and fast to implement

• capacitor
• plugin
• capacitor-plugin

719.Juliusolsson05 / pharos-ai

Open-source OSINT intelligence dashboard tracking the Iran conflict in real time — live DeckGL/MapLibre conflict map, 30 bias-labeled feeds, actor dossiers, and daily briefs. Live at conflicts.app.

• deckgl
• geopolitics
• intelligence
• maplibre
• nextjs
• osint
• +1 more

720.spyre-project / spyre

simple YARA-based IOC scanner

• yara
• ioc
• security
• incident-response
• hacktoberfest
• windows
• +7 more

721.wernsey / chip8

A CHIP-8 interpreter, assembler and disassembler in C

• chip8
• chip-8
• chip8-emulator
• emulator
• sdl
• disassembler

722.Abblix / Oidc.Server

Flexible OpenID Connect and OAuth 2.0 server-side implementation for modern ASP.NET projects

• authentication
• authorization
• identity-management
• oauth2
• oidc
• oidc-server
• +13 more

723.ByteSnipers / mobile-pentest-toolkit

The MPT (Mobile Pentest Toolkit) is a must-have solution for your android penetration testing workflow.

• android
• android-pentesting
• mobile
• mobile-pentest
• pentest-tool
• mobile-pentest-toolkit
• +2 more

724.Banaanhangwagen / WINHELLO2hashcat

The repository host gives no description.

725.vahiiiid / go-rest-api-boilerplate

🚀 Production-ready AI-friendly Go REST API boilerplate with Clean Architecture, JWT auth, RBAC, PostgreSQL migrations, and highly tested. AI-optimized with built-in guidelines for most used IDEs. Docker hot-reload, Swagger docs, one-command setup. Build production APIs in minutes, not weeks.

• api
• api-documentation
• authentication
• backend
• boilerplate
• clean-architecture
• +14 more

726.zeybek / camouflage.nvim

Hide secrets like API keys, passwords and tokens in Neovim while screen sharing or streaming. Masks .env, JSON, YAML, TOML, XML, .http, Terraform/HCL and Dockerfiles with extmarks, without changing the file. Presentation mode, screen shield, picker and terminal masking.

• dotenv
• lua
• neovim
• neovim-plugin
• nvim
• privacy
• +13 more

727.hectorm / cardea

Cardea is an SSH bastion server with access control, session recording, and optional TPM-backed key protection.

• audit
• bastion
• firewall
• networking
• security
• ssh
• +1 more

728.materwelonDhruv / envapt

Typed, validated config from process.env, .env files, or any object, on Node, Bun, Deno, Cloudflare Workers, and the browser. No runtime dependencies.

• config
• decorators
• dotenv
• env
• settings
• typescript
• +12 more

729.mthamil107 / prompt-shield

Prompt-injection firewall for LLM applications — 33 input detectors, 9 output scanners, federated ed25519-signed threat-intel feed. Apache 2.0, 1040 tests, F1 96.0% with 0% false positives. Docker, GitHub Action, LangChain/LlamaIndex/CrewAI integrations.

• agentic-ai
• ai-safety
• fastapi
• langchain
• llm-firewall
• llm-security
• +14 more

730.aaronphifer / triagewall

Local-LLM alert triage for self-hosted SOCs.

• homelab
• ids
• llm
• ollama
• security
• self-hosted
• +7 more

731.cpeoples / ansible-security-scanner

🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.

• ansible
• ansible-playbook
• devsecops
• infrastructure-as-code
• sarif
• sast
• +14 more

732.tink-crypto / tinkArchived

Tink is a multi-language, cross-platform, open source library that provides cryptographic APIs that are secure, easy to use correctly, and hard(er) to misuse.

• cryptography
• java
• cpp
• go
• objc
• crypto
• +2 more

733.benbusby / whoogle-searchArchived

A self-hosted, ad-free, privacy-respecting metasearch engine

• adblock
• privacy
• docker
• heroku
• flask
• metasearch
• +5 more

734.michenriksen / gitrobArchived

Reconnaissance tool for GitHub organizations

• security
• osint
• github-api
• golang

735.coorasse / cancancan

The authorization Gem for Ruby on Rails.

• authorization
• cancancan
• rails

736.andresriancho / w3af

w3af: web application attack and audit framework, the open source web vulnerability scanner.

• scanner
• security
• appsec
• cross-site-scripting
• sql-injection

737.simov / grant

OAuth Proxy

• nodejs
• javascript
• oauth
• oauth2
• authentication
• authorization
• +14 more

738.lijiejie / subDomainsBrute

A fast sub domain brute tool for pentesters

739.Security-Onion-Solutions / security-onionArchived

Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management

• intrusion-detection
• network-security-monitoring
• log-management
• ids
• nsm
• hunting
• +1 more

740.google / binnaviArchived

BinNavi is a binary analysis IDE that allows to inspect, navigate, edit and annotate control flow graphs and call graphs of disassembled code.

• reverse-engineering
• java
• binnavi
• yfiles
• analysis

741.segmentio / chamber

CLI for managing secrets

742.wardencommunity / warden

General Rack Authentication Framework

743.jwt-dotnet / jwt

Jwt.Net, a JWT (JSON Web Token) implementation for .NET

• jwt
• json
• c-sharp
• authorization

744.dchest / captcha

Go package captcha implements generation and verification of image and audio CAPTCHAs.

• captcha
• image-captcha
• go
• audio-captchas

745.google / rekallArchived

Rekall Memory Forensic Framework

746.vaguileradiaz / tinfoleak

The most complete open-source tool for Twitter intelligence analysis

• osint
• socmint
• socialmedia
• twitter
• intelligence

747.dfunckt / django-rules

Awesome Django authorization, without the database

• python
• django
• permissions
• rules
• predicates
• authorization

748.aspnet / IdentityArchived

[Archived] ASP.NET Core Identity is the membership system for building ASP.NET Core web applications, including membership, login, and user data. Project moved to https://github.com/aspnet/AspNetCore

• aspnet-product

749.federicodotta / Brida

The new bridge between Burp Suite and Frida!

750.eldraco / domain_analyzer

Analyze the security of any domain by finding all the information possible. Made in python.

751.maliceio / maliceArchived

VirusTotal Wanna Be - Now with 100% more Hipster

• malice
• docker
• malware
• infosec
• virustotal
• elasticsearch
• +7 more

752.signalapp / libsignal-protocol-javaArchived

The repository host gives no description.

753.jtesta / ssh-mitmArchived

SSH man-in-the-middle tool

• penetration-testing
• ssh
• mitm
• man-in-the-middle
• man-in-the-middle-attack
• hacking

754.ueberauth / ueberauth

An Elixir Authentication System for Plug-based Web Applications

• elixir
• authentication
• authorization
• oauth2
• oauth
• ueberauth

755.mikespook / gorbac

goRBAC provides a lightweight role-based access control (RBAC) implementation in Golang.

• rbac
• go

756.pow-auth / pow

Robust, modular, and extendable user authentication system

• phoenix
• authentication
• authorization
• user-management
• elixir

757.martinus / robin-hood-hashingArchived

Fast & memory efficient hashtable based on robin hood hashing for C++11/14/17/20

• c-plus-plus
• hash-tables
• unordered-maps
• hash
• container
• header-only
• +6 more

758.ankane / lockbox

Modern encryption for Ruby and Rails

• encryption
• activerecord
• activestorage
• carrierwave
• mongoid
• libsodium

759.google / highwayhashArchived

Fast strong hash functions: SipHash/HighwayHash

760.mitreid-connect / OpenID-Connect-Java-Spring-Server

An OpenID Connect reference implementation in Java on the Spring platform.

761.mikechambers / as3corelib

An ActionScript 3 Library that contains a number of classes and utilities for working with ActionScript? 3. These include classes for MD5 and SHA 1 hashing, Image encoders, and JSON serialization as well as general String, Number and Date APIs.

762.lunasec-io / lunasec

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

• tokenization
• web-security
• compliance
• security
• soc2
• pci-dss
• +14 more

763.programa-stic / barf-project

BARF : A multiplatform open source Binary Analysis and Reverse engineering Framework

• binary-analysis
• reverse-engineering
• python
• x86
• arm
• reil

764.Invoke-IR / PowerForensics

PowerForensics provides an all in one platform for live disk forensic analysis

765.xFFFFF / Gekko-Strategies

Strategies to Gekko trading bot with backtests results and some useful tools.

• gekko
• strategies
• gekko-strategies
• gekko-backtest
• backtest-database
• cryptocurrency
• +14 more

766.kspearrin / Otp.NET

A .NET implementation of TOTP and HOTP for things like two-factor authentication codes.

• otp
• totp
• two-factor-authentication
• 2fa
• csharp
• dotnet
• +1 more

767.iGio90 / Dwarf

Full featured multi arch/os debugger built on top of PyQt5 and frida

• frida
• pyqt5
• reverse-engineering
• cracking
• unicorn-emulator
• capstone-engine
• +5 more

768.ValvePython / steam

☁️ Python package for interacting with Steam

• steam
• valve
• steamworks
• webapi
• authentication
• authenticator
• +6 more

769.HemmeligOrg / Hemmelig.appArchived

Keep your sensitive information out of chat logs, emails, and more with encrypted secrets.

• secret
• encryption
• onetimesecret
• password
• personal-data
• gdpr
• +9 more

770.AndroBugs / AndroBugs_FrameworkArchived

AndroBugs Framework is an efficient Android vulnerability scanner that helps developers or hackers find potential security vulnerabilities in Android applications. No need to install on Windows.

771.dagrz / aws_pwn

A collection of AWS penetration testing junk

772.snovvcrash / usbripArchived

Tracking history of USB events on GNU/Linux

• security
• forensics
• usb-events
• usb-history
• usb-devices

773.funkygao / cp-ddd-framework

TranslatedA lightweight DDD forward/reverse business modeling framework that supports the architectural evolution of complex business systems!

• ddd
• extension
• ddd-architecture
• clean-architecture
• framework
• enterprise-architecture
• +5 more

774.nccgroup / featherduster

An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction

• crypto
• cryptography
• encryption
• security
• python
• cryptanalysis
• +4 more

775.google / mundane

Mundane is a Rust cryptography library backed by BoringSSL that is difficult to misuse, ergonomic, and performant (in that order).

• cryptography
• rust
• boringssl

776.spatie / laravel-uptime-monitor

A powerful and easy to configure uptime and ssl monitor

• laravel
• php
• uptime-monitor
• monitoring
• ssl

777.microsoftgraph / microsoft-graph-toolkitArchived

Authentication Providers and UI components for Microsoft Graph 🦒

• web-components
• microsoft-graph-toolkit
• microsoft-graph
• mgt
• msal
• hacktoberfest
• +10 more

778.Abacus-Group-RTO / legionArchived

Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance and exploitation of information systems.

779.vivisect / vivisect

The repository host gives no description.

• reverse-engineering
• emulation
• disassembler

780.BcryptNet / bcrypt.net

BCrypt.Net - Bringing updates to the original bcrypt package

• blowfish
• bcrypt
• c-sharp
• algorithm
• hash
• netcore
• +6 more

781.fportantier / habu

Hacking Toolkit

• network-analysis
• networking
• scapy
• python3
• security-tools
• hacking
• +9 more

782.qeeqbox / honeypots

30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)

• pypi
• monitoring-tool
• network-analysis
• malware-analysis
• credentials
• honeypot
• +5 more

783.SecureAuthCorp / oauth2c

User-friendly OAuth2 CLI

• cli
• fapi
• oauth2
• openbanking
• oauth
• jwt

784.Storyyeller / enjarify

The repository host gives no description.

785.hasherezade / mal_unpack

Dynamic unpacker based on PE-sieve

• libpeconv
• pe-sieve
• memory-forensics
• malware-unpacker
• malware-analysis

786.Neo23x0 / Fenrir

Simple Bash IOC Scanner

787.mandiant / stringsifter

A machine learning tool that ranks strings based on their relevance for malware analysis.

• machine-learning
• fireeye-flare
• strings
• malware-analysis
• learning-to-rank
• reverse-engineering
• +1 more

788.orlikoski / CyLR

CyLR - Live Response Collection Tool

789.secrary / Andromeda

Andromeda - Interactive Reverse Engineering Tool for Android Applications

• android
• reverse-engineering
• binary-analysis
• static-analysis
• apk

790.miracl / MIRACL

MIRACL Cryptographic SDK: Multiprecision Integer and Rational Arithmetic Cryptographic Library is a C software library that is widely regarded by developers as the gold standard open source SDK for elliptic curve cryptography (ECC).

791.lxdvs / apk2gold

CLI tool for decompiling Android apps to Java. It does resources! It does Java! Its real easy!

792.sleuthkit / scalpel

Scalpel is an open source data carving tool. It is not being actively maintained.

793.mitre / multiscanner

Modular file scanning/analysis framework

• python
• analytic-machines
• analysis-framework
• python-script
• linux
• scanning
• +8 more

794.horsicq / Nauz-File-Detector

Linker/Compiler/Tool detector for Windows, Linux and MacOS.

• detect
• reverse-engineering
• signature
• malware-analysis
• malware-research
• malware-detection
• +2 more

795.misterch0c / malSploitBase

Malware exploits

796.0x4D31 / honeyLambda

honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway

• honeytoken
• honeypot
• security
• deception
• lambda
• serverless
• +2 more

797.paulmillr / noble-ed25519

Fastest 5KB JS implementation of ed25519 signatures

• ed25519
• curve25519
• eddsa
• cryptography
• noble
• x25519
• +6 more

798.ssh-vault / ssh-vault

🌰 encrypt/decrypt using ssh keys

• encryption
• aes-256
• ssh
• ssh-keys
• ed25519
• keys
• +3 more

799.ReversecLabs / dref

DNS Rebinding Exploitation Framework

• dns-rebinding
• red-team
• hacking
• web-hacking
• browser-hacking
• pentesting
• +3 more

800.TonyPhipps / Meerkat

A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.

• threat
• hunt
• red
• blue
• purple
• team
• +14 more