Trending repositories

701.dwyl / elixir-auth-google

👤Minimalist Google OAuth Authentication for Elixir Apps. Tested, Documented & Maintained. Setup in 5 mins. 🚀

• elixir
• google
• google-api
• auth
• authentication
• oauth
• +1 more

702.89luca89 / pakkero

Pakkero is a binary packer written in Go made for fun and educational purpose. Its main goal is to take in input a program file (elf binary, script, even appimage) and compress it, protect it from tampering and intrusion.

• launcher
• payload
• elf
• elf-binaries
• golang
• upx
• +4 more

703.Cybereason-Public / owLSM

Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities

• ebpf
• security
• linux-kernel
• linux-security-module
• sigma-rule

704.tenzir / threatbusArchived

🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.

• threat-intelligence
• threatintel
• threat-hunting
• ids
• zeek
• misp
• +7 more

705.karimhabush / cyberowl

Aggregates security advisories from 10 international CERTs daily and provides an AI skill that cross-references alerts against your project's tech stack.

• cve
• security
• security-alerts
• vulnerability
• cisa

706.erlef / oidcc

OpenId Connect client library in Erlang & Elixir

• client
• elixir
• erlang
• openid
• openid-client
• openid-connect
• +1 more

707.keikoproj / kube-forensics

The repository host gives no description.

708.Warxim / petep

PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡

• proxy
• tcp
• tcp-proxy
• penetration-testing
• hacking
• security
• +14 more

709.vikwin / pcapfex

'Packet Capture Forensic Evidence eXtractor' is a tool that finds and extracts files from packet capture files

710.mpast / mobileAudit

Django application that performs SAST and Malware Analysis for Android APKs

• android-security
• sast
• malware-analysis
• code-security
• defect-dojo
• virustotal
• +10 more

711.DelphiBuilder / NetCom7

The fastest communications possible. Delphi rulez.

• delphi
• object-pascal
• tcp-ip
• fast-networking
• multi-tier
• sockets
• +1 more

712.kerukuro / digestpp

C++11 header-only message digest library

• hash
• sha1
• sha256
• sha512
• sha3
• blake
• +14 more

713.sharplispers / ironclad

A cryptographic toolkit written in Common Lisp

714.omniauth / omniauth_openid_connect

The repository host gives no description.

• omniauth

715.antojoseph / diff-gui

GUI for Frida -Scripts

• frida
• frida-server
• gui
• diff-gui

716.n0kovo / hashcat-rules-collection

Hascat Rules Collection – Probably the largest collection of hashcat rule-files anywhere.

• hashcat
• hashcat-rules
• hashcat-rule
• password-cracking
• password-cracking-tool
• wordlist-generator
• +2 more

717.tp7309 / TTPassGen

TranslatedPassword generation tool: flexible and scriptable password dictionary generator which can support brute-force, combination, complex rule mode etc...

• password-generator
• password-dictionaries
• wordlist-generator
• brute-force
• crunch
• password
• +5 more

718.IronCoreLabs / recrypt-rs

A set of cryptographic primitives for building a multi-hop Proxy Re-encryption scheme, known as Transform Encryption.

• cryptography
• rust
• proxy-re-encryption
• transform-encryption
• ecc
• constant-time
• +1 more

719.shipcod3 / mazda_getInfo

A PoC that the USB port is an attack surface for a Mazda car's infotainment system and how Mazda hacks are made

720.0xBallpoint / trapster-community

Modern honeypot supporting multiple services, realistic website cloning, and AI-powered features

• cybersecurity
• honeypot
• python
• ai
• deceptive

721.Orange-Cyberdefense / graphcat

Generate graphs and charts based on password cracking result

• cracking
• hashcat
• matplotlib
• password

722.FutureComputing4AI / EMBER2024

The repository host gives no description.

723.in-toto / in-toto-golang

A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.

• in-toto
• software-supply-chain
• security

724.mgreen27 / Invoke-LiveResponse

Invoke-LiveResponse

• ir
• dfir
• winrm
• liveresponse
• forensics
• incident-response
• +1 more

725.sjhilt / GasPot

GasPot originally released at Blackhat 2015 - Updated for the same stuff 2026

726.ivre / masscanned

Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.

• networking
• udp
• ipv6
• ipv4
• tcp
• honeypot
• +8 more

727.ppomes / myanon

A mysqldump anonymizer

• mysqldump
• anonymizer
• database-anonymizer
• rgpd
• anonymization
• mysql
• +12 more

728.dereuromark / cakephp-tinyauth

CakePHP TinyAuth plugin for an easy and fast user authentication and authorization. Single or multi role. DB or config file based.

• cakephp-plugin
• acl
• multi-role
• php
• cakephp
• authentication
• +1 more

729.droberson / ELFcrypt

Simple ELF crypter. Uses RC4 encryption.

730.wernsey / chip8

A CHIP-8 interpreter, assembler and disassembler in C

• chip8
• chip-8
• chip8-emulator
• emulator
• sdl
• disassembler

731.mzfr / ctf-writeups

Writeups of Capture The Flag Competitions

• ctf
• picoctf
• writeups
• glug
• opentoall
• ota

732.Abblix / Oidc.Server

Flexible OpenID Connect and OAuth 2.0 server-side implementation for modern ASP.NET projects

• authentication
• authorization
• identity-management
• oauth2
• oidc
• oidc-server
• +13 more

733.SAP / cloud-active-defense

Add a layer of active defense to your cloud applications.

• cybersecurity
• deception
• decoy
• honeytoken
• infosec
• security

734.azrielnan / artex-ko-main

TranslatedAn AI multi-agent security testing platform for authorized security testing and local research.

735.deadtrickster / ssl_verify_fun.erl

Collection of ssl verification functions for Erlang

• ssl
• erlang
• security
• network
• tls
• certificate
• +3 more

736.ps1337 / automotive-security-research

This repository contains reverse engineering results and resources for a few specific car models of a very specific car manufacturer. Please don't sue.

• car-hacking
• automotive-security

737.lk-geimfari / secrets.clj

A library designed to generate cryptographically strong random numbers suitable for managing data such as passwords, account authentication, security tokens, and related secrets.

• clojure
• jvm
• secrets
• security
• random
• secure
• +12 more

738.cure53 / Publications

A whole bunch of public pentest reports & papers

739.hectorm / cetusguard

CetusGuard is a tool that protects the Docker daemon socket by filtering calls to its API endpoints.

• docker
• security
• container
• daemon
• firewall
• proxy

740.ucsb-seclab / packware

Effects of packers on machine-learning-based malware classifiers that use only static analysis

741.engity-com / bifroest

SSH server and gateway for standard SSH clients: OIDC Device Authorization, Docker/Kubernetes sessions, verifiable audit and recording.

• bastion
• oidc
• openid-connect
• ssh
• ssh-server
• sshd
• +5 more

742.bad-antics / nullsec-linux

🐧 Security-focused Linux distribution with 140+ tools, custom kernel 6.17.13, AI assistant | 5 editions | Cloud, AI/ML, Automotive, Hardware hacking

• hacking
• linux
• penetration-testing
• distro
• kernel
• nullsec
• +3 more

743.Cryptogenic / REBot

A discord bot for reverse engineers and exploit developers.

744.djadmin / fort

Audit and fix your Mac's security in one command. No agent, no signup, open source.

• cli
• compliance
• endpoint-security
• golang
• hardening
• iso27001
• +14 more

745.vahiiiid / go-rest-api-boilerplate

🚀 Production-ready AI-friendly Go REST API boilerplate with Clean Architecture, JWT auth, RBAC, PostgreSQL migrations, and highly tested. AI-optimized with built-in guidelines for most used IDEs. Docker hot-reload, Swagger docs, one-command setup. Build production APIs in minutes, not weeks.

• api
• api-documentation
• authentication
• backend
• boilerplate
• clean-architecture
• +14 more

746.boazeb / papervault

Paper vault for passwords and secrets

• cryptocurrency
• cryptography
• cybersecurity
• digital-asset-security
• password-manager

747.pic-standard / pic-standard

Open standard for Provenance & Intent Contracts (PIC) in AI agents. Verify intent, provenance, and evidence before high-impact tool calls.

• action-proposals
• agentic-ai
• agents
• ai
• cli
• crewai
• +14 more

748.vbacollective / wasabi

VBA WebSocket, WSS and TCP client with native TLS 1.2/1.3, MQTT, proxy, x86/x64. No COM, no DLLs, no installs.

• excel
• office
• real-time
• tls
• vba
• websocket
• +14 more

749.mbiesiad / awesome-hackathons

😎 Awesome lists about Hackathons around the globe! ✨🎉

• awesome
• hackathon
• hackathons
• awesome-list
• competition
• competitions
• +2 more

750.coregx / gxpdf

GxPDF - Enterprise-grade PDF library for Go. Table extraction, text parsing, encryption, document creation.

• go
• golang
• open-source
• pdf
• pdf-encryption
• pdf-generation
• +4 more

751.0xVavaldi / ruleprocessorY

Rule Processor Y is a next-gen Rule processor with complex multibyte character support built to support Hashcat

• cybersecurity
• hashcat
• hashcat-rules
• johntheripper
• jtr
• mdxfind
• +2 more

752.JeongJaeSoon / agent-guard

Real-time secret-leak guardrails for AI coding agents (Claude Code, Codex), Git hooks, and CI.

• ai-agents
• claude-code
• claude-code-plugin
• codex
• devsecops
• github-actions
• +3 more

753.hectorm / cardea

Cardea is an SSH bastion server with access control, session recording, and optional TPM-backed key protection.

• audit
• bastion
• firewall
• networking
• security
• ssh
• +1 more

754.ruppde / crypto_puzzles

Crypto Puzzles is a tool and library to provide a bunch of functions for encryption or pseudo encryption as puzzles or brain teasers. Awesome for kids but some puzzles are also a challenge for adults.

• crypto
• puzzle
• puzzle-game
• puzzle-generator
• brain-teaser-game
• crackmes
• +5 more

755.0xVavaldi / gramify

Create n-grams of wordlists based on words, characters, or charsets to use in offline password attacks and data analysis

• hashcat
• jtr
• mdxfind
• ngram
• password
• password-analysis
• +1 more

756.algorandfoundation / liquid-auth

Liquid Auth Service

• authentication
• fido2
• p2p
• passkeys
• webrtc

757.FileShot / FileShotZKE

Client-side AES-256-GCM zero-knowledge encryption library. Browser-native Web Crypto API, no dependencies. Powers FileShot.io.

• aes-256
• aes-256-gcm
• browser-encryption
• client-side-encryption
• encryption
• file-sharing
• +5 more

758.OpenIDC / ngx_oauth2_module

OAuth 2.x Resource Server module for NGINX

• nginx
• oauth2
• oauth2-resource-server
• c
• nginx-module
• oauth

759.mthamil107 / prompt-shield

Prompt-injection firewall for LLM applications — 33 input detectors, 9 output scanners, federated ed25519-signed threat-intel feed. Apache 2.0, 1040 tests, F1 96.0% with 0% false positives. Docker, GitHub Action, LangChain/LlamaIndex/CrewAI integrations.

• agentic-ai
• ai-safety
• fastapi
• langchain
• llm-firewall
• llm-security
• +14 more

760.sorkila / tintpad

It falls out of your notch. Hotkey, repo, Return: your terminal opens with Claude Code, Codex or any agent already running. Free, MIT, local-only macOS.

• ai
• claude
• cli
• codex
• developer-tools
• launcher
• +13 more

761.alib8b8 / aflare

Local-first automation Agent & deterministic workflow engine — the secure control layer between AI and your data. Data stays local. Connect your own LLM / files / notes / databases via Connector API. ReAct reasoning · DAG/WAL/Saga/idempotent execution · MCP · offline-capable.

• automation
• llm
• mcp
• agent
• dag
• go
• +14 more

762.brancogao / webhook-debugger

Capture, inspect, and replay webhooks with 90-day history + signature verification. Built on Cloudflare Workers + D1.

• cloudflare-workers
• d1
• debugger
• self-hosted
• serverless
• sqlite
• +14 more

763.cpeoples / ansible-security-scanner

🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.

• ansible
• ansible-playbook
• devsecops
• infrastructure-as-code
• sarif
• sast
• +14 more

764.sE2EEnd / sE2EEnd

File transfer solution with end-to-end encryption.

• e2ee
• e2ee-encryption
• encryption
• filetransfer
• e2e-encryption
• file-transfer

765.getveil / veil

Keep your secrets out of your AI coding agents. A local HTTPS proxy that swaps real credentials with placeholders and injects them at the network boundary.

• ai-agents
• claude-code
• cli
• developer-tools
• golang
• mitm-proxy
• +2 more

766.zakariagharzouli / sparda

AI writes. SPARDA proves. A deterministic, offline gate that catches when an AI edit removes a guard, exposes a route, or breaks an invariant — no API key, right in the agent edit loop.

• ai-agents
• ai-code-review
• authorization
• bola
• claude-code
• guardrails
• +4 more