Trending repositories

701.dchest / captcha

Go package captcha implements generation and verification of image and audio CAPTCHAs.

• captcha
• image-captcha
• go
• audio-captchas

702.manfredsteyer / angular-oauth2-oidc

Support for OAuth 2 and OpenId Connect (OIDC) in Angular.

703.fofapro / fapro

Fake Protocol Server

• rdp
• ssh
• ftp
• protocols
• samba
• simulation
• +12 more

704.sidebase / nuxt-auth

Authentication built for Nuxt! Easily add authentication via OAuth providers, credentials or Email Magic URLs!

• authentication
• nuxt
• users
• session
• typescript
• local
• +1 more

705.Invoke-IR / PowerForensics

PowerForensics provides an all in one platform for live disk forensic analysis

706.markets / invisible_captcha

🍯 Unobtrusive and flexible spam protection for Rails apps

• honeypot
• rails
• anti-spam
• captcha
• security
• honeypot-field
• +1 more

707.P3GLEG / Whaler

Program to reverse Docker images into Dockerfiles

• security-tools
• security
• docker-security
• reverse-engineering
• docker-image
• dockerfile
• +2 more

708.endgameinc / RTA

The repository host gives no description.

709.microsoftgraph / microsoft-graph-toolkitArchived

Authentication Providers and UI components for Microsoft Graph 🦒

• web-components
• microsoft-graph-toolkit
• microsoft-graph
• mgt
• msal
• hacktoberfest
• +10 more

710.TryCatchHCF / DumpsterFire

"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.

• pentesting
• hacking
• hacking-tool
• pentest-tool
• automation
• security
• +9 more

711.vivisect / vivisect

The repository host gives no description.

• reverse-engineering
• emulation
• disassembler

712.BcryptNet / bcrypt.net

BCrypt.Net - Bringing updates to the original bcrypt package

• blowfish
• bcrypt
• c-sharp
• algorithm
• hash
• netcore
• +6 more

713.pjlantz / droidbox

Dynamic analysis of Android apps

714.XKCP / XKCP

eXtended Keccak Code Package

715.allaboutapps / go-starter

An opinionated production-ready SQL-/Swagger-first RESTful JSON API written in Go, highly integrated with VSCode DevContainers by allaboutapps.

• golang-development
• vscode-devcontainers
• golang
• go
• server
• oauth2
• +9 more

716.ReversecLabs / leonidas

Automated Attack Simulation in the Cloud, complete with detection use cases.

717.horsicq / Nauz-File-Detector

Linker/Compiler/Tool detector for Windows, Linux and MacOS.

• detect
• reverse-engineering
• signature
• malware-analysis
• malware-research
• malware-detection
• +2 more

718.mozilla / mozilla-django-oidc

A django OpenID Connect library

719.akamai-threat-research / mqtt-pwn

MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.

• python
• mqtt
• mqtt-broker
• mqtt-client
• iot
• exploitation
• +1 more

720.OpenIdentityPlatform / OpenDJ

OpenDJ is an open-source LDAP directory server written in Java. It provides robust, scalable, and secure directory services for identity management, access control, and authentication in enterprise environments. OpenDJ supports LDAPv3 standard, replication, REST APIs, and high-performance

• ldap-server
• ldap
• opendj
• rest
• rest2ldap
• opends
• +6 more

721.jasonish / docker-suricata

A Suricata Docker image.

• suricata
• ids
• nsm
• docker
• container
• podman

722.dalibo / ldap2pg

:elephant: :busts_in_silhouette: Manage PostgreSQL roles and privileges from YAML or LDAP

• ldap
• postgresql
• yaml
• roles
• acl
• privileges
• +4 more

723.ThreatRecall / zettelforge

Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents

• claude-code
• cti
• llm
• rag
• threat-hunting
• threat-intelligence
• +14 more

724.coregx / gxpdf

GxPDF - Enterprise-grade PDF library for Go. Table extraction, text parsing, encryption, document creation.

• go
• golang
• open-source
• pdf
• pdf-encryption
• pdf-generation
• +4 more

725.QuipNetwork / hashsigs-rs

Hash-based post quantum signatures in Rust

726.QuipNetwork / hashsigs-solidity

Solidity contracts implementing hash based post quantum signatures

727.google / android-classysharkArchived

Android and Java bytecode viewer

• dex
• classyshark
• jar
• android
• java
• apk
• +4 more

728.loov / lensm

Go assembly and source viewer

729.coffeehb / Some-PoC-oR-ExP

各种漏洞poc、Exp的收集或编写

730.evilcos / xssor2

XSS'OR - Hack with JavaScript.

• probe
• pentest-tool
• xss
• csrf
• encoding
• hacking-tool
• +2 more

731.maliceio / maliceArchived

VirusTotal Wanna Be - Now with 100% more Hipster

• malice
• docker
• malware
• infosec
• virustotal
• elasticsearch
• +7 more

732.iGio90 / Dwarf

Full featured multi arch/os debugger built on top of PyQt5 and frida

• frida
• pyqt5
• reverse-engineering
• cracking
• unicorn-emulator
• capstone-engine
• +5 more

733.greg7mdp / sparsepp

A fast, memory efficient hash map for C++

• hash-tables
• sparse-containers
• unordered
• sparsehash
• hashmap
• hash
• +2 more

734.dagrz / aws_pwn

A collection of AWS penetration testing junk

735.iagox86 / hash_extender

The repository host gives no description.

736.strazzere / android-unpacker

Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0

• android-unpacker
• gdb
• qemu
• reverse-engineering
• android
• unpacker

737.lepture / captcha

A captcha library that generates audio and image CAPTCHAs.

• captcha

738.OpenIDC / mod_auth_openidc

OpenID Certified™ OpenID Connect and FAPI 2 Relying Party module for Apache HTTPd

• apache-httpd
• openid-connect
• openidconnect-client
• openidc
• c
• authentication
• +3 more

739.clarkeash / doorman

Limit access to your Laravel applications by using invite codes

• php
• laravel
• laravel-package
• doorman
• invite

740.rfunix / Pompem

Find exploit tool

• exploit-database
• python
• pentest-tool
• exploits
• security-tools

741.AndroidVTS / android-vts

Android Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents an on-device app to test for recent device vulnerabilities.

742.mxrch / penglab

🐧 Abuse of Google Colab for cracking hashes.

743.cisagov / untitledgoosetool

Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.

744.sleuthkit / scalpel

Scalpel is an open source data carving tool. It is not being actively maintained.

745.BR903 / ELFkickers

A collection of programs that access and manipulate ELF files.

746.NSAKEY / nsa-rules

Password cracking rules and masks for hashcat that I generated from cracked passwords.

747.maaaaz / androwarn

Yet another static code analyzer for malicious Android applications

748.juice-shop / juice-shop-ctf

Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF

• owasp
• ctf
• ctfd
• application-security
• capture-the-flag
• pentesting
• +11 more

749.r3nt0n / torDDoS

DDoS attacks over Tor

• ddos
• ddos-tool
• ddos-attack
• ddos-script
• ddos-attacks
• hacking
• +5 more

750.muellerberndt / apkx

One-Step APK Decompilation With Multiple Backends

751.p0w3rsh3ll / AutoRuns

🚀AutoRuns is a PowerShell module that will help do live incident response and enumerate autoruns artifacts that may be used by legitimate programs as well as malware to achieve persistence.

752.drego85 / JoomlaScan

A free software to find the components installed in Joomla CMS, built out of the ashes of Joomscan.

753.pralab / secml_malware

Create adversarial attacks against machine learning Windows malware detectors

• adversarial-machine-learning
• infosec
• python
• attack
• machine-learning
• security

754.Abblix / Oidc.Server

Flexible OpenID Connect and OAuth 2.0 server-side implementation for modern ASP.NET projects

• authentication
• authorization
• identity-management
• oauth2
• oidc
• oidc-server
• +13 more

755.hookprobe / hookprobe

🛡️ Free AI that blocks hackers while you sleep. Runs on cheap hardware. When someone in Tokyo gets attacked, you're protected in 30 seconds. No fees. No experts needed. Just protection. One node's detection → everyone's protection.

• ai-security
• cybersecurity
• ids
• iot-security
• ips
• open-source-security
• +14 more

756.mthamil107 / prompt-shield

Prompt-injection firewall for LLM applications — 33 input detectors, 9 output scanners, federated ed25519-signed threat-intel feed. Apache 2.0, 1040 tests, F1 96.0% with 0% false positives. Docker, GitHub Action, LangChain/LlamaIndex/CrewAI integrations.

• agentic-ai
• ai-safety
• fastapi
• langchain
• llm-firewall
• llm-security
• +14 more

757.Yousha / DFIR-Specialist-Roadmap

Digital forensic (DFIR) specialist roadmap.

• chfi
• cyber-defense
• cyber-forensics
• dfir
• digital-forensics
• incident-response
• +3 more

758.cuckoosandbox / cuckooArchived

Cuckoo Sandbox is an automated dynamic malware analysis system

759.geohot / qira

QEMU Interactive Runtime Analyser

760.jwt / ruby-jwt

A ruby implementation of the RFC 7519 OAuth JSON Web Token (JWT) standard.

• jwt
• ruby-jwt
• oauth-json-web
• ruby
• jwt-token
• jwk

761.Security-Onion-Solutions / security-onionArchived

Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management

• intrusion-detection
• network-security-monitoring
• log-management
• ids
• nsm
• hunting
• +1 more

762.lexik / LexikJWTAuthenticationBundle

JWT authentication for your Symfony API

• symfony
• symfony-bundle
• php
• jwt
• authentication

763.tunz / js-vuln-db

A collection of JavaScript engine CVEs with PoCs

• javascript
• cve
• vulnerability

764.ruby-oauth / oauth2

🔐 oauth2 - A Ruby wrapper for the OAuth 2.0, & 2.1 Authorization Frameworks, including OpenID Connect (OIDC)

• authentication
• authorization
• oauth2
• oauth2-client
• security
• oidc
• +1 more

765.hlandau / acmetool

:lock: acmetool, an automatic certificate acquisition tool for ACME (Let's Encrypt)

• acmetool
• certificate
• acme-server
• acme
• letsencrypt
• ssl
• +2 more

766.mikespook / gorbac

goRBAC provides a lightweight role-based access control (RBAC) implementation in Golang.

• rbac
• go

767.programa-stic / barf-project

BARF : A multiplatform open source Binary Analysis and Reverse engineering Framework

• binary-analysis
• reverse-engineering
• python
• x86
• arm
• reil

768.alphasoc / flightsim

A utility to safely generate malicious network traffic patterns and evaluate controls.

• security
• testing-tools
• monitoring
• intrusion-detection

769.uber-common / metta

An information security preparedness tool to do adversarial simulation.

• uber
• vagrant
• yaml
• celery
• python
• redis
• +7 more

770.nccgroup / featherduster

An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction

• crypto
• cryptography
• encryption
• security
• python
• cryptanalysis
• +4 more

771.sonyxperiadev / ApkAnalyserArchived

The repository host gives no description.

772.Neo23x0 / munin

Online hash checker for Virustotal and other services

773.honeynet / apkinspector

APKinspector is a powerful GUI tool for analysts to analyze the Android applications.

774.dedis / kyber

Advanced crypto library for the Go language

• crypto-library
• elliptic-curves
• go

775.StamusNetworks / scirius

Scirius is a web application for Suricata ruleset management and threat hunting.

• python
• security
• management
• interface
• suricata
• signatures
• +8 more

776.danielberkompas / cloak

Elixir encryption library designed for Ecto

• elixir
• encryption
• ecto
• hex

777.misterch0c / malSploitBase

Malware exploits

778.algolia / sup3rS3cretMes5age

Simple to use, simple to deploy, one time self destruct messaging service, with hashicorp vault as a backend

• golang
• vault
• security
• secrets
• hashicorp-vault

779.mushorg / snare

Super Next generation Advanced Reactive honEypot

• honeypot
• security
• hacktoberfest

780.vitaly-kamluk / bitscout

Remote forensics meta tool

781.kpcyrd / authoscope

Scriptable network authentication cracker

• rust
• cracking
• lua
• dictionary-attack
• concurrency
• password
• +2 more

782.cnpack / cnvcl

CnPack VCL Components

• cnpack-vcl-components
• cnpack
• delphi
• pascal
• sm2
• sm2-signature-verification
• +6 more

783.czs108 / Windows-PE-Packer

🗜️ A packer for Windows x86 executable files written in C and Intel x86 Assembly. The new file after packing can obstruct reverse engineering（使用C和Intel x86汇编开发的Windows x86可执行文件打包工具，打包后的新文件可以阻碍逆向工程）

• windows
• reverse-engineering
• security
• pe

784.89luca89 / pakkero

Pakkero is a binary packer written in Go made for fun and educational purpose. Its main goal is to take in input a program file (elf binary, script, even appimage) and compress it, protect it from tampering and intrusion.

• launcher
• payload
• elf
• elf-binaries
• golang
• upx
• +4 more

785.erlef / oidcc

OpenId Connect client library in Erlang & Elixir

• client
• elixir
• erlang
• openid
• openid-client
• openid-connect
• +1 more

786.wqweto / VbAsyncSocket

Sockets with pure VB6 impl of TLS encryption

• vb6
• ssl
• tls
• winsock
• async
• x25519
• +11 more

787.AlexanderBagel / ProcessMemoryMap

Deep memory analysis for Windows processes — the tool that saves you hours of debugging

• analyzer
• binary-analysis
• delphi
• dissassembler
• memory-analysis
• pe-format
• +2 more

788.omar2535 / GraphQLer

🔍A cutting edge context aware GraphQL API fuzzing tool!

• api-testing-framework
• graphql
• api
• automated-testing
• cybersecurity
• pentesting
• +3 more

789.OpenIDC / liboauth2

OAuth 2.x and OpenID Connect C library

• oauth2
• openid-connect
• c
• oauth

790.cure53 / Publications

A whole bunch of public pentest reports & papers

791.vbacollective / wasabi

VBA WebSocket, WSS and TCP client with native TLS 1.2/1.3, MQTT, proxy, x86/x64. No COM, no DLLs, no installs.

• excel
• office
• real-time
• tls
• vba
• websocket
• +14 more

792.c-goosen / ai-prompt-ctf

Agentic LLM CTF to test prompt injection attacks and preventions

793.Zandereins / schliff

Deterministic quality scorer for AI agent instruction files — 8-dimension scoring with security, multi-format (SKILL.md, CLAUDE.md, .cursorrules, AGENTS.md), anti-gaming detection, zero dependencies

• autoresearch
• claude-code
• cli
• developer-tools
• linter
• python
• +8 more

794.katspaugh / machine

One isolated Lima VM per GitHub project — sandboxed Claude Code/Codex, Docker, Node, signed git

• ai-agents
• claude-code
• developer-tools
• lima
• macos
• sandbox
• +1 more

795.alib8b8 / aflare

Local-first automation Agent & deterministic workflow engine — the secure control layer between AI and your data. Data stays local. Connect your own LLM / files / notes / databases via Connector API. ReAct reasoning · DAG/WAL/Saga/idempotent execution · MCP · offline-capable.

• automation
• llm
• mcp
• agent
• dag
• go
• +14 more

796.abraham / twitteroauth

The most popular PHP library for use with the Twitter OAuth REST API.

• twitter-oauth
• php
• twitter-api
• php-library
• twitter
• twitteroauth
• +1 more

797.lynndylanhurley / devise_token_auth

Token based authentication for Rails JSON APIs. Designed to work with jToker and ng-token-auth.

• devise
• rails
• authentication
• api
• oauth
• omniauth

798.bitwarden / desktopArchived

The desktop vault (Windows, macOS, & Linux).

• bitwarden
• javascript
• typescript
• angular
• electron

799.plasma-disassembler / plasma

Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.

• reverse-engineering
• disassembler
• capstone
• x86
• x86-64
• mips
• +1 more

800.sensepost / ruler

A tool to abuse Exchange services

• mapi
• exchange
• shells
• pentesting