Trending repositories

801.UnkL4b / GitMiner

Tool for advanced mining for content on Github

• gitminer
• information-gathering-tool
• git-mining-tool

802.hlandau / acmetool

:lock: acmetool, an automatic certificate acquisition tool for ACME (Let's Encrypt)

• acmetool
• certificate
• acme-server
• acme
• letsencrypt
• ssl
• +2 more

803.dfunckt / django-rules

Awesome Django authorization, without the database

• python
• django
• permissions
• rules
• predicates
• authorization

804.dghubble / gologin

Go login handlers for authentication providers (OAuth1, OAuth2)

805.jtesta / ssh-mitmArchived

SSH man-in-the-middle tool

• penetration-testing
• ssh
• mitm
• man-in-the-middle
• man-in-the-middle-attack
• hacking

806.programa-stic / barf-project

BARF : A multiplatform open source Binary Analysis and Reverse engineering Framework

• binary-analysis
• reverse-engineering
• python
• x86
• arm
• reil

807.damienbod / angular-auth-oidc-client

npm package for OpenID Connect, OAuth Code Flow with PKCE, Refresh tokens, Implicit Flow

• openid
• angular
• implicit-flow
• npm
• security
• oauth2
• +6 more

808.dark-lbp / isfArchived

ISF(Industrial Control System Exploitation Framework)，a exploitation framework based on Python

• ics
• ics-exp
• ics-poc
• scapy
• isf
• modbus
• +3 more

809.endgameinc / RTA

The repository host gives no description.

810.kaonashi-passwords / Kaonashi

Wordlist, rules and masks from Kaonashi project (RootedCON 2019)

• wordlist
• password
• password-strength
• password-safety
• dictionary-attack
• dictionary
• +10 more

811.PagerDuty / incident-response-docs

PagerDuty's Incident Response Documentation.

• pagerduty
• incident-response
• documentation
• oncall
• team-security

812.TryCatchHCF / DumpsterFire

"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.

• pentesting
• hacking
• hacking-tool
• pentest-tool
• automation
• security
• +9 more

813.vivisect / vivisect

The repository host gives no description.

• reverse-engineering
• emulation
• disassembler

814.mandiant / stringsifter

A machine learning tool that ranks strings based on their relevance for malware analysis.

• machine-learning
• fireeye-flare
• strings
• malware-analysis
• learning-to-rank
• reverse-engineering
• +1 more

815.miracl / MIRACL

MIRACL Cryptographic SDK: Multiprecision Integer and Rational Arithmetic Cryptographic Library is a C software library that is widely regarded by developers as the gold standard open source SDK for elliptic curve cryptography (ECC).

816.Paradoxis / StegCrackerArchived

Steganography brute-force utility to uncover hidden data inside files

• steghide
• steganography
• ctf-tools
• ctf
• brute-force
• stegcracker
• +2 more

817.hyperboloide / lk

Simple licensing library for golang.

• golang
• sign
• crypto

818.cnpack / cnvcl

CnPack VCL Components

• cnpack-vcl-components
• cnpack
• delphi
• pascal
• sm2
• sm2-signature-verification
• +6 more

819.brndnmtthws / dryoc

Don't Roll Your Own Crypto: fast, type-safe, pure-Rust cryptography with post-quantum support

• libsodium
• crypto
• rust
• cryptography
• cryptography-library
• nacl
• +3 more

820.sansecio / magevulndb

List of Magento extensions with known security issues.

• magento
• extensions
• vulnerability

821.EricZimmerman / RECmd

Command line access to the Registry

822.omar2535 / GraphQLer

🔍A cutting edge context aware GraphQL API fuzzing tool!

• api-testing-framework
• graphql
• api
• automated-testing
• cybersecurity
• pentesting
• +3 more

823.mthamil107 / prompt-shield

Prompt-injection firewall for LLM applications — 33 input detectors, 9 output scanners, federated ed25519-signed threat-intel feed. Apache 2.0, 1040 tests, F1 96.0% with 0% false positives. Docker, GitHub Action, LangChain/LlamaIndex/CrewAI integrations.

• agentic-ai
• ai-safety
• fastapi
• langchain
• llm-firewall
• llm-security
• +14 more

824.tunz / js-vuln-db

A collection of JavaScript engine CVEs with PoCs

• javascript
• cve
• vulnerability

825.Cisco-Talos / pyreboxArchived

Python scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU

826.praetorian-inc / Hob0RulesArchived

Password cracking rules for Hashcat based on statistics and industry patterns

827.DaGenix / rust-crypto

A (mostly) pure-Rust implementation of various cryptographic algorithms.

828.dagrz / aws_pwn

A collection of AWS penetration testing junk

829.snovvcrash / usbripArchived

Tracking history of USB events on GNU/Linux

• security
• forensics
• usb-events
• usb-history
• usb-devices

830.sonyxperiadev / ApkAnalyserArchived

The repository host gives no description.

831.orion-rs / orion

Usable, easy and safe pure-Rust crypto

• cryptography
• rust
• crypto
• chacha20-poly1305
• aead
• blake2b
• +13 more

832.danielberkompas / cloak

Elixir encryption library designed for Ecto

• elixir
• encryption
• ecto
• hex

833.algolia / sup3rS3cretMes5age

Simple to use, simple to deploy, one time self destruct messaging service, with hashicorp vault as a backend

• golang
• vault
• security
• secrets
• hashicorp-vault

834.maaaaz / androwarn

Yet another static code analyzer for malicious Android applications

835.juice-shop / juice-shop-ctf

Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF

• owasp
• ctf
• ctfd
• application-security
• capture-the-flag
• pentesting
• +11 more

836.OpenIdentityPlatform / OpenDJ

OpenDJ is an open-source LDAP directory server written in Java. It provides robust, scalable, and secure directory services for identity management, access control, and authentication in enterprise environments. OpenDJ supports LDAPv3 standard, replication, REST APIs, and high-performance

• ldap-server
• ldap
• opendj
• rest
• rest2ldap
• opends
• +6 more

837.Razikus / supabase-nextjs-template

A production-ready SaaS template built with Next.js 15, Supabase, and Tailwind CSS. Includes authentication, user management, file storage, task management demos, and secure RLS policies. Now with a complete React Native + Expo mobile app template! Easily customizable with pre-built themes, i18n support (EN/PL/ZH), and legal documents.

• nextjs
• react
• sass
• supabase
• template

838.LDO-CERT / orochi

The Volatility Collaborative GUI

• volatility-gui
• volatility-framework
• volatility
• memory-dump
• orochi
• dask
• +1 more

839.andrewmichaelsmith / bluepot

Bluetooth Honeypot

840.melvinodsa / go-iam

iam platform written in golang

841.hookprobe / hookprobe

🛡️ Free AI that blocks hackers while you sleep. Runs on cheap hardware. When someone in Tokyo gets attacked, you're protected in 30 seconds. No fees. No experts needed. Just protection. One node's detection → everyone's protection.

• ai-security
• cybersecurity
• ids
• iot-security
• ips
• open-source-security
• +14 more

842.blank-query / lazyVPN-for-Omarchy

LazyVPN is an Omarchy VPN manager for WireGuard connections. It replaces manual systemd-networkd configuration with a fast, keyboard-driven TUI featuring killswitch, auto-recovery, and Waybar integration.

• linux
• mullvad-vpn
• omarchy
• omarchy-linux
• privacy
• protonvpn
• +7 more

843.sE2EEnd / sE2EEnd

File transfer solution with end-to-end encryption.

• e2ee
• e2ee-encryption
• encryption
• filetransfer
• e2e-encryption
• file-transfer

844.lynndylanhurley / devise_token_auth

Token based authentication for Rails JSON APIs. Designed to work with jToker and ng-token-auth.

• devise
• rails
• authentication
• api
• oauth
• omniauth

845.ueberauth / guardian

Elixir Authentication

• elixir
• jwt
• authentication
• plug
• jwt-tokens
• phoenix
• +1 more

846.dchest / tweetnacl-js

Port of TweetNaCl cryptographic library to JavaScript

• crypto
• javascript
• authentication
• signature
• elliptic-curves
• secretbox
• +9 more

847.anhskohbo / no-captcha

No CAPTCHA reCAPTCHA For Laravel.

• captcha
• captcha-recaptcha
• php
• laravel

848.signalapp / libsignal-protocol-javaArchived

The repository host gives no description.

849.zquestz / omniauth-google-oauth2

Oauth2 strategy for Google

• ruby
• omniauth
• google-oauth2
• oauth2

850.AndroBugs / AndroBugs_FrameworkArchived

AndroBugs Framework is an efficient Android vulnerability scanner that helps developers or hackers find potential security vulnerabilities in Android applications. No need to install on Windows.

851.spatie / laravel-uptime-monitor

A powerful and easy to configure uptime and ssl monitor

• laravel
• php
• uptime-monitor
• monitoring
• ssl

852.Neo23x0 / Raccine

A Simple Ransomware Vaccine

853.OpenHFT / Zero-Allocation-Hashing

Zero-allocation hashing for Java

• java
• hashing
• high-performance
• farmhash
• murmurhash3
• cityhash
• +3 more

854.leetonidas / demovfuscator

A work-in-progress deobfuscator for movfuscated binaries

855.lxdvs / apk2gold

CLI tool for decompiling Android apps to Java. It does resources! It does Java! Its real easy!

856.droberson / ssh-honeypot

Fake sshd that logs ip addresses, usernames, and passwords.

857.GoSecure / dtd-finder

List DTDs and generate XXE payloads using those local DTDs.

• xxe
• dtd
• security
• hacktoberfest

858.dod-cyber-crime-center / DC3-MWCP

DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.

• python
• malware-analysis
• automation
• config-dump
• framework
• malware-automation

859.89luca89 / pakkero

Pakkero is a binary packer written in Go made for fun and educational purpose. Its main goal is to take in input a program file (elf binary, script, even appimage) and compress it, protect it from tampering and intrusion.

• launcher
• payload
• elf
• elf-binaries
• golang
• upx
• +4 more

860.BastiaanJansen / otp-java

A small and easy-to-use one-time password generator library for Java implementing RFC 4226 (HOTP) and RFC 6238 (TOTP).

• java
• otp
• totp
• hotp
• 2fa
• two-factor-authentication
• +4 more

861.nxenon / h2spacex

HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy‌ + Exploit Timing Attacks

• http2
• race-condition
• race-conditions
• scapy
• single-packet-attack
• last-frame-synchronization

862.ps1337 / automotive-security-research

This repository contains reverse engineering results and resources for a few specific car models of a very specific car manufacturer. Please don't sue.

• car-hacking
• automotive-security

863.Myr-Aya / GouvernAI-claude-code-plugin

Runtime guardrails for Claude Code. Auto-approve what's safe, gate what's risky, block what's dangerous. Dual enforcement, full audit trail. MIT.

• agentic-ai
• claude
• claude-code
• claude-code-plugin
• destructive-commands
• safety
• +4 more

864.facebookarchive / fbctfArchived

Platform to host Capture the Flag competitions

• ctf
• ctf-framework

865.buttercup / buttercup-desktopArchived

:key: Cross-Platform Passwords & Secrets Vault

• password-manager
• password-vault
• encryption
• electron
• security
• buttercup
• +1 more

866.OAuthSwift / OAuthSwift

Swift based OAuth library for iOS

• oauthswift
• oauth
• oauth2-client
• oauth-client
• oauth1
• oauth2
• +1 more

867.google / nogotofailArchived

An on-path blackbox network traffic security testing tool

868.eldraco / domain_analyzer

Analyze the security of any domain by finding all the information possible. Made in python.

869.citronneur / rdpy

Remote Desktop Protocol in Twisted Python

870.taviso / ctftool

Interactive CTF Exploration Tool

• security
• reverse-engineering
• windows
• windows-internals

871.mitreid-connect / OpenID-Connect-Java-Spring-Server

An OpenID Connect reference implementation in Java on the Spring platform.

872.Sorcery / sorcery

Magical Authentication

• sorcery
• authentication
• rails
• ruby

873.AndroidVTS / android-vts

Android Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents an on-device app to test for recent device vulnerabilities.

874.dvsekhvalnov / jose-jwt

Ultimate Javascript Object Signing and Encryption (JOSE), JSON Web Token (JWT) and Json Web Keys (JWK) Implementation for .NET and .NET Core

• jose
• jwt
• json
• jwa
• jwe
• jws
• +13 more

875.o1egl / paseto

Platform-Agnostic Security Tokens implementation in GO (Golang)

• go
• golang
• token
• past
• auth
• authentication
• +7 more

876.Neo23x0 / munin

Online hash checker for Virustotal and other services

877.LewisArdern / bXSS

bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.

• xss
• bxss
• security
• bugbounty
• blueteam
• cross-site-scripting
• +1 more

878.paolo-rossi / delphi-jose-jwt

Delphi implementation of JOSE (JSON Object Signing and Encryption) and JWT (JSON Web Token)

• auth
• delphi
• jwt
• jwt-authentication
• jwt-token
• rest

879.ssh-vault / ssh-vault

🌰 encrypt/decrypt using ssh keys

• encryption
• aes-256
• ssh
• ssh-keys
• ed25519
• keys
• +3 more

880.CyberShadow / RABCDAsm

Robust ABC (ActionScript Bytecode) [Dis-]Assembler

881.arun11299 / cpp-jwt

JSON Web Token library for C++

• cpp11
• cpp14
• cpp17
• jwt
• jwt-header
• security

882.smallwat3r / shhh

Share sensitive info without leaving a trace in your chat logs or email accounts.

883.teler-sh / teler-waf

teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.

• ids
• teler
• waf
• teler-ids
• teler-waf
• go
• +8 more

884.MahdiSafsafi / DDetours

Delphi Detours Library

• hooks
• detours
• x86-64
• windows
• delphi
• com
• +4 more

885.MHumm / DelphiEncryptionCompendium

Cryptographic library for Embarcadero Delphi and potentially for FPC as well

• delphi
• key-deviation-algorithms
• cryptographic-checksums
• kdf1
• cryptography
• hash
• +3 more

886.dalibo / ldap2pg

:elephant: :busts_in_silhouette: Manage PostgreSQL roles and privileges from YAML or LDAP

• ldap
• postgresql
• yaml
• roles
• acl
• privileges
• +4 more

887.Warxim / petep

PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡

• proxy
• tcp
• tcp-proxy
• penetration-testing
• hacking
• security
• +14 more

888.dogoncouch / LogESP

Open Source SIEM (Security Information and Event Management system).

• siem
• risk-management
• risk-assessment
• vulnerability-management
• security
• security-tools
• +14 more

889.packing-box / peid

Python implementation of the Packed Executable iDentifier (PEiD)

• peid
• peid-signature
• pe-file
• pe-files
• pe-format
• signature-detection
• +9 more

890.SECFORCE / droidground

A flexible playground for Android CTF challenges.

• android
• ctf
• cybersecurity
• playground
• pentesting
• training

891.FCSC-FR / shovel

Web interface to explore Suricata EVE outputs

• attack-defense-ctf
• ctf
• network-monitor
• suricata
• ecsc
• ecsc2024
• +1 more

892.deep-on / dockprobe

Lightweight Docker monitoring dashboard with anomaly detection & Telegram alerts. One-liner install, zero config.

• anomaly-detection
• container
• dashboard
• devops
• docker
• fastapi
• +11 more

893.galax-io / gatling-picatinny

Gatling DSL extensions — feeders, profile management, transactions, assertions, Redis integration, and utility functions

• gatling
• performance
• performance-testing
• gatling-plugin
• dsl
• feeders
• +6 more

894.reZach / secure-electron-template

The best way to build Electron apps with security in mind.

• electron
• security
• template
• react
• redux
• webpack
• +2 more

895.codilime / velesArchived

Binary data analysis and visualization tool

• hexeditor
• qt
• cpp
• visualization
• shaders
• reverse-engineering
• +1 more

896.genuinetools / bane

Custom & better AppArmor profile generator for Docker containers.

• docker
• apparmor-profile
• apparmor
• containers
• linux
• cli
• +2 more

897.funkygao / cp-ddd-framework

TranslatedA lightweight DDD forward/reverse business modeling framework that supports the architectural evolution of complex business systems!

• ddd
• extension
• ddd-architecture
• clean-architecture
• framework
• enterprise-architecture
• +5 more

898.dromara / dongle

A simple, semantic and developer-friendly crypto package for golang

• aes
• rsa
• des
• 3des
• base16
• base64
• +13 more

899.tlsfuzzer / python-ecdsa

pure-python ECDSA signature/verification and ECDH key agreement

• python
• elliptic-curves
• cryptography
• digital-signatures
• ecdsa
• ecdh

900.honeynet / apkinspector

APKinspector is a powerful GUI tool for analysts to analyze the Android applications.