Trending repositories

801.dfunckt / django-rules

Awesome Django authorization, without the database

• python
• django
• permissions
• rules
• predicates
• authorization

802.lazaronixon / authentication-zero

An authentication system generator for Rails applications.

• rails
• ruby
• authentication
• generator
• rails-authentication
• api
• +3 more

803.eldraco / domain_analyzer

Analyze the security of any domain by finding all the information possible. Made in python.

804.gamelinux / passivedns

A network sniffer that logs all DNS server replies for use in a passive DNS setup

805.citronneur / rdpy

Remote Desktop Protocol in Twisted Python

806.desaster / kippo

Kippo - SSH Honeypot

807.AndroBugs / AndroBugs_FrameworkArchived

AndroBugs Framework is an efficient Android vulnerability scanner that helps developers or hackers find potential security vulnerabilities in Android applications. No need to install on Windows.

808.snovvcrash / usbripArchived

Tracking history of USB events on GNU/Linux

• security
• forensics
• usb-events
• usb-history
• usb-devices

809.kaonashi-passwords / Kaonashi

Wordlist, rules and masks from Kaonashi project (RootedCON 2019)

• wordlist
• password
• password-strength
• password-safety
• dictionary-attack
• dictionary
• +10 more

810.vmt / udis86

Disassembler Library for x86 and x86-64

811.spatie / laravel-uptime-monitor

A powerful and easy to configure uptime and ssl monitor

• laravel
• php
• uptime-monitor
• monitoring
• ssl

812.PagerDuty / incident-response-docs

PagerDuty's Incident Response Documentation.

• pagerduty
• incident-response
• documentation
• oncall
• team-security

813.andrewlock / NetEscapades.AspNetCore.SecurityHeaders

Small package to allow adding security headers to ASP.NET Core websites

• hacktoberfest

814.OpenHFT / Zero-Allocation-Hashing

Zero-allocation hashing for Java

• java
• hashing
• high-performance
• farmhash
• murmurhash3
• cityhash
• +3 more

815.nsmfoo / antivmdetection

Script to create templates to use with VirtualBox to make vm detection harder

• virtualbox
• antivm
• sandbox
• malware-analysis

816.eduardsui / tlse

Single C file TLS 1.2/1.3 implementation, using tomcrypt as crypto library

• tls

817.droberson / ssh-honeypot

Fake sshd that logs ip addresses, usernames, and passwords.

818.JHUISI / charm

Charm: A Framework for Rapidly Prototyping Cryptosystems

• python
• cryptography
• prototyping

819.Escape-Technologies / graphql-armor

🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️

• apollo
• apollo-server
• graphql
• security
• typescript
• middleware
• +5 more

820.google / ukip

USB Keystroke Injection Protection

821.OWASP / Python-Honeypot

OWASP Honeypot, Automated Deception Framework.

• owasp
• honeypot
• honeynet
• deception
• security
• cybersecurity
• +2 more

822.abumq / licensepp

Software licensing and registration using digital signatures and public cryptography 🪪

• licensing
• software-licensing
• software-license
• security

823.smallwat3r / shhh

Share sensitive info without leaving a trace in your chat logs or email accounts.

824.HightechSec / git-scanner

A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public

• hacking-tools
• bash
• git-dumper
• pentesting
• pentest-tool
• security-audit
• +1 more

825.dod-cyber-crime-center / DC3-MWCP

DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.

• python
• malware-analysis
• automation
• config-dump
• framework
• malware-automation

826.potatosalad / erlang-jose

JSON Object Signing and Encryption (JOSE) for Erlang and Elixir

• jose
• cryptography
• jwt
• erlang
• elixir

827.mushorg / glutton

Generic Low Interaction Honeypot

• honeypot
• hacktoberfest

828.moyix / creddump

Automatically exported from code.google.com/p/creddump

829.avaneev / komihash

Very fast, high-quality hash function, discrete-incremental and streamed hashing-capable (non-cryptographic, header-only C/C++) 27GB/s + PRNG

• hash
• hashing
• hashing-algorithm
• hash-function
• hash-table
• prng
• +14 more

830.LDO-CERT / orochi

The Volatility Collaborative GUI

• volatility-gui
• volatility-framework
• volatility
• memory-dump
• orochi
• dask
• +1 more

831.Warxim / petep

PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡

• proxy
• tcp
• tcp-proxy
• penetration-testing
• hacking
• security
• +14 more

832.dogoncouch / LogESP

Open Source SIEM (Security Information and Event Management system).

• siem
• risk-management
• risk-assessment
• vulnerability-management
• security
• security-tools
• +14 more

833.strazzere / android-lkms

Android Loadable Kernel Modules - mostly used for reversing and debugging on controlled systems/emulators

• loadable-kernel-modules
• android-lkms
• emulators
• kernel
• android
• reverse-engineering

834.Cap-go / capacitor-social-login

Capacitor plugin to make login with Google,Apple,Facebook and so on, simple and fast to implement

• capacitor
• plugin
• capacitor-plugin

835.KishanBagaria / padding-oracle-attacker

🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.

• padding-oracle
• aes
• decryption
• encryption
• cipher-block-chaining
• cbc
• +4 more

836.sharplispers / ironclad

A cryptographic toolkit written in Common Lisp

837.leodip / goiabada

Goiabada is an OAuth2 / OpenID Connect server written in Go.

• identity-management
• oauth2
• openid-connect
• user-management
• authentication
• authorization
• +7 more

838.daviddesmet / paseto-dotnet

🔑 Paseto.NET, a Paseto (Platform-Agnostic Security Tokens) implementation for .NET

• paseto
• dotnet
• netstandard
• dotnet-core

839.packing-box / peid

Python implementation of the Packed Executable iDentifier (PEiD)

• peid
• peid-signature
• pe-file
• pe-files
• pe-format
• signature-detection
• +9 more

840.rod-chapman / SPARKNaCl

SPARK 2014 re-implementation of the TweetNaCl crypto library

841.philsmd / itunes_backup2hashcat

Extract the information needed from the Manifest.plist files to convert it to hashes compatible with hashcat

842.SECFORCE / droidground

A flexible playground for Android CTF challenges.

• android
• ctf
• cybersecurity
• playground
• pentesting
• training

843.SAP / cloud-active-defense

Add a layer of active defense to your cloud applications.

• cybersecurity
• deception
• decoy
• honeytoken
• infosec
• security

844.google / container-explorer

The repository host gives no description.

845.vericle / intellyweave

AI-powered platform for OSINT intelligence analysis. Features archive discovery with hypothesis-driven investigation, GLiNER entity extraction, Mapbox geospatial visualization, network analysis, and document processing. Built with FastAPI, Next.js, Weaviate, and DSPy.

• ai-agents
• document-processing
• dspy
• entity-extraction
• fastapi
• geospatial-visualization
• +14 more

846.hectorm / cardea

Cardea is an SSH bastion server with access control, session recording, and optional TPM-backed key protection.

• audit
• bastion
• firewall
• networking
• security
• ssh
• +1 more

847.blank-query / lazyVPN-for-Omarchy

LazyVPN is an Omarchy VPN manager for WireGuard connections. It replaces manual systemd-networkd configuration with a fast, keyboard-driven TUI featuring killswitch, auto-recovery, and Waybar integration.

• linux
• mullvad-vpn
• omarchy
• omarchy-linux
• privacy
• protonvpn
• +7 more

848.materwelonDhruv / envapt

Typed, validated config from process.env, .env files, or any object, on Node, Bun, Deno, Cloudflare Workers, and the browser. No runtime dependencies.

• config
• decorators
• dotenv
• env
• settings
• typescript
• +12 more

849.hourianto / sporeflower

A J2ME-focused reverse-engineering, decompilation and remapping toolkit, aimed at semantically correct, recompilable output.

• cldc
• decompiler
• decompiler-java
• j2me
• java-decompiler
• midp

850.zakariagharzouli / sparda

AI writes. SPARDA proves. A deterministic, offline gate that catches when an AI edit removes a guard, exposes a route, or breaks an invariant — no API key, right in the agent edit loop.

• ai-agents
• ai-code-review
• authorization
• bola
• claude-code
• guardrails
• +4 more

851.coorasse / cancancan

The authorization Gem for Ruby on Rails.

• authorization
• cancancan
• rails

852.simov / grant

OAuth Proxy

• nodejs
• javascript
• oauth
• oauth2
• authentication
• authorization
• +14 more

853.maticzav / graphql-shield

🛡 A GraphQL tool to ease the creation of permission layer.

• graphql
• permissions
• server
• shield
• graphql-yoga
• apollo
• +1 more

854.paragonie / paseto

Platform-Agnostic Security Tokens

• php
• paseto
• paseto-tokens

855.arthepsy / ssh-audit

SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

856.google / binnaviArchived

BinNavi is a binary analysis IDE that allows to inspect, navigate, edit and annotate control flow graphs and call graphs of disassembled code.

• reverse-engineering
• java
• binnavi
• yfiles
• analysis

857.wardencommunity / warden

General Rack Authentication Framework

858.DuendeArchive / identity-model-oidc-client-jsArchived

OpenID Connect (OIDC) and OAuth2 protocol support for browser-based JavaScript applications

859.jwt-dotnet / jwt

Jwt.Net, a JWT (JSON Web Token) implementation for .NET

• jwt
• json
• c-sharp
• authorization

860.dchest / tweetnacl-js

Port of TweetNaCl cryptographic library to JavaScript

• crypto
• javascript
• authentication
• signature
• elliptic-curves
• secretbox
• +9 more

861.signalapp / libsignal-protocol-javaArchived

The repository host gives no description.

862.ueberauth / ueberauth

An Elixir Authentication System for Plug-based Web Applications

• elixir
• authentication
• authorization
• oauth2
• oauth
• ueberauth

863.pow-auth / pow

Robust, modular, and extendable user authentication system

• phoenix
• authentication
• authorization
• user-management
• elixir

864.dpnishant / appmonArchived

Documentation:

• android
• ios-app
• macos-app
• security-tools
• appmon
• reverse-engineering
• +3 more

865.martinus / robin-hood-hashingArchived

Fast & memory efficient hashtable based on robin hood hashing for C++11/14/17/20

• c-plus-plus
• hash-tables
• unordered-maps
• hash
• container
• header-only
• +6 more

866.palkan / action_policy

Authorization framework for Ruby/Rails applications

• rails
• authorization
• ruby
• hacktoberfest

867.mikechambers / as3corelib

An ActionScript 3 Library that contains a number of classes and utilities for working with ActionScript? 3. These include classes for MD5 and SHA 1 hashing, Image encoders, and JSON serialization as well as general String, Number and Date APIs.

868.lunasec-io / lunasec

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

• tokenization
• web-security
• compliance
• security
• soc2
• pci-dss
• +14 more

869.tomchop / malcom

Malcom - Malware Communications Analyzer

• malware
• network-traffic
• pcap
• threat-intelligence
• malware-analysis
• infosec
• +1 more

870.google / mundane

Mundane is a Rust cryptography library backed by BoringSSL that is difficult to misuse, ergonomic, and performant (in that order).

• cryptography
• rust
• boringssl

871.dvsekhvalnov / jose-jwt

Ultimate Javascript Object Signing and Encryption (JOSE), JSON Web Token (JWT) and Json Web Keys (JWK) Implementation for .NET and .NET Core

• jose
• jwt
• json
• jwa
• jwe
• jws
• +13 more

872.tlsfuzzer / python-ecdsa

pure-python ECDSA signature/verification and ECDH key agreement

• python
• elliptic-curves
• cryptography
• digital-signatures
• ecdsa
• ecdh

873.Storyyeller / enjarify

The repository host gives no description.

874.f0cker / crackq

CrackQ: A Python Hashcat cracking queue system

875.decaf-project / DECAF

DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.

• binary-analysis
• taint-analysis

876.leetonidas / demovfuscator

A work-in-progress deobfuscator for movfuscated binaries

877.lxdvs / apk2gold

CLI tool for decompiling Android apps to Java. It does resources! It does Java! Its real easy!

878.xtiankisutsa / MARA_Framework

MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.

879.GoSecure / dtd-finder

List DTDs and generate XXE payloads using those local DTDs.

• xxe
• dtd
• security
• hacktoberfest

880.c6fc / npk

A mostly-serverless distributed hash cracking platform

881.hashcat / kwprocessor

Advanced keyboard-walk generator with configureable basechars, keymap and routes

882.Paradoxis / StegCrackerArchived

Steganography brute-force utility to uncover hidden data inside files

• steghide
• steganography
• ctf-tools
• ctf
• brute-force
• stegcracker
• +2 more

883.mushorg / glastopf

Web Application Honeypot

884.java-decompiler / jd-core

JD-Core is a JAVA decompiler written in JAVA.

885.Hakky54 / ayza

🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more

• tls
• ssl
• certificate
• keystore
• truststore
• mutual-authentication
• +13 more

886.paolo-rossi / delphi-jose-jwt

Delphi implementation of JOSE (JSON Object Signing and Encryption) and JWT (JSON Web Token)

• auth
• delphi
• jwt
• jwt-authentication
• jwt-token
• rest

887.ssh-vault / ssh-vault

🌰 encrypt/decrypt using ssh keys

• encryption
• aes-256
• ssh
• ssh-keys
• ed25519
• keys
• +3 more

888.malicialab / avclass

AVClass malware labeling tool

889.dashbitco / nimble_totp

A tiny Elixir library for time-based one time passwords (TOTP)

• elixir
• 2fa
• totp

890.CyberShadow / RABCDAsm

Robust ABC (ActionScript Bytecode) [Dis-]Assembler

891.docker / scout-cli

Docker Scout CLI

• docker
• security
• supply-chain-security

892.ektrah / nsec

A modern and easy-to-use cryptographic library for .NET based on libsodium

• aead
• aes-gcm
• blake2b
• chacha20-poly1305
• crypto
• cryptography
• +14 more

893.WangYihang / Webshell-Sniper

:hammer: Manage your website via terminal

• php
• security-tools
• python
• pentest
• webshell-sniper
• webshell

894.hyperboloide / lk

Simple licensing library for golang.

• golang
• sign
• crypto

895.teler-sh / teler-waf

teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.

• ids
• teler
• waf
• teler-ids
• teler-waf
• go
• +8 more

896.MahdiSafsafi / DDetours

Delphi Detours Library

• hooks
• detours
• x86-64
• windows
• delphi
• com
• +4 more

897.johnnykv / heralding

Credentials catching honeypot

• honeypot
• deception
• security
• security-tools

898.brndnmtthws / dryoc

Don't Roll Your Own Crypto: fast, type-safe, pure-Rust cryptography with post-quantum support

• libsodium
• crypto
• rust
• cryptography
• cryptography-library
• nacl
• +3 more

899.kacos2000 / MFT_Browser

$MFT directory tree reconstruction & FILE record info

• mft-browser
• mft
• powershell
• winform
• gui-application
• mft-files
• +10 more

900.Areizen / Android-Malware-Sandbox

Android Malware Sandbox