Trending repositories

1.NationalSecurityAgency / ghidra

Ghidra is a software reverse engineering (SRE) framework

• software-analysis
• disassembler
• reverse-engineering

2.usestrix / strix

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

• agents
• artificial-intelligence
• cybersecurity
• penetration-testing
• ai-penetration-testing
• ai-pentesting
• +14 more

3.vxcontrol / pentagi

Fully autonomous AI Agents system capable of performing complex penetration testing tasks

• ai-agents
• ai-security-tool
• autonomous-agents
• golang
• graphql
• multi-agent-system
• +12 more

4.koala73 / worldmonitor

Real-time global intelligence dashboard. AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational awareness interface

• ai
• dashboard
• geopolitics
• monitoring
• news
• osint
• +6 more

5.NVIDIA / SkillSpector

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.

• agent-security
• agent-skills
• agentic-ai
• ai-security
• claude-code
• mcp
• +5 more

6.sherlock-project / sherlock

Hunt down social media accounts by username across social networks

• osint
• reconnaissance
• linux
• cli
• sherlock
• python3
• +10 more

7.HunxByts / GhostTrack

Useful tool to track location or mobile number

• fyp
• hacking
• hacking-tool
• indonesia
• information
• information-gathering
• +13 more

8.dani-garcia / vaultwarden

Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs

• vaultwarden
• bitwarden
• rust
• docker
• rocket
• bitwarden-rs

9.KeygraphHQ / shannon

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

• penetration-testing
• pentesting
• security-audit
• security-automation
• security-tools
• ai-penetration-testing
• +14 more

10.asciimoo / hister

Your own search engine

• history
• index
• search
• search-engine
• web
• mcp
• +5 more

11.smicallef / spiderfoot

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

• footprinting
• osint
• threatintel
• python
• infosec
• intelligence-gathering
• +13 more

12.opensandbox-group / OpenSandbox

Secure, Fast, and Extensible Sandbox runtime for AI agents.

• ai
• ai-infra
• kubernetes
• sandbox
• ai-agent
• aaif

13.pranshuparmar / witr

Why is this running? Trace any process, port, container, or file back to what started it - CLI + TUI.

• cli
• devops
• freebsd
• golang
• linux
• macos
• +14 more

14.soxoj / maigret

🕵️‍♂️ Collect a dossier on a person by username from 6K websites

• osint
• social-network
• identification
• socmint
• sherlock
• investigation
• +14 more

15.megadose / holehe

holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.

• information-gathering
• osint
• osint-tools
• open-source-intelligence
• python
• email
• +9 more

16.goauthentik / authentik

The authentication glue you need.

• saml
• saml-idp
• saml-sp
• oauth2
• oauth2-server
• oauth2-client
• +11 more

17.Z4nzu / hackingtool

ALL IN ONE Hacking Tool For Hackers

• allinonehackingtool
• web-attack
• password-attack
• hacking
• wireless-attack
• besthackingtool
• +7 more

18.hagezi / dns-blocklists

DNS-Blocklists: For a better internet - keep the internet clean!

• dns
• ads
• blacklist
• blocklist
• coins
• domains
• +14 more

19.komi-store / komi-store

🩵 A free, open-source app store for developers' releases on GitHub, Codeberg & Forgejo — browse, discover, and install apps with one click. Formerly GitHub Store.

• android
• kotlin
• kotlin-multiplatform
• linux
• macos
• windows
• +4 more

20.promptfoo / promptfoo

Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.

• llm
• prompt-engineering
• prompts
• llmops
• prompt-testing
• testing
• +12 more

21.mvt-project / mvt

MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.

• forensics
• mobile
• security
• android
• ios
• forensics-tools

22.farhanashrafdev / 90DaysOfCyberSecurity

This repository contains a 90-day cybersecurity study plan, along with resources and materials for learning various cybersecurity concepts and technologies. The plan is organized into daily tasks, covering topics such as Network+, Security+, Linux, Python, Traffic Analysis, Git, ELK, AWS, Azure, and Hacking. The repository also includes a `LEARN.md

• cybersecurity
• ethical-hacking
• communityexchange
• learn
• hacktoberfest

23.0x4m4 / hexstrike-ai

HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.

• 0x4m4
• ai
• ai-agents
• ai-cybersecurity
• ai-hacking
• ai-penetration-testing
• +14 more

24.ImranR98 / Obtainium

Get Android app updates straight from the source.

• android
• apk
• foss
• github
• gitlab
• privacy
• +10 more

25.memstechtips / Winhance

Application designed to optimize, customize and enhance your Windows experience.

• windows-10
• windows-10-debloat
• windows-10-optimization
• windows-11
• windows-11-debloat
• windows-11-optimization
• +14 more

26.projectdiscovery / nuclei

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

• cve-scanner
• subdomain-takeover
• nuclei-engine
• vulnerability-detection
• vulnerability-assessment
• vulnerability-scanner
• +5 more

27.gitleaks / gitleaks

Find secrets with Gitleaks 🔑

• security
• security-tools
• git
• golang
• go
• secret
• +14 more

28.danielmiessler / SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

29.iBotPeaches / Apktool

A tool for reverse engineering Android apk files

• apktool
• apk
• android
• reverse-engineering
• arsc
• 9patch

30.skylot / jadx

Dex to Java decompiler

• android
• dex
• java
• decompiler

31.aquasecurity / trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

• security
• security-tools
• docker
• containers
• vulnerability-scanners
• vulnerability-detection
• +9 more

32.alam00000 / bentopdf

The Privacy First PDF Toolkit

• jpgtopdf
• pdf
• pdf-converter
• pdf-generation
• pdf-viewer
• hacktoberfest
• +14 more

33.Infisical / infisical

Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.

• environment-variables
• secret-management
• secrets
• security
• open-source
• secret-manager
• +14 more

34.NangoHQ / nango

Connect your agents & product to 1,000 APIs.

• oauth2
• oauth1
• api
• api-client
• integrations
• api-integration
• +6 more

35.keycloak / keycloak

Open Source Identity and Access Management For Modern Applications and Services

• keycloak
• oidc
• saml

36.hummingbot / hummingbot

Open source software that helps you create and deploy high-frequency crypto trading bots

• arbitrage
• crypto
• trading
• python
• algotrading
• hft
• +13 more

37.trufflesecurity / trufflehog

Find, verify, and analyze leaked credentials

• secret
• trufflehog
• credentials
• security
• devsecops
• dynamic-analysis
• +6 more

38.GreyDGL / PentestGPT

Automated Penetration Testing Agentic Framework Powered by Large Language Models

• penetration-testing
• python
• large-language-models
• llm

39.Datalux / Osintgram

Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname

• osint
• osint-python
• python3
• instagram
• instagram-api
• penetration-testing
• +7 more

40.keepassxreboot / keepassxc

KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.

• keepassxc
• keepass
• password-manager
• linux
• windows
• cross-platform
• +6 more

41.screenpipe / screenpipe

YC (S26) | Open Computer History | Continuously record your company computer work, map your workflows, help you find work worth automating, and power your agents' context

• ai
• computer-vision
• llm
• machine-learning
• multimodal
• agents
• +14 more

42.trailofbits / skills

Trail of Bits skills for security research, vulnerability detection, and audit workflows

• agent-skills

43.ComposioHQ / composio

Composio powers 1000+ toolkits, tool search, context management, authentication, and a sandboxed workbench to help you build AI agents that turn intent into action.

• ai
• python
• agents
• aiagents
• function-calling
• developer-tools
• +11 more

44.WerWolv / ImHex

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

• hex-editor
• reverse-engineering
• ips
• dear-imgui
• disassembler
• analyzer
• +14 more

45.HIllya51 / LunaTranslator

视觉小说翻译器 / Visual Novel Translator

• galgame
• visual-novel
• translator
• reverse-engineering
• ocr

46.mikeroyal / Self-Hosting-Guide

Self-Hosting Guide. Learn all about locally hosting (on premises & private web servers) and managing software applications by yourself or your organization. Including Cloud, LLMs, WireGuard, Automation, Home Assistant, and Networking.

• self-hosted
• selfhosted
• home-assistant
• wireguard
• decentralized
• self-hosting
• +14 more

47.semgrep / semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

• static-analysis
• static-code-analysis
• java
• go
• sast
• semgrep
• +6 more

48.laramies / theHarvester

E-mails, subdomains and names Harvester - OSINT

• osint
• subdomain-enumeration
• redteam
• recon
• blueteam
• discovery
• +4 more

49.pocket-id / pocket-id

The most user-friendly OpenID Connect Certified™ and OAuth 2.0 provider that lets users sign in to your applications with passkeys.

• idp
• oidc
• passkeys
• self-hosted

50.x64dbg / x64dbg

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

• debugger
• windows
• x64
• disassembler
• reverse-engineering
• security
• +14 more

51.better-auth / better-auth

The most comprehensive authentication framework

• authentication
• oauth
• oauth2
• typescript
• iam
• oidc
• +2 more

52.icsharpcode / ILSpy

.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!

• decompiler
• decompiler-engine
• c-sharp
• dotnet
• dotnetcore
• mono
• +4 more

53.twpayne / chezmoi

Manage your dotfiles across multiple diverse machines, securely.

• dotfiles
• configuration
• security
• macos
• linux
• windows
• +4 more

54.NVIDIA / garak

the LLM vulnerability scanner

• ai
• llm-evaluation
• llm-security
• security-scanners
• vulnerability-assessment

55.wazuh / wazuh

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

• security
• compliance
• log-analysis
• vulnerability-detection
• cybersecurity
• file-integrity-monitoring
• +14 more

56.frida / frida

Main repo for hosting release binaries

• frida
• instrumentation
• vala

57.veracrypt / VeraCrypt

Disk encryption with strong security based on TrueCrypt

• encryption
• encryption-decryption
• encryption-algorithms
• veracrypt
• idrix
• veracrypt-source

58.microg / GmsCore

Free implementation of Play Services

• java
• android
• microg
• google-cloud-messaging
• maps
• auth
• +8 more

59.FiloSottile / age

A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.

• built-at-rc
• age-encryption

60.wasp-lang / open-saas

A 100% free modern JS SaaS boilerplate (React, NodeJS, Prisma). Full-featured: Auth (email, google, github, slack, MS), Email sending, Background jobs, Landing page, Payments (Stripe, Polar.sh), Shadcn UI, S3 file upload. AI-ready with tailored AGENTS.md, skills, and Claude Code plugin. One cmd deploy. Powered by Wasp full-stack framework.

• full-stack
• open-source
• saas
• nodejs
• prisma
• react
• +14 more

61.zedeus / nitterArchived

Alternative Twitter front-end

• nim
• twitter
• privacy
• self-hosted
• x

62.sundowndev / phoneinfoga

Information gathering framework for phone numbers

• information-gathering
• phone-number
• osint
• open-source-intelligence
• reconnaissance
• footprint
• +4 more

63.calesthio / Crucix

Your personal intelligence agent. Watches the world from multiple data sources and pings you when something changes.

• ai
• intelligence
• osint

64.lissy93 / web-check

🕵️‍♂️ All-in-one OSINT tool for analysing any website

• osint
• privacy
• security
• security-tools
• sysadmin

65.authelia / authelia

The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.

• totp
• ldap
• sso-authentication
• two-factor-authentication
• docker
• kubernetes
• +14 more

66.mytechnotalent / Reverse-Engineering

A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM, 8-bit AVR and 32-bit RISC-V architectures.

• reverse-engineering
• hacking
• x86
• x64
• assembly
• assembly-language
• +14 more

67.crowdsecurity / crowdsec

Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.

• security
• waf
• anti-bot
• blocklist
• bot-detection
• bot-protection
• +12 more

68.StarTrail-org / LEANN

[MLsys2026 Best Paper]: https://arxiv.org/abs/2506.08276. RAG on Everything with LEANN. Enjoy 97% storage savings while running a fast, accurate, and 100% private RAG application on your personal device.

• ai
• faiss
• langchain
• llama-index
• llm
• localstorage
• +10 more

69.zoicware / RemoveWindowsAI

Force Remove Copilot, Recall and More in Windows 11

• copilot
• recall
• windows
• ai
• debloat
• powershell
• +9 more

70.aklivity / zilla

🦎 A lightweight, streaming-native, multi-protocol gateway for AI, APIs, and real-time data. Route LLM requests across providers, govern MCP tools, and connect Kafka, MQTT, and HTTP through one high-performance engine with shared security and observability.

• kafka
• rest
• server-sent-events
• streaming-api
• grpc
• mqtt
• +9 more

71.elizaOS / eliza

Open source agentic operating system

• agent
• agentic
• ai
• autonomous
• chatbot
• crypto
• +9 more

72.anthropics / claude-code-security-review

An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.

73.Piebald-AI / claude-code-system-prompts

All parts of Claude Code's system prompt, 27 builtin tool descriptions, sub agent prompts (Plan/Explore/Task), utility prompts (CLAUDE.md, compact, statusline, magic docs, WebFetch, Bash cmd, security review, agent creation). Updated for each Claude Code version.

• claude-code
• claude-code-system-prompts
• system-prompts

74.WhiskeySockets / Baileys

Socket-based TS/JavaScript API for WhatsApp Web

• bun
• deno
• nodejs
• reverse-engineering
• typescript
• websockets
• +2 more

75.organicmaps / organicmaps

🍃 Organic Maps is a free Android & iOS offline maps app for more than 6M travelers, tourists, hikers, and cyclists. It uses crowd-sourced OpenStreetMap data and is developed with love by the community. No ads, no tracking, no data collection, no crapware. Please donate to support the development!

• ios
• android
• privacy
• cpp
• java
• objective-c
• +14 more

76.getsops / sops

Simple and flexible tool for managing secrets

• security
• secret-distribution
• devops
• aws
• pgp
• gcp
• +3 more

77.pluja / awesome-privacy

Awesome Privacy - A curated list of services and alternatives that respect your privacy because PRIVACY MATTERS.

• privacy
• alternatives
• awesome
• list
• apps
• services
• +3 more

78.slackhq / nebula

A scalable overlay networking tool with a focus on performance, simplicity and security

79.Atlas-OS / Atlas

🚀 An open and lightweight modification to Windows, designed to optimize performance, privacy and usability.

• windows
• performance
• latency
• atlas
• privacy
• security
• +8 more

80.google / gvisor

Application Kernel for Containers

• sandbox
• containers
• oci
• docker
• kubernetes
• linux
• +1 more

81.zitadel / zitadel

ZITADEL - Identity infrastructure, simplified for you.

• saml
• authentication
• authorization
• login
• oidc
• sso
• +11 more

82.TechnitiumSoftware / DnsServer

Technitium DNS Server

• dns-server
• privacy
• dns-over-https
• dns-over-tls
• dns
• dns-client
• +6 more

83.jason5ng32 / MyIP

The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.

• dns
• ip
• ipinfo
• network
• webrtc
• leaks
• +14 more

84.winsiderss / systeminformer

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ https://windows-internals.com

• administrator
• windows
• system-monitor
• performance-monitoring
• performance-tuning
• performance
• +13 more

85.Tyrrrz / YoutubeDownloader

Downloads videos and playlists from YouTube

• youtube
• download
• video
• playlist
• mp3
• mp4
• +4 more

86.gchq / CyberChef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

• data-analysis
• data-manipulation
• encryption
• encoding
• compression
• parsing
• +1 more

87.radareorg / radare2

UNIX-like reverse engineering framework and command-line toolset

• radare2
• c
• commandline
• reverse-engineering
• forensics
• security
• +4 more

88.qeeqbox / social-analyzer

API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites

• osint
• social-media
• analyzer
• username
• profile
• reconnaissance
• +13 more

89.FreeTubeApp / FreeTube

An Open Source YouTube app for privacy

• video
• youtube
• privacy
• freetube
• videos
• subscriptions

90.homarr-labs / homarr

A modern and easy to use dashboard. 80+ integrations. 20K+ icons built in. Authentication out of the box. No YAML, drag and drop configuration.

• dashboard
• docker
• organization
• privacy
• selfhosting
• servarr

91.hashcat / hashcat

World's fastest and most advanced password recovery utility

• hashcat
• password
• cracking
• gpgpu
• opencl
• c
• +2 more

92.sqlmapproject / sqlmap

Automatic SQL injection and database takeover tool

• sql-injection
• detection
• exploitation
• python
• database
• pentesting
• +9 more

93.1N3 / Sn1per

Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.

• sn1per
• sn1per-professional
• bugbounty-platform
• attack-surface
• cybersecurity
• pentest-tool
• +13 more

94.kopia / kopia

Cross-platform backup tool for Windows, macOS & Linux with fast, incremental backups, client-side end-to-end encryption, compression and data deduplication. CLI and GUI included.

• deduplication
• backup
• google-cloud-storage
• encryption
• cloud

95.InsForge / InsForge

The all-in-one, open-source backend platform for agentic coding. InsForge gives your coding agent database, auth, storage, compute, hosting, and AI gateway to ship full-stack apps end-to-end.

• ai
• ai-agents
• coding
• oauth2
• postgresql
• deno
• +7 more

96.SWE-agent / SWE-agent

SWE-agent takes a GitHub issue and tries to automatically fix it, using your LM of choice. It can also be employed for offensive cybersecurity or competitive coding challenges. [NeurIPS 2024]

• agent
• ai
• developer-tools
• llm
• agent-based-model
• lms
• +1 more

97.lissy93 / personal-security-checklist

🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026

• privacy
• security
• censorship
• cybersecurity
• checklist
• awesome
• +7 more

98.juice-shop / juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

• owasp
• javascript
• vulnerable
• hacking
• application-security
• owasp-top-10
• +8 more

99.instaloader / instaloader

Download pictures (or videos) along with their captions and other metadata from Instagram.

• instagram
• instagram-client
• instagram-feed
• downloader
• videos
• pictures
• +9 more

100.rizinorg / cutter

Free and Open Source Reverse Engineering Platform powered by rizin

• cutter
• gui
• reverse-engineering
• security
• debugger