SSealbook
Sealbook / Open source / Security & hacking

Top open-source security & hacking on GitHub

2,493 repositories with 1,000+ stars, ranked by stars. Leading: frp, sherlock, ghidra.

RepositoryStarsLanguageLicenseActivity
451gommzystudio/device-activity-trackerA phone number can reveal whether a device is active, in standby or offline (and more). This PoC demonstrates how delivery receipts + RTT ti★ 5.2kTypeScriptOtherSlowing
452bikini/exploitariumA single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to★ 5.2kPython—Active
453hakluke/hakrawlerSimple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application★ 5.1kGoGPL-3.0Active
454alphaSeclab/awesome-reverse-engineeringReverse Engineering Resources About All Platforms(Windows/Linux/macOS/Android/iOS/IoT) And Every Aspect! (More than 3500 open source tools a★ 5.1k——Stale
455niklashigi/apk-mitm🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection★ 5.1kTypeScriptMITStale
456homarr-labs/homarrA modern and easy to use dashboard. 80+ integrations. 20K+ icons built in. Authentication out of the box. No YAML, drag and drop configurati★ 5.1kTypeScriptApache-2.0Active
457lc/gauFetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.★ 5.1kGoMITActive
458jesseduffield/horcruxSplit your file into encrypted fragments so that you don't need to remember a passcode★ 5.1kGoMITStale
459jassics/security-study-planComplete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps a★ 5.1k——Active
460aquasecurity/kube-hunterHunt for security weaknesses in Kubernetes clusters★ 5.1kPythonApache-2.0Stale
461nicocha30/ligolo-ngAn advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.★ 5.1kGoGPL-3.0Active
462DedSecInside/TorBotDark Web OSINT Tool★ 5.1kPythonOtherActive
463cilium/tetragoneBPF-based Security Observability and Runtime Enforcement★ 5.1kCApache-2.0Active
464ClearURLs/AddonClearURLs is an add-on based on the new WebExtensions technology and will automatically remove tracking elements from URLs to help protect y★ 5.1kJavaScriptLGPL-3.0Stale
465ossec/ossec-hidsOSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootki★ 5.1kCGPL-2.0Active
466pirate/wireguard-docs📖 Unofficial WireGuard Documentation: Setup, Usage, Configuration, and full example setups for VPNs supporting both servers & roaming client★ 5.1kShellMITSlowing
467google/google-ctfGoogle CTF★ 5.1kPythonApache-2.0Active
468pomerium/pomeriumPomerium is an identity and context-aware access proxy.★ 5kGoApache-2.0Active
469pritunl/pritunlEnterprise VPN server★ 5kPythonOtherActive
470Hack-with-Github/Free-Security-eBooksFree Security and Hacking eBooks★ 5k——Archived
471aloshdenny/reverse-SynthIDreverse engineering Gemini's SynthID detection★ 5kPythonOtherSlowing
472pret/pokeredDisassembly of Pokémon Red/Blue★ 5kAssembly—Active
473IAmStoxe/wireholeWireHole is a combination of WireGuard, Pi-hole, and Unbound in a docker-compose project with the intent of enabling users to quickly and ea★ 5kShellOtherActive
474qTox/qToxqTox is a chat, voice, video, and file transfer IM client using the encrypted peer-to-peer Tox protocol.★ 5kC++GPL-3.0Archived
475ffffffff0x/Digital-PrivacyInformation Protection & OSINT resources | 一个关于数字隐私搜集、保护、清理集一体的方案,外加开源信息收集(OSINT)对抗★ 4.9k—MITArchived
476Nyr/wireguard-installWireGuard road warrior installer for Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS and Fedora★ 4.9kShellMITActive
477omlahore/RemoveMacAIDebloat macOS: turn off Apple Intelligence, analytics, ads and pop-ups. A native app and CLI, and every change can be undone.★ 4.9kSwiftMITActive
478emanuele-f/PCAPdroidNo-root network monitor, firewall and PCAP dumper for Android★ 4.9kJavaGPL-3.0Active
479Security-Onion-Solutions/securityonionSecurity Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own inter★ 4.9kShellOtherActive
480SadeghHayeri/GreenTunnelGreenTunnel is an anti-censorship utility designed to bypass the DPI system that is put in place by various ISPs to block access to certain ★ 4.9kTypeScriptMITActive
481matter-labs/zksynczkSync: trustless scaling and privacy engine for Ethereum★ 4.9kRustApache-2.0Slowing
482andresriancho/w3afw3af: web application attack and audit framework, the open source web vulnerability scanner.★ 4.9kPython—Stale
483UndeadSec/SocialFishPhishing Tool & Information Collector ★ 4.9kCSSBSD-3-ClauseSlowing
484apple/password-manager-resourcesA place for creators and users of password managers to collaborate on resources to make password management better.★ 4.9kJavaScriptMITActive
485SpiderLabs/ResponderResponder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/L★ 4.9kPythonGPL-3.0Archived
486infosecn1nja/AD-Attack-DefenseAttack and defend active directory using modern post exploitation adversary tradecraft activity★ 4.9k——Stale
487PiotrMachowski/Xiaomi-cloud-tokens-extractorThis tool retrieves tokens for all devices connected to Xiaomi cloud and encryption keys for BLE devices.★ 4.9kPythonMITSlowing
488greenbone/openvas-scannerThis repository contains the scanner component for Greenbone Community Edition.★ 4.9kRustGPL-2.0Active
489charles2gan/GDA-android-reversing-Toolthe fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file.★ 4.9kPythonApache-2.0Slowing
490backup/backupEasy full stack backup operations on UNIX-like systems.★ 4.9kRubyMITStale
491aya-rs/ayaAya is an eBPF library for the Rust programming language, built with a focus on developer experience and operability.★ 4.9kRustApache-2.0Active
492R3nzTheCodeGOD/R3nzSkinSkin changer for League of Legends (LOL)★ 4.8kC++MITArchived
493urbanadventurer/Android-PIN-BruteforceUnlock an Android phone (or device) by bruteforcing the lockscreen PIN. Turn your Kali Nethunter phone into a bruteforce PIN cracker for And★ 4.8kShell—Stale
494mitchellkrogza/nginx-ultimate-bad-bot-blockerNginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DD★ 4.8kShellOtherActive
495HotCakeX/Harden-Windows-SecurityHarden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the lat★ 4.8kC#MITActive
496dmno-dev/varlockAI-safe .env files: Schemas for agents, Secrets for humans.★ 4.8kTypeScriptMITActive
497aws/s2n-tlsAn implementation of the TLS/SSL protocols★ 4.8kCApache-2.0Active
498openziti/zrokSecure internet sharing made simple.★ 4.8kGoApache-2.0Active
499diafygi/acme-tinyA tiny script to issue and renew TLS certs from Let's Encrypt★ 4.8kPythonMITSlowing
500intelowlproject/IntelOwlIntelOwl: manage your Threat Intelligence at scale★ 4.8kPythonAGPL-3.0Active