SSealbook
Sealbook / Open source / Security & hacking

Top open-source security & hacking on GitHub

2,493 repositories with 1,000+ stars, ranked by stars. Leading: frp, sherlock, ghidra.

RepositoryStarsLanguageLicenseActivity
501Consensys-inc-archive/quorumA permissioned implementation of Ethereum supporting data privacy★ 4.8kGoLGPL-3.0Archived
502cobbr/CovenantCovenant is a collaborative .NET C2 framework for red teamers.★ 4.7kC#GPL-3.0Stale
503opnsense/coreOPNsense GUI, API and systems backend★ 4.7kPHPBSD-2-ClauseActive
504GhostPack/SeatbeltSeatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive ★ 4.7kC#OtherStale
505samyk/evercookieProduces persistent, respawning "super" cookies in a browser, abusing over a dozen techniques. Its goal is to identify users after they've r★ 4.7kJavaScript—Stale
506kaitai-io/kaitai_structKaitai Struct: declarative language to generate binary data parsers in C++ / C# / Go / Java / JavaScript / Lua / Nim / Perl / PHP / Python /★ 4.7kShell—Active
507nisrulz/app-privacy-policy-generatorGenerate a customized Privacy Policy and Terms of Use document for your mobile apps★ 4.7kHTMLAGPL-3.0Active
508google/security-researchThis project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Goo★ 4.7kCApache-2.0Active
509SteveLTN/https-portalA fully automated HTTPS server powered by Nginx, Let's Encrypt and Docker.★ 4.7kRubyMITSlowing
510vaibhavpandeyvpz/apkstudioOpen-source, cross platform Qt6 based IDE for reverse-engineering Android application packages. It features a friendly IDE-like layout inclu★ 4.7kC++LGPL-3.0Slowing
511spring-attic/spring-security-oauthSupport for adding OAuth1(a) and OAuth2 features (consumer and provider) for Spring web applications.★ 4.7kJavaApache-2.0Archived
512CalebFenton/simplifyAndroid virtual machine and deobfuscator★ 4.7kJavaOtherStale
513iDescriptor/iDescriptorprivacy-first, open-source and free idevice management tool written in Rust and Qt★ 4.7kQMLAGPL-3.0Active
514forter/security-101-for-saas-startupssecurity tips for startups★ 4.7k—OtherSlowing
515johnno1962/InjectionIIIRe-write of Injection for Xcode in (mostly) Swift★ 4.7kObjective-CMITActive
516ntop/nDPIOpen Source Deep Packet Inspection Software Toolkit★ 4.6kCLGPL-3.0Active
517aquasecurity/traceeLinux Runtime Security and Forensics using eBPF★ 4.6kGoApache-2.0Active
518AliyunContainerService/pouchAn Efficient Enterprise-class Container Engine★ 4.6kGoApache-2.0Stale
519build-trust/ockamOrchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applicati★ 4.6kRustApache-2.0Slowing
520ReversecLabs/drozerThe Leading Security Assessment Framework for Android.★ 4.6kPythonOtherSlowing
521rfjakob/gocryptfsEncrypted overlay filesystem written in Go★ 4.6kGoMITActive
522cerbos/cerbosCerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gate★ 4.6kGoApache-2.0Active
523ReVanced/revanced-patches-template👋🧩Template repository for ReVanced Patches★ 4.6kKotlinGPL-3.0Slowing
524samsesh/SocialBox-TermuxSocialBox is a Bruteforce Attack Framework [ Facebook , Gmail , Instagram ,Twitter ] , Coded By Belahsan Ouerghi Edit By samsesh for termux ★ 4.6kShellMITSlowing
525xiaobaigroup/ClashBoxHarmonyOS NEXT的代理软件★ 4.6k—GPL-3.0Active
526projectdiscovery/interactshAn OOB interaction gathering server and client library★ 4.6kGoMITActive
527hluwa/frida-dexdumpA frida tool to dump dex in memory to support security engineers analyzing malware.★ 4.6kPythonGPL-3.0Archived
528bluscreenofjeff/Red-Team-Infrastructure-WikiWiki to collect Red Team infrastructure hardening resources★ 4.5k—BSD-3-ClauseStale
529sensepost/gowitness🔍 gowitness - a golang, web screenshot utility using Chrome Headless★ 4.5kGoGPL-3.0Active
530firmianay/CTF-All-In-OneCTF竞赛权威指南★ 4.5kCCC-BY-SA-4.0Stale
531volatilityfoundation/volatility3Volatility 3.0 development★ 4.5kPythonOtherActive
532AdguardTeam/AdguardBrowserExtensionAdGuard browser extension★ 4.5kTypeScriptGPL-3.0Active
533lexrus/VPNOnTurn On your VPN like a hero.★ 4.5kSwiftOtherArchived
534extremecoders-re/pyinstxtractorPyInstaller Extractor★ 4.5kPythonGPL-3.0Active
535JonathanSalwan/ROPgadgetThis tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on★ 4.5kPythonOtherSlowing
536rudderlabs/rudder-serverPrivacy and Security focused Segment-alternative, in Golang and React ★ 4.5kGoOtherActive
537google/santaA binary authorization and monitoring system for macOS★ 4.5kObjective-C++Apache-2.0Archived
538lennylxx/ipv6-hostsFork of https://code.google.com/archive/p/ipv6-hosts/, focusing on automation★ 4.5kPythonMITArchived
539orhun/binsiderAnalyze ELF binaries like a boss 😼🕵️‍♂️★ 4.5kRustApache-2.0Active
540jonaslejon/malicious-pdf💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers★ 4.5kPythonBSD-2-ClauseActive
541t3l3machus/VillainVillain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality wi★ 4.5kPythonOtherStale
542SteamClientHomebrew/MillenniumAn open-source framework for Steam Client themes and plugins★ 4.5kC++MITActive
543GerbenJavado/LinkFinderA python script that finds endpoints in JavaScript files★ 4.5kPythonMITStale
544zer0yu/Awesome-CobaltStrikeList of Awesome CobaltStrike Resources★ 4.5k——Stale
545RoganDawes/P4wnP1_aloaP4wnP1 A.L.O.A. by MaMe82 is a framework which turns a Rapsberry Pi Zero W into a flexible, low-cost platform for pentesting, red teaming an★ 4.4kJavaScriptGPL-3.0Stale
546skerkour/black-hat-rustApplied offensive security with Rust - https://kerkour.com/black-hat-rust★ 4.4kRustMITStale
547openziti/zitiThe parent project for OpenZiti. Here you will find the executables for a fully zero-trust, programmable network @OpenZiti★ 4.4kGoApache-2.0Active
548zan8in/afrogA Security Tool for Bug Bounty, Pentest and Red Teaming.★ 4.4kGoMITActive
549JetBrains/fernflowerDecompiler from Java bytecode to Java, used in IntelliJ IDEA.★ 4.4kJavaApache-2.0Active
550microsoft/ApplicationInspectorA source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quick★ 4.4kC#MITActive