SSealbook
Sealbook / Open source / Security & hacking

Top open-source security & hacking on GitHub

2,493 repositories with 1,000+ stars, ranked by stars. Leading: frp, sherlock, ghidra.

RepositoryStarsLanguageLicenseActivity
551hanc00l/wooyun_publicThis repo is archived. Thanks for wooyun! 乌云公开漏洞、知识库爬虫和搜索 crawl and search for wooyun.org public bug(vulnerability) and drops★ 4.4kPHP—Archived
552isar/hiveLightweight and blazing fast key-value database written in pure Dart.★ 4.4kDartApache-2.0Stale
553martin-olivier/airgorahA WiFi security auditing software★ 4.4kRustMITActive
554buttercup/buttercup-desktop:key: Cross-Platform Passwords & Secrets Vault★ 4.4kTypeScriptGPL-3.0Archived
555r0ysue/AndroidSecurityStudy安卓应用安全学习★ 4.4kPython—Stale
556Netflix/security_monkeySecurity Monkey monitors AWS, GCP, OpenStack, and GitHub orgs for assets and their changes over time.★ 4.4kPythonApache-2.0Archived
557cilium/hubbleHubble - Network, Service & Security Observability for Kubernetes using eBPF★ 4.4kMakefileApache-2.0Active
558megadose/toutatisToutatis is a tool that allows you to extract information from instagrams accounts such as e-mails, phone numbers and more★ 4.4kPythonGPL-3.0Stale
559GDRETools/gdsdecompGodot reverse engineering tools★ 4.4kC++MITActive
560smallstep/cli🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.★ 4.3kGoApache-2.0Active
561JonathanSalwan/TritonTriton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software veri★ 4.3kC++Apache-2.0Active
562arismelachroinos/lscriptThe LAZY script will make your life easier, and of course faster.★ 4.3kShellGPL-3.0Archived
563jtesta/ssh-auditSSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)★ 4.3kPythonMITActive
564privacyguides/privacyguides.orgProtect your data against global mass surveillance programs.★ 4.3kMarkdownCC-BY-SA-4.0Active
565RUB-NDS/PRETPrinter Exploitation Toolkit - The tool that made dumpster diving obsolete.★ 4.3kPythonGPL-2.0Stale
566DependencyTrack/dependency-trackDependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply ★ 4.3kJavaApache-2.0Active
567Lucksi/Mr.Holmes A Complete Osint Tool :mag:★ 4.3kPythonGPL-3.0Slowing
568CHYbeta/Web-Security-LearningWeb-Security-Learning★ 4.3kHTML—Stale
569open-policy-agent/gatekeeper🐊 Policy Controller for Kubernetes★ 4.3kGoApache-2.0Active
570lcvvvv/kscanKscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹20000+，暴力破解协议10余种。★ 4.3kGoGPL-3.0Stale
571zhzyker/exphubExphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE★ 4.3kPython—Stale
572wux1an/wxapkg跨平台微信小程序反编译 GUI 工具，.wxapkg 文件扫描 + 解密 + 解包工具★ 4.3kVue—Slowing
573irbis-sh/zen-desktopSystem-wide ad-blocker and privacy guard for Windows, macOS and Linux.★ 4.3kGoMITActive
574ConsenSysDiligence/mythrilMythril is a symbolic-execution-based securty analysis tool for EVM bytecode. It detects security vulnerabilities in smart contracts built f★ 4.3kPythonMITSlowing
575divinelabio/ArgusThe Ultimate Information Gathering Toolkit★ 4.3kPythonMITSlowing
576ProbiusOfficial/Hello-CTF【Hello CTF】题目配套，免费开源的CTF入门教程，针对0基础新手编写，同时兼顾信息差的填补，对各阶段的CTFer都友好的开源教程，致力于CTF和网络安全的开源生态！★ 4.3kHTMLGPL-3.0Active
577PaulSec/awesome-sec-talksA collected list of awesome security talks★ 4.2k——Slowing
578PurpleI2P/i2pd 🛡 I2P: End-to-End encrypted and anonymous Internet★ 4.2kC++BSD-3-ClauseActive
579google/tamperchromeTamper Dev is an extension that allows you to intercept and edit HTTP/HTTPS requests and responses as they happen without the need of a prox★ 4.2kTypeScriptApache-2.0Slowing
580strozfriedberg/Windows-Exploit-SuggesterThis tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the t★ 4.2kPythonGPL-3.0Archived
581epinna/tplmapServer-Side Template Injection and Code Injection Detection and Exploitation Tool★ 4.2kPythonGPL-3.0Stale
582x0rz/EQGRPDecrypted content of eqgrp-auction-file.tar.xz★ 4.2kPerl—Stale
583guelfoweb/knockpyKnock Subdomain Scan★ 4.2kPythonGPL-3.0Slowing
584ai-robots-txt/ai.robots.txtA list of AI agents and robots to block.★ 4.2kPythonMITActive
585google/AFLamerican fuzzy lop - a security-oriented fuzzer★ 4.2kCApache-2.0Archived
586mandiant/flare-flossFLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.★ 4.2kPythonApache-2.0Active
587RetireJS/retire.jsscanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.★ 4.2kJavaScriptApache-2.0Active
588ProtonVPN/android-appOfficial ProtonVPN Android app★ 4.2kKotlinGPL-3.0Active
589ivre/ivreNetwork recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your ★ 4.2kPythonGPL-3.0Active
590constverum/ProxyBrokerProxy [Finder | Checker | Server]. HTTP(S) & SOCKS :performing_arts:★ 4.2kPythonApache-2.0Stale
591square/ValetValet lets you securely store data in the iOS, tvOS, watchOS, or macOS Keychain without knowing a thing about how the Keychain works. It’s e★ 4.2kSwiftApache-2.0Active
592cloudflare/flanA pretty sweet vulnerability scanner★ 4.2kPythonBSD-3-ClauseArchived
593google/nsjailA lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel ★ 4.2kC++Apache-2.0Active
594xiaoy-sec/Pentest_Note渗透测试常规操作记录★ 4.2k——Stale
595ericc-ch/copilot-apiTurn GitHub Copilot into OpenAI/Anthropic API compatible server. Usable with Claude Code!★ 4.1kTypeScriptMITSlowing
596HyperDbg/HyperDbgState-of-the-art native debugging tools★ 4.1kCGPL-3.0Active
5970xsyr0/Awesome-Cybersecurity-HandbooksA huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.★ 4.1k—GPL-3.0Active
598alexandreborges/malwoverviewMalwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malp★ 4.1kPythonGPL-3.0Active
599google/end-to-endEnd-To-End is a crypto library to encrypt, decrypt, digital sign, and verify signed messages (implementing OpenPGP)★ 4.1kJavaScriptApache-2.0Archived
600patriksimek/vm2Advanced vm/sandbox for Node.js★ 4.1kJavaScriptMITActive