SSealbook
Sealbook / Open source / Security & hacking

Top open-source security & hacking on GitHub

2,493 repositories with 1,000+ stars, ranked by stars. Leading: frp, sherlock, ghidra.

RepositoryStarsLanguageLicenseActivity
651hxehex/russia-mobile-internet-whitelista list of domains and ips that stay live in russia when the mobile internet gets restricted★ 3.8k—MITActive
652Orange-Cyberdefense/arsenalArsenal is just a quick inventory and launcher for hacking programs★ 3.8kPythonGPL-3.0Stale
653Findomain/FindomainThe fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdo★ 3.8kRustGPL-3.0Active
654edoardottt/cariddiTake a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more★ 3.8kGoGPL-3.0Active
655nabla-c0d3/sslyzeFast and powerful SSL/TLS scanning library.★ 3.8kPythonAGPL-3.0Active
656scipag/vulscanAdvanced vulnerability scanning with Nmap NSE★ 3.8kLuaOtherSlowing
657sinwindie/OSINTCollections of tools and methods created to aid in OSINT collection★ 3.8kPython—Stale
658google/fully-homomorphic-encryptionHomomorphic Encryption demos★ 3.8kStarlarkApache-2.0Active
659JJTech0130/pypushPython APNs and iMessage client★ 3.8kPythonOtherSlowing
660aquasecurity/cloudsploitCloud Security Posture Management (CSPM)★ 3.8kJavaScriptGPL-3.0Active
661Mouseww/anything-analyzer全能协议分析工具：浏览器抓包 + MITM 代理 + 指纹伪装 + AI 分析 + MCP Server 无缝对接 AI Agent/IDE | All-in-one protocol analysis toolkit — built-in browser capture,★ 3.8kTypeScriptApache-2.0Active
662nixawk/pentest-wikiPENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.★ 3.8kPythonMITStale
663mollyim/mollyim-androidEnhanced and security-focused fork of Signal.★ 3.8kKotlinAGPL-3.0Active
664RhinoSecurityLabs/cloudgoatCloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool★ 3.8kPythonBSD-3-ClauseActive
665WGDashboard/WGDashboardSimple dashboard for WireGuard VPN written in Python & Vue.js★ 3.8kVueApache-2.0Active
666sozu-proxy/sozuSōzu HTTP reverse proxy, configurable at runtime, fast and safe, built in Rust. It is awesome!★ 3.7kRustAGPL-3.0Active
667linuxserver/docker-swagNginx webserver and reverse proxy with php support and a built-in Certbot (Let's Encrypt) client. It also contains fail2ban for intrusion pr★ 3.7kDockerfileGPL-3.0Active
668Tyrrrz/YoutubeExplodeAbstraction layer over YouTube's internal API★ 3.7kC#MITActive
669builtbybel/privatezilla👀👮🐢🔥Performs a privacy & security check of Windows 10 ★ 3.7kC#MITStale
670Hamed233/Cybersecurity-Mastery-RoadmapA comprehensive, step-by-step guide to mastering cybersecurity from beginner to expert level with curated resources, tools, and career guida★ 3.7k——Active
671momo5502/sogen🪅 Windows & Linux userspace emulator ★ 3.7kC++GPL-2.0Active
672schemaspy/schemaspyDatabase documentation built easy★ 3.7kHTMLLGPL-3.0Slowing
673microcosm-cc/bluemondaybluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS★ 3.7kGoBSD-3-ClauseStale
674webhintio/hint💡 A hinting engine for the web★ 3.7kTypeScriptApache-2.0Active
675WithSecureOpenSource/chainsawRapidly Search and Hunt through Windows Forensic Artefacts★ 3.7kRustGPL-3.0Active
676str4d/rageA simple, secure and modern file encryption tool (and Rust library) with small explicit keys, no config options, and UNIX-style composabilit★ 3.7kRustApache-2.0Active
677OWASP/ASVSApplication Security Verification Standard★ 3.7kHTMLCC-BY-SA-4.0Active
678cSploit/androidcSploit - The most complete and advanced IT security professional toolkit on Android.★ 3.7kJavaGPL-3.0Stale
679Az0x7/vulnerability-ChecklistThis repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter★ 3.7k——Stale
680Cats-Team/AdRulesList for blocking ads in the Chinese region. Block Ads, Trackers, Malware, HTTPDNS, PCDN.★ 3.7kPython0BSDActive
681swisskyrepo/SSRFmapAutomatic SSRF fuzzer and exploitation tool★ 3.6kPythonMITActive
682guardianproject/orbot-androidThe Github home of Orbot: Tor on Android (Also available on gitlab!)★ 3.6kKotlinOtherActive
683tnodir/fortFort Firewall for Windows★ 3.6kC++GPL-3.0Active
684yokoffing/filterlistsCollection of blocklists to fill in the gaps★ 3.6k——Active
685lijiejie/subDomainsBruteA fast sub domain brute tool for pentesters★ 3.6kPython—Stale
686pret/pokeemeraldDecompilation of Pokémon Emerald★ 3.6kC—Active
687FeeiCN/Security-PPTSecurity-related Slide Presentation & Security Research Report（大安全各领域各公司各会议分享的PPT以及各类安全研究报告）★ 3.6kHTML—Archived
688arch3rPro/Pentest-Windows⚔️Windows11 Penetration Suite Toolkit 🔰 The First Windows Penetration Testing Environment on Mac M Chips★ 3.6k——Stale
689animir/node-rate-limiter-flexibleAtomic and non-atomic counters and rate limiting tools. Limit resource access at any scale.★ 3.6kJavaScriptISCActive
690ysrc/xunfeng巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。★ 3.6kPythonGPL-3.0Stale
691open-goal/jak-projectReviving the language that brought us the Jak & Daxter Series★ 3.6kCommon LispISCActive
692kelvinBen/AppInfoScanner一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹★ 3.6kPythonGPL-3.0Active
693lijiejie/GitHackA `.git` folder disclosure exploit★ 3.6kPython—Stale
694JosephSilber/bouncerLaravel Eloquent roles and abilities.★ 3.6kPHPMITSlowing
695ran-j/PS2RecompPlaystation 2 Static Recompiler & Runtime Tool to make native PC ports★ 3.6kC++GPL-3.0Active
696kevoreilly/CAPEv2Malware Configuration And Payload Extraction★ 3.6kPythonOtherActive
697alienzhou/frontend-tech-list📝 Frontend Tech List for Developers 💡★ 3.6kHTML—Stale
698abhinavsingh/proxy.py💫 Ngrok FRP Alternative • ⚡ Fast • 🪶 Lightweight • 0️⃣ Dependency • 🔌 Pluggable • 😈 TLS interception • 🔒 DNS-over-HTTPS • 🔥 Poor Man's VPN •★ 3.6kPythonBSD-3-ClauseActive
699amlweems/xzbotnotes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)★ 3.5kGo—Stale
700mellow-io/mellowMellow is a rule-based global transparent proxy client for Windows, macOS and Linux. Also a Proxifier alternative.★ 3.5kJavaScript—Stale