SSealbook
Sealbook / Open source / Security & hacking

Top open-source security & hacking on GitHub

2,493 repositories with 1,000+ stars, ranked by stars. Leading: frp, sherlock, ghidra.

RepositoryStarsLanguageLicenseActivity
701BlackArch/blackarchAn ArchLinux based distribution for penetration testers and security researchers.★ 3.5kShellBSD-3-ClauseActive
702meshbird/meshbirdDistributed private networking★ 3.5kGoApache-2.0Slowing
703Y1ran/Free-VPN-for-Coursera:key: :unlock:免费开源的科学上网工具★ 3.5kDockerfile—Stale
704ReVanced/revanced-patcher💉 ReVanced Patcher used to patch Android applications★ 3.5kKotlinGPL-3.0Slowing
705TrustTunnel/TrustTunnelModern, fast and obfuscated VPN protocol★ 3.5kRustApache-2.0Active
706zhzyker/vulmapVulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能★ 3.5kPythonGPL-3.0Stale
707ukanth/afwallAFWall+ (Android Firewall +) - iptables based firewall for Android ★ 3.5kJavaGPL-3.0Active
708vulnersCom/nmap-vulnersNmap NSE scripts that turn a service scan into CVEs, CVSS scores and known exploits — fingerprints software from HTTP responses and checks e★ 3.5kLuaOtherActive
709t3l3machus/hoaxshellA Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.★ 3.5kPythonBSD-2-ClauseStale
710commaai/opendbca Python API for your car★ 3.5kPythonMITActive
711matro7sh/BypassAVThis map lists the essential techniques to bypass anti-virus and EDR★ 3.5k——Stale
712imadr/Unity-game-hackingA guide for hacking unity games★ 3.5k——Stale
713chanakaudaya/solution-architecture-patternsReusable, vendor-neutral, industry-specific, vendor-specific solution architecture patterns for enterprise ★ 3.5k—CC-BY-4.0Stale
7142factorauth/twofactorauthList of sites with two factor auth support which includes SMS, email, phone calls, hardware, and software.★ 3.5kJavaScriptOtherActive
715henryboldi/felony🔑🔥📈 Next Level PGP★ 3.5kJavaScriptMITStale
716google/OpenSKOpenSK is an open-source implementation for security keys written in Rust that supports both FIDO U2F and FIDO2 standards.★ 3.5kRustApache-2.0Active
717adrienverge/openfortivpnClient for PPP+TLS VPN tunnel services★ 3.4kPerlGPL-3.0Active
718google/timesketchCollaborative forensic timeline analysis★ 3.4kPythonApache-2.0Active
719decalage2/oletoolsoletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware anal★ 3.4kPythonOtherSlowing
720EntySec/GhostGhost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device.★ 3.4kPythonMITSlowing
721ph4ntonn/Stowaway👻Stowaway -- Multi-hop Proxy Tool for pentesters★ 3.4kGoMITSlowing
722corkami/collisionsHash collisions and exploitations★ 3.4kPython—Stale
723opsdisk/pagodopagodo (Passive Google Dork) - Automate Google Hacking Database scraping and searching★ 3.4kPythonGPL-3.0Slowing
724odedshimon/BruteSharkNetwork Analysis Tool★ 3.4kC#GPL-3.0Stale
725Yamato-Security/hayabusaHayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.★ 3.4kRustAGPL-3.0Active
726google/honggfuzzSecurity oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)★ 3.4kCApache-2.0Active
727Bo0oM/fuzz.txtPotentially dangerous files★ 3.4k—WTFPLActive
728paragonie/pasetoPlatform-Agnostic Security Tokens★ 3.4kPHPOtherStale
729deepfence/SecretScanner:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:★ 3.4kGoMITSlowing
730linkedin/qarkTool to look for several security related Android application vulnerabilities★ 3.4kPythonOtherStale
731google/differential-privacyGoogle's differential privacy libraries.★ 3.4kGoApache-2.0Active
732codingo/NoSQLMapAutomated NoSQL database enumeration and web application exploitation tool.★ 3.4kPythonGPL-3.0Active
733futo-org/android-keyboardOfficial FUTO Keyboard Issue Tracker and Source Mirror of https://gitlab.futo.org/keyboard/latinime★ 3.4kC++OtherActive
734EFForg/https-everywhereA browser extension that encrypts your communications with many websites that offer HTTPS but still allow unencrypted connections.★ 3.4kJavaScriptOtherArchived
735RNCryptor/RNCryptorCCCryptor (AES encryption) wrappers for iOS and Mac in Swift. -- For ObjC, see RNCryptor/RNCryptor-objc★ 3.4kSwiftMITStale
736maestron/botnetsThis is a collection of #botnet source codes, unorganized. For EDUCATIONAL PURPOSES ONLY★ 3.3kC++—Stale
737rawfilejson/awesome-osint-arsenalOSINT & recon toolkit // 100+ tools, one-command installer, SOCMINT, GEOINT, network recon, dark web, forensics & more.★ 3.3kShellMITActive
738Perfare/Zygisk-Il2CppDumperUsing Zygisk to dump il2cpp data at runtime★ 3.3kCMITStale
739gwen001/pentest-toolsA collection of custom security tools for quick needs.★ 3.3kPython—Active
740almandin/fuxploiderFile upload vulnerability scanner and exploitation tool.★ 3.3kPythonGPL-3.0Stale
741morkt/GARbroVisual Novels resource browser★ 3.3kC#MITStale
742rustic-rs/rusticrustic - fast, encrypted, and deduplicated backups powered by Rust★ 3.3kRustApache-2.0Active
743horsicq/DIE-engineDIE engine★ 3.3kC++MITActive
744nabla-c0d3/ssl-kill-switch2Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and macOS applications.★ 3.3kObjective-COtherStale
745chipsec/chipsecPlatform Security Assessment Framework★ 3.3kPythonGPL-2.0Active
746basil00/WinDivertWinDivert: Windows Packet Divert★ 3.3kCOtherStale
747express-rate-limit/express-rate-limitBasic rate-limiting middleware for the Express web server★ 3.3kTypeScriptMITActive
748coreruleset/corerulesetOWASP CRS (Official Repository)★ 3.3kPythonApache-2.0Active
749ignis-sec/Pwdb-PublicA collection of all the data i could extract from 1 billion leaked credentials from internet.★ 3.3k—MITStale
750goodwithtech/dockleContainer Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start★ 3.3kGoApache-2.0Active