SSealbook
Sealbook / Open source / Security & hacking

Top open-source security & hacking on GitHub

2,493 repositories with 1,000+ stars, ranked by stars. Leading: frp, sherlock, ghidra.

RepositoryStarsLanguageLicenseActivity
10510x48piraj/fadblockFriendly Adblock for YouTube: A fast, lightweight, and undetectable YouTube Ads Blocker for Chrome, Opera and Firefox.★ 2.4kCSS—Archived
1052OWASP/API-SecurityOWASP API Security Project★ 2.4kDockerfileOtherActive
1053ntfargo/Relapse-ExploitExploit chain for PS5 7.00 - 13.60★ 2.4kJavaScriptMITActive
1054EONRaider/blackhat-python3Source code for the book "Black Hat Python" by Justin Seitz. The code has been fully converted to Python 3, reformatted to comply with PEP8 ★ 2.4kPython—Stale
1055AhmetCanArslan/ShizuWallLightweight, no vpn firewall solution for Android 11+★ 2.4kKotlinGPL-3.0Active
1056jaeles-project/jaelesThe Swiss Army knife for automated Web Application Testing★ 2.4kGoMITSlowing
1057eslint-community/eslint-plugin-securityESLint rules for Node Security★ 2.4kJavaScriptApache-2.0Active
1058lijiejie/BBScanA fast vulnerability scanner helps pentesters pinpoint possibly vulnerable targets from a large number of web servers★ 2.4kPythonApache-2.0Stale
1059jtpereyda/boofuzzA fork and successor of the Sulley Fuzzing Framework★ 2.4kPythonGPL-2.0Active
1060david942j/one_gadgetThe best tool for finding one gadget RCE in libc.so.6★ 2.4kRubyMITActive
1061unrolled/secureHTTP middleware for Go that facilitates some quick security wins.★ 2.4kGoMITActive
1062keepassxreboot/keepassxc-browserKeePassXC Browser Extension★ 2.4kJavaScriptGPL-3.0Active
1063alangrainger/immich-public-proxyShare your Immich photos and albums in a safe way without exposing your Immich instance to the public.★ 2.4kTypeScriptAGPL-3.0Active
1064Ch0pin/medusaMobile Edge-Dynamic Unified Security Analysis★ 2.4kJavaScriptGPL-3.0Active
1065AabyssZG/SpringBoot-Scan针对SpringBoot的开源渗透框架，以及Spring相关高危漏洞利用工具★ 2.4kPythonMITSlowing
1066ssl/ezXSSezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.★ 2.3kPHPMITSlowing
1067byt3bl33d3r/SILENTTRINITYAn asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR★ 2.3kBooGPL-3.0Archived
1068MegaManSec/SSH-SnakeSSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host di★ 2.3kShellGPL-3.0Archived
1069safebuffer/vulnerable-ADCreate a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab ★ 2.3kPowerShellMITStale
1070smallbets/userbaseCreate secure and private web apps using only static JavaScript, HTML, and CSS.★ 2.3kJavaScriptMITSlowing
1071crev-dev/cargo-crevA cryptographically verifiable code review system for the cargo (Rust) package manager.★ 2.3kRustApache-2.0Active
1072praetorian-inc/noseyparkerNosey Parker is a command-line tool that finds secrets and sensitive information in textual data and Git history.★ 2.3kRustApache-2.0Archived
1073onury/accesscontrolRole and Attribute based Access Control for Node.js★ 2.3kTypeScriptMITActive
1074evilsocket/xrayXRay is a tool for recon, mapping and OSINT gathering from public networks.★ 2.3kGoGPL-3.0Archived
1075retroplasma/earth-reverse-engineeringReversing Google's 3D satellite mode★ 2.3kC—Archived
1076a13xp0p0v/linux-kernel-defence-mapLinux Kernel Defence Map shows the relationships between vulnerability classes, exploitation techniques, bug detection mechanisms, and defen★ 2.3k—GPL-3.0Active
1077nielsfaber/alarmoEasy to use alarm system integration for Home Assistant★ 2.3kPythonApache-2.0Active
1078cider-security-research/cicd-goatA deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.★ 2.3kPythonApache-2.0Stale
1079bjdgyc/anylinkAnyLink是一个企业级远程办公 ssl vpn 软件，可以支持多人同时在线使用。基于 openconnect 协议开发，并且借鉴了 ocserv 的开发思路，可以完全兼容 AnyConnect 客户端。★ 2.3kGoAGPL-3.0Active
1080cryfs/cryfsCryptographic filesystem for the cloud★ 2.3kRustLGPL-3.0Active
1081tunz/js-vuln-dbA collection of JavaScript engine CVEs with PoCs★ 2.3k——Stale
1082aditya-shri/VPNPersonal VPN using Shadowsocks and v2ray★ 2.3kShellGPL-3.0Stale
1083Zouuup/landrunRun any Linux process in a secure, unprivileged sandbox using Landlock. Think firejail, but lightweight, user-friendly, and baked into the k★ 2.3kGoMITActive
1084owerdogan/whoami-projectWhoami provides enhanced privacy, anonymity for Debian and Arch based linux distributions★ 2.3kShellGPL-3.0Stale
1085PatrikH0lop/malware_showcaseUnderstand the nature of malicious software with practical examples in Python.★ 2.3kPythonMITStale
10861N3/BruteXAutomatically brute force all services running on a target.★ 2.3kShell—Stale
1087gotham-rs/gothamA flexible web framework that promotes stability, safety, security and speed.★ 2.3kRustOtherActive
1088bigb0sss/RedTeam-OffensiveSecurityTools & Interesting Things for RedTeam Ops★ 2.3kPythonMITSlowing
1089sevagas/macro_packmacro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other form★ 2.3kPythonApache-2.0Archived
1090tanc7/hacking-books★ 2.3k——Stale
1091notracking/hosts-blocklistsAutomatically updated, moderated and optimized lists for blocking ads, trackers, malware and other garbage★ 2.3k——Archived
1092yuezk/GlobalProtect-openconnectA GlobalProtect VPN client for Linux and macOS, written in Rust, based on OpenConnect and Tauri, supports SSO with MFA, YubiKey, and client ★ 2.3kRustGPL-3.0Active
1093squat/kiloKilo is a multi-cloud network overlay built on WireGuard and designed for Kubernetes (k8s + wg = kg)★ 2.3kGoApache-2.0Active
1094gautamkrishnar/nothing-privateDo you think you are safe using private browsing or incognito mode?. :smile: :imp: This will prove that you're wrong. Previously hosted at★ 2.3kJavaScriptGPL-3.0Active
1095lamster2018/EasyProtector一行代码检测XP/调试/多开/模拟器/root★ 2.3kJavaApache-2.0Stale
1096accrescent/accrescentA novel Android app store focused on security, privacy, and usability★ 2.3kKotlinApache-2.0Active
1097buginux/WeChatRedEnvelopiOS版微信抢红包Tweak★ 2.3kObjective-C—Archived
1098allenymt/PrivacySentryAndroid隐私合规整改检测工具，注解+Asm修改字节码的检测方案★ 2.3kKotlinMITSlowing
1099sh-dv/hat.shEncrypt and Decrypt files securely in your browser.★ 2.3kJavaScriptMITStale
1100jdx/fnoxencrypted/remote secret manager★ 2.3kRustMITActive