SSealbook
Sealbook / Open source / Security & hacking

Top open-source security & hacking on GitHub

2,493 repositories with 1,000+ stars, ranked by stars. Leading: frp, sherlock, ghidra.

RepositoryStarsLanguageLicenseActivity
1151transmissions11/solcurityOpinionated security and code quality standard for Solidity smart contracts.★ 2.2k——Stale
1152ruby-oauth/oauth2🔐 oauth2 - A Ruby wrapper for the OAuth 2.0, & 2.1 Authorization Frameworks, including OpenID Connect (OIDC)★ 2.2kRubyOtherActive
1153vulhub/java-chainsJava Vulnerability Exploitation Platform★ 2.2kShell—Active
1154jar-analyzer/jar-analyzerJar Analyzer - 一个 JAR 包 GUI 分析工具，内置 AI 助手协助分析，支持 JAR DIFF 分析，方法调用关系搜索，方法调用链 DFS 算法分析，模拟 JVM 的污点分析验证 DFS 结果，字符串搜索，Java Web 组件入口分析，CFG 程序分析，JV★ 2.2kJavaGPL-3.0Active
1155yadox666/The-Hackers-Hardware-ToolkitThe best hacker's gadgets for Red Team pentesters and security researchers.★ 2.2k—MPL-2.0Stale
1156CedArctic/DigiSpark-ScriptsUSB Rubber Ducky type scripts written for the DigiSpark.★ 2.2kC++MITStale
1157bats3c/shad0wA post exploitation framework designed to operate covertly on heavily monitored environments★ 2.2kCMITStale
1158salesforce/policy_sentryIAM Least Privilege Policy Generator★ 2.2kPythonMITActive
1159center-for-threat-informed-defense/adversary_emulation_libraryAn open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs. ★ 2.2kCApache-2.0Stale
1160ffffffff0x/f8x红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool★ 2.2kShellApache-2.0Active
11610Chencc/CTFCrackToolsThe next-generation CTF Swiss Army Knife powered by Rust & Tauri. Features a visual node-based workflow and local AI intelligence for extrem★ 2.2kRustGPL-3.0Slowing
1162zhzyker/dismapAsset discovery and identification tools 快速识别 Web 指纹信息，定位资产类型。辅助红队快速定位目标资产信息，辅助蓝队发现疑似脆弱点★ 2.2kGoGPL-3.0Stale
1163Dliv3/VenomVenom - A Multi-hop Proxy for Penetration Testers★ 2.2kGoMITStale
1164aws/aws-eks-best-practicesA best practices guide for day 2 operations, including operational excellence, security, reliability, performance efficiency, and cost optim★ 2.2kPythonOtherActive
1165sgan81/apfs-fuseFUSE driver for APFS (Apple File System)★ 2.2kC++GPL-2.0Stale
1166vgough/encfsEncFS: an Encrypted Filesystem for FUSE.★ 2.2kRustLGPL-3.0Active
1167mozilla/MozDefDEPRECATED - MozDef: Mozilla Enterprise Defense Platform★ 2.2kPythonMPL-2.0Archived
1168praetorian-inc/gokartA static analysis tool for securing Go code★ 2.2kGoApache-2.0Archived
1169gabrie30/ghorgQuickly clone or backup massive amounts of org/users repositories into one directory - Supports GitHub, GitLab, Bitbucket, and more 🐇🥚★ 2.2kGoApache-2.0Active
1170StellarSand/privacy-settingsGuide to privacy settings for most major software and services.★ 2.2k—MITActive
1171m14r41/PentestingEverythingComplete Solution for VAPT/AppSec and Pentesting Guide: Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | Net★ 2.2kTypeScriptMITActive
1172devstructure/blueprintReverse engineer server configuration★ 2.2kPythonOtherStale
1173anouarbensaad/vulnxvulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can ★ 2.1kPythonGPL-3.0Stale
1174initstring/cloud_enumMulti-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.★ 2.1kPythonMITActive
1175ctfs/write-ups-2017Wiki-like CTF write-ups repository, maintained by the community. 2017★ 2.1kPython—Stale
1176awslabs/aws-well-architected-labsHands on labs and code to help you learn, measure, and build using architectural best practices.★ 2.1kPythonApache-2.0Slowing
1177D4Vinci/Cr3dOv3rKnow the dangers of credential reuse attacks.★ 2.1kPythonMITSlowing
1178a13xp0p0v/kernel-hardening-checkerA tool for checking the security hardening options of the Linux kernel★ 2.1kPythonGPL-3.0Active
1179FeeiCN/GSILGitHub Sensitive Information Leakage（GitHub敏感信息泄露监控）★ 2.1kPythonGPL-3.0Archived
1180brightio/penelopePenelope Shell Handler★ 2.1kPythonGPL-3.0Active
1181FriendsOfPHP/security-advisoriesA database of PHP security advisories★ 2.1kPHPUnlicenseActive
1182chainreactors/gogo面向红队的, 高性能高度自由可拓展的自动化扫描引擎 | A highly controllable and extensionable automated scanning engine for red teams★ 2.1kGoGPL-3.0Active
1183nettitude/PoshC2A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.★ 2.1kPowerShellBSD-3-ClauseSlowing
1184skavngr/rapidscan:new: The Multi-Tool Web Vulnerability Scanner. ★ 2.1kPythonGPL-2.0Stale
1185FoxIO-LLC/ja4JA4+ is a suite of network fingerprinting standards★ 2.1kRustOtherActive
1186walidshaari/Certified-Kubernetes-Security-SpecialistCurated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. Pl★ 2.1kAGS ScriptCC-BY-SA-4.0Slowing
1187UnaPibaGeek/ctfrAbusing Certificate Transparency logs for getting HTTPS websites subdomains.★ 2.1kPythonGPL-3.0Stale
1188haccer/subjackDNS Takeover tool written in Go★ 2.1kGoMITActive
1189SpecialKO/SpecialKLovingly referred to as the Swiss Army Knife of PC gaming, Special K does a bit of everything.★ 2.1kC++GPL-3.0Active
1190AzizKpln/Gokboru_IntelThis tool gives information about the phone number that you entered.★ 2.1kPythonMITActive
1191pojntfx/weronOverlay networks based on WebRTC.★ 2.1kGoAGPL-3.0Stale
1192yogsec/Hacking-ToolsA curated list of penetration testing and ethical hacking tools, organized by category. This compilation includes tools from Kali Linux and ★ 2.1k—MITActive
1193sleep3r/mtproto.zigKeep the people you love connected — a tiny self-hosted Telegram proxy that hides in plain HTTPS★ 2.1kZigMITActive
1194phishdestroy/destroylistReal-time phishing & scam domain blocklist - 205k+ curated threats, 1M+ community, free API, multiple formats★ 2.1kHTMLMITActive
1195hannob/snallygasterTool to scan for secret files on HTTP servers★ 2.1kPython0BSDActive
1196authorizerdev/authorizerYour data, your control. Fully open source, authentication and authorization. No lock-ins. Deployment in Railway in 120 seconds || Spin a d★ 2.1kGoApache-2.0Active
1197megadose/ignorantignorant allows you to check if a phone number is used on different sites like snapchat, instagram.★ 2.1kPythonGPL-3.0Stale
1198oxen-io/lokinetLokinet is an anonymous, decentralized and IP based overlay network for the internet.★ 2.1kC++GPL-3.0Active
1199quericy/one-key-ikev2-vpnA bash script base on Centos or Ubuntu help you to create IKEV2/L2TP vpn.★ 2.1kShellGPL-3.0Stale
1200hasherezade/malware_training_vol1Materials for Windows Malware Analysis training (volume 1)★ 2.1kAssembly—Stale