SSealbook
Sealbook / Open source / Security & hacking

Top open-source security & hacking on GitHub

2,493 repositories with 1,000+ stars, ranked by stars. Leading: frp, sherlock, ghidra.

RepositoryStarsLanguageLicenseActivity
1251Juude/droidReversereverse engineering tools for android（android 逆向工程工具集）★ 2kShell—Stale
1252rasta-mouse/SherlockPowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.★ 2kPowerShellGPL-3.0Archived
1253microsoft/msticpyMicrosoft Threat Intelligence Security Tools★ 2kPythonOtherActive
1254attr-encrypted/attr_encryptedGenerates attr_accessors that encrypt and decrypt attributes★ 2kRubyMITStale
1255ttlequals0/autovpnCreate On Demand Disposable OpenVPN Endpoints on AWS.★ 2kShellMITArchived
1256Nekmo/dirhuntFind web directories without bruteforce★ 2kPythonMITStale
1257GitGuardian/ggshieldDetect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive s★ 2kPythonMITActive
1258Bashfuscator/BashfuscatorA fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.★ 2kPythonMITStale
1259OwshenNetwork/owshenThe Deep Sea★ 2kRust—Stale
1260pyupio/safetySafety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.★ 2kPython—Active
1261hectorm/hblockImprove your security and privacy by blocking ads, tracking and malware domains.★ 2kShellMITSlowing
1262eset/malware-iocIndicators of Compromises (IOC) of our various investigations★ 2kYARABSD-2-ClauseActive
1263ranuts/documentLocal-first browser editor for Word, Excel, PowerPoint and PDF, with an experimental AI assistant. No Office installation or account require★ 2kTypeScriptAGPL-3.0Active
1264Ragnt/AngryOxide802.11 Attack Tool★ 2kRustGPL-3.0Active
1265vaguileradiaz/tinfoleakThe most complete open-source tool for Twitter intelligence analysis★ 2kPythonCC-BY-SA-4.0Stale
1266h3xduck/TripleCrossA Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.★ 2kCGPL-3.0Stale
1267auto-ssl/lua-resty-auto-sslOn the fly (and free) SSL registration and renewal inside OpenResty/nginx with Let's Encrypt.★ 2kLuaMITSlowing
1268GitGuardian/APISecurityBestPracticesResources to help you keep secrets (API keys, database credentials, certificates, ...) out of source code and remediate the issue in case of★ 2k—OtherStale
1269Siguza/ios-resourcesUseful resources for iOS hacking★ 2k——Stale
1270Fadi002/unshackleOpen-source tool to bypass windows and linux passwords from bootable usb★ 2kShellGPL-3.0Archived
1271dswd/vpncloudPeer-to-peer VPN★ 2kRustOtherStale
1272cossacklabs/themisEasy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs acr★ 2kCApache-2.0Slowing
1273fabionoth/awesome-cyber-securityA collection of awesome software, libraries, documents, books, resources and cools stuffs about security.★ 2k——Active
1274zer0yu/CyberSecurityRSSCyberSecurityRSS: A collection of cybersecurity rss to make you better!★ 2kPython—Active
1275D35m0nd142/LFISuiteTotally Automatic LFI Exploiter (+ Reverse Shell) and Scanner ★ 2kPythonGPL-3.0Stale
1276nymtech/nymNym provides strong network-level privacy against sophisticated end-to-end attackers, and anonymous transactions using blinded, re-randomiza★ 2kRust—Active
1277sensiolabs/security-checkerPHP frontend for security.symfony.com★ 2kPHPMITArchived
1278jondonas/linux-exploit-suggester-2Next-Generation Linux Kernel Exploit Suggester★ 2kPerlGPL-2.0Stale
1279Cyfrin/security-and-auditing-full-course-s23The ultimate, most advanced, security, DeFi, assembly, web3 auditor course ever created. ★ 2kSolidityGPL-3.0Slowing
1280MichaelGrafnetter/DSInternals Directory Services Internals (DSInternals) PowerShell Module and Framework★ 2kC#MITActive
1281EmptyLibra/Configure-Xray-with-VLESS-Reality-on-VPS-serverПодробная инструкция (как в pdf, так и в md формате) о настройке своего совбственного Xray-VPS-сервера (с протоколом VLESS XTLS-Reality чере★ 2kHTML—Stale
1282xalgord/Massive-Web-Application-Penetration-Testing-Bug-Bounty-NotesA comprehensive guide for web application penetration testing and bug bounty hunting, covering methodologies, tools, and resources for ident★ 2k——Stale
1283rustsec/rustsecRustSec API & Tooling★ 2kRustOtherActive
1284aquasecurity/trivy-operatorKubernetes-native security toolkit★ 2kGoApache-2.0Active
1285owtf/owtfOffensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org ★ 2kPythonBSD-3-ClauseActive
1286cytopia/pwncatpwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its★ 2kShellMITStale
1287TunnlTo/desktop-appA powerful WireGuard client for Windows with advanced split tunneling and an intuitive, user-friendly interface.★ 2k——Active
1288feihong-cs/ShiroExploit-DeprecatedShiro550/Shiro721 一键化利用工具，支持多种回显方式★ 2kJava—Stale
1289square/go-joseAn implementation of JOSE standards (JWE, JWS, JWT) in Go★ 2k——Archived
1290duckduckgo/iOSDuckDuckGo iOS Application★ 2kHTMLApache-2.0Archived
1291BishopFox/jsluiceExtract URLs, paths, secrets, and other interesting bits from JavaScript★ 2kGoMITStale
1292vxunderground/VX-APICollection of various malicious functionality to aid in malware development★ 1.9kC++MITStale
1293KasperskyLab/hrtngIDA Pro plugin with a rich set of features: decryption, deobfuscation, patching, lib code recognition and various pseudocode transformations★ 1.9kC++GPL-3.0Active
1294slsa-framework/slsaSupply-chain Levels for Software Artifacts★ 1.9kHTMLOtherActive
1295Autumn-27/ScopeSentryScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed n★ 1.9kGo—Active
1296w-digital-scanner/w13scanPassive Security Scanner (被动式安全扫描器)★ 1.9kSmartyGPL-2.0Stale
1297GhostManager/GhostwriterThe SpecterOps project management and reporting engine★ 1.9kPythonBSD-3-ClauseActive
1298nitefood/asnASN / RPKI validity / BGP stats / IPv4v6 / Prefix / URL / ASPath / Organization / IP reputation / IP geolocation / IP fingerprinting / Netwo★ 1.9kShellMITActive
1299InspectorDidi/Hacking-BooksHacking Books★ 1.9k——Stale
1300moul/sshportal:tophat: simple, fun and transparent SSH (and telnet) bastion server★ 1.9kGoApache-2.0Active