SSealbook
Sealbook / Open source / Security & hacking

Top open-source security & hacking on GitHub

2,493 repositories with 1,000+ stars, ranked by stars. Leading: frp, sherlock, ghidra.

RepositoryStarsLanguageLicenseActivity
1501kulikov0/whitelist-bypassTunneling data over webrtc to bypass censorship ★ 1.7kGoMITActive
1502openappsec/openappsecopen-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This ★ 1.7kC++Apache-2.0Active
1503trailofbits/buttercupButtercup finds and patches software vulnerabilities★ 1.7kPythonAGPL-3.0Active
1504Da2dalus/The-MALWARE-RepoA repository full of malware samples.★ 1.7kVBScript—Stale
1505cr0hn/dockerscanThe Most Comprehensive Docker Security Scanner★ 1.7kGoOtherActive
1506nccgroup/Scout2Security auditing tool for AWS environments★ 1.7kPythonGPL-2.0Archived
1507k8gege/LadonGoLadon for Kali 全平台开源内网渗透扫描器,Windows/Linux/Mac/路由器内网渗透，使用它可轻松一键批量探测C段、B段、A段存活主机、高危漏洞检测MS17010、SmbGhost，远程执行SSH/Winrm，密码爆破SMB/SSH/FTP/Mysql/Ms★ 1.7kGoMITStale
1508kovidomi/game-reversingBeginner learning materials on how to reverse engineer video games★ 1.7k—UnlicenseStale
1509dolevf/Damn-Vulnerable-GraphQL-ApplicationDamn Vulnerable GraphQL Application is an intentionally vulnerable GraphQL service implementation designed for learning about and practising★ 1.7kJavaScriptMITStale
1510B3nac/Android-Reports-and-ResourcesA big list of Android Hackerone disclosed reports and other resources. ★ 1.7k——Stale
1511splunk/security_contentSplunk Security Content★ 1.7kPythonApache-2.0Active
1512Safe3/uusec-wafIndustry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.★ 1.7kShellBSD-2-ClauseActive
1513keepassium/KeePassiumKeePass-compatible password manager for iOS and macOS★ 1.7kSwiftOtherSlowing
1514elasticdog/transcrypttransparently encrypt files within a git repository★ 1.7kShellMITActive
1515noob-hackers/kalimuxInstall And Use Kali Linux With Gui In Termux★ 1.7kShellMITStale
1516hasherezade/tiny_tracerA Pin Tool for tracing API calls etc★ 1.7kC++GPL-2.0Slowing
1517webprofusion/certifyProfessional ACME Client for Windows (and now cross-platform via Certify Management Hub). Certificate Management UI, powered by Let's Encryp★ 1.7kC#OtherActive
1518iam4x/bobarr🍿 The all-in-one alternative for Sonarr, Radarr, Jackett... with a VPN and running in docker★ 1.7kTypeScriptMITArchived
1519reZach/secure-electron-templateThe best way to build Electron apps with security in mind.★ 1.7kJavaScriptMITSlowing
1520vx3r/wg-gen-webSimple Web based configuration generator for WireGuard★ 1.7kGoWTFPLStale
1521vladko312/SSTImapAutomatic SSTI detection tool with interactive interface★ 1.7kPythonGPL-3.0Active
1522Ascotbe/HackerMind各种安全相关思维导图整理收集。渗透步骤，web安全，CTF，业务安全，人工智能，区块链安全，数据安全，安全开发，无线安全，社会工程学，二进制安全，移动安全，红蓝对抗，运维安全，风控安全，linux安全★ 1.7k——Stale
1523chroxify/hapticA new local-first, privacy-focused and open-source home for your markdown notes★ 1.7kSvelteAGPL-3.0Stale
1524Myzel394/AlibiUse your phone as a dashcam and save the last 30 minutes when you need them.★ 1.7kKotlinGPL-3.0Slowing
1525symfony/security-httpSymfony Security Component - HTTP Integration★ 1.7kPHPMITActive
1526utkusen/urlhuntera recon tool that allows searching on URLs that are exposed via shortener services★ 1.7kGoMITStale
1527matanolabs/matanoOpen source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS★ 1.7kRustApache-2.0Stale
1528The-XSS-Rat/SecurityTesting★ 1.7kPython—Slowing
1529irsdl/IIS-ShortName-Scannerlatest version of scanners for IIS short filename (8.3) disclosure vulnerability★ 1.7kJava—Stale
1530Ekultek/WhatBreachOSINT tool to find breached emails, databases, pastes, and relevant information★ 1.7kPython—Stale
1531swisskyrepo/GraphQLmapGraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)★ 1.7kPythonMITStale
1532Cybereason/Logout4ShellUse Log4Shell vulnerability to vaccinate a victim server against Log4Shell★ 1.7kJavaMITStale
1533xdavidhu/mitmAP📡 A python program to create a fake AP and sniff data.★ 1.7kPythonMITArchived
1534marin-m/pbtkA toolset for reverse engineering and fuzzing Protobuf-based apps★ 1.7kPythonGPL-3.0Active
1535wireghoul/grauditgrep rough audit - source code auditing tool★ 1.7kShellGPL-3.0Active
1536jstrosch/malware-samplesMalware samples, analysis exercises and other interesting resources.★ 1.7kHTML—Stale
1537sc1341/InstagramOSINTAn Instagram Open Source Intelligence Tool - Archive★ 1.7kPythonMITArchived
1538TryCatchHCF/CloakifyCloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steg★ 1.7kPythonMITStale
1539Cisco-Talos/pyreboxPython scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU★ 1.7kCGPL-2.0Archived
1540krisnova/boopkitLinux eBPF backdoor over TCP. Spawn reverse shells, RCE, on prior privileged access. Less Honkin, More Tonkin.★ 1.7kCApache-2.0Stale
1541natemcmaster/LettuceEncryptFree, automatic HTTPS certificate generation for ASP.NET Core web apps★ 1.7kC#Apache-2.0Archived
1542KeenSecurityLab/BinAbsInspectorBinAbsInspector: Vulnerability Scanner for Binaries★ 1.7kJavaGPL-3.0Stale
1543scito/extract_otp_secretsExtract one time password (OTP) secrets from QR codes exported by two-factor authentication (2FA) apps such as "Google Authenticator". The e★ 1.7kPythonGPL-3.0Active
1544palark/ovpn-adminSimple web UI to manage OpenVPN users.★ 1.7kGoApache-2.0Active
1545itext/itextpdf[DEPRECATED] Core Java Library + PDF/A, xtra and XML Worker. Only security fixes will be added — please use iText 7★ 1.7kJavaOtherActive
1546rasta-mouse/WatsonEnumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities★ 1.7kC#GPL-3.0Archived
1547Ge0rg3/requests-ip-rotatorA Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing.★ 1.7kPythonGPL-3.0Slowing
1548alibaba/kt-connectA toolkit for Integrating with your kubernetes dev environment more efficiently★ 1.7kGoGPL-3.0Stale
1549cddmp/enum4linux-ngA next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for securit★ 1.7kPythonGPL-3.0Slowing
1550bee-san/Name-That-Hash🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a ★ 1.7kPythonGPL-3.0Slowing