SSealbook
Sealbook / Open source / Security & hacking

Top open-source security & hacking on GitHub

2,493 repositories with 1,000+ stars, ranked by stars. Leading: frp, sherlock, ghidra.

RepositoryStarsLanguageLicenseActivity
1751lunasec-io/lunasecLunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests★ 1.5kTypeScriptOtherStale
1752mrash/fwknopSingle Packet Authorization > Port Knocking★ 1.5kPerlGPL-2.0Slowing
1753epsylon/xsserCross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications.★ 1.5kPython—Active
1754elementor/wp2staticWordPress static site generator for security, performance and cost benefits★ 1.5kPHPUnlicenseStale
1755jordanpotti/AWSBucketDumpSecurity Tool to Look For Interesting Files in S3 Buckets★ 1.5kPythonMITStale
1756strongbox-password-safe/StrongboxA KeePass/Password Safe Client for iOS and OS X★ 1.5kObjective-CAGPL-3.0Slowing
1757fkie-cad/FACT_coreFirmware Analysis and Comparison Tool★ 1.5kPythonGPL-3.0Active
1758infrahq/infraInfra provides authentication and access management to servers and Kubernetes clusters.★ 1.5kGoOtherActive
1759psecio/iniscanA php.ini scanner for best security practices★ 1.5kPHPMITStale
1760tillson/git-houndFast GitHub recon tool. Scans for leaked secrets across all of GitHub, not just known repos and orgs. Support for GitHub dorks.★ 1.5kGoMITSlowing
1761pritunl/pritunl-clientPritunl OpenVPN and WireGuard client★ 1.5kGoOtherActive
1762eljojo/rememorya digital safe with multiple keys, held by people you trust★ 1.5kGoApache-2.0Active
1763ptswarm/reFlutterFlutter Reverse Engineering Framework★ 1.5kPythonGPL-3.0Archived
1764qpoint-io/qtapQtap: An eBPF agent that captures pre-encrypted network traffic, providing rich context about egress connections and their originating proce★ 1.5kCApache-2.0Active
17650xMarcio/pocindexSearch public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub, with CVSS, EPSS and CISA KEV context.★ 1.5kPythonMITActive
1766OWASP/SecurityShepherdWeb and mobile application security training platform★ 1.5kJavaGPL-3.0Active
1767omegaee/my-fingerprint保护你的浏览器指纹 | Protect Your Browser Fingerprints | Chrome, Edge, Firefox | 扩展 / Extension★ 1.5kTypeScriptApache-2.0Active
1768Synzvato/decentraleyesThis repository has a new home: https://git.synz.io/Synzvato/decentraleyes★ 1.5kJavaScriptMPL-2.0Archived
1769hteso/iaitoThis project has been moved to:★ 1.5kC++GPL-3.0Stale
1770ossf/allstarGitHub App to set and enforce security policies★ 1.5kGoApache-2.0Active
1771openclarity/openclarityOpenClarity is an open source platform built to enhance security and observability of cloud native applications and infrastructure★ 1.5kGoApache-2.0Archived
1772yuzeguitarist/DeckDeck is a modern, native, privacy-first clipboard manager for macOS.★ 1.5kSwiftOtherSlowing
1773owasp-noir/noirHunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.★ 1.5kCrystalMITActive
1774SySS-Research/SethPerform a MitM attack and extract clear text credentials from RDP connections★ 1.5kPythonMITSlowing
1775tuneinsight/lattigoA library for lattice-based multiparty homomorphic encryption in Go★ 1.5kGoApache-2.0Active
1776BushidoUK/Ransomware-Tool-MatrixA resource containing all the tools each ransomware gangs uses★ 1.5k—OtherActive
1777airbnb/binaryalertBinaryAlert: Serverless, Real-time & Retroactive Malware Detection.★ 1.5kPythonApache-2.0Stale
1778programa-stic/barf-projectBARF : A multiplatform open source Binary Analysis and Reverse engineering Framework★ 1.5kPythonBSD-2-ClauseStale
1779SamJoan/droopescanA plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe.★ 1.5kHTMLAGPL-3.0Stale
1780JustasMasiulis/xorstrheavily vectorized c++17 compile time string encryption.★ 1.4kC++Apache-2.0Stale
1781Snailclimb/spring-security-jwt-guideSpring Security With JWT（含权限验证） 示例，基于 Spring Boot 3.5.0 + Java 21。★ 1.4kJava—Stale
1782das-labor/panopticonA libre cross-platform disassembler.★ 1.4kRustGPL-3.0Archived
1783aquasecurity/trivy-actionRuns Trivy as GitHub action to scan your Docker container image for vulnerabilities★ 1.4kShellApache-2.0Active
1784Cyber-Guy1/API-SecurityEmpireAPI Security Project aims to present unique attack & defense methods in API Security field★ 1.4k——Stale
1785cisagov/LMELogging Made Easy (LME) is a no cost, open source platform that centralizes log collection, enhances threat detection, and enables real-time★ 1.4kShellOtherArchived
1786initstring/passphrase-wordlistPassphrase wordlist and hashcat rules for offline cracking of long, complex passwords★ 1.4kPythonMITStale
1787pushsecurity/browser-identity-attacks-matrixOffensive security drives defensive security. We're sharing a collection of SaaS attack techniques to help defenders understand the threats ★ 1.4k—CC-BY-4.0Slowing
1788importCTF/Instagram-HackerThis is an advanced script for Instagram bruteforce attacks. WARNING THIS IS A REAL TOOL!★ 1.4kPythonMITStale
1789bollwarm/SecToolSetThe security tool(project) Set from github。github安全项目工具集合 ★ 1.4kShell—Slowing
1790hmaverickadams/TCM-Security-Sample-Pentest-ReportSample pentest report provided by TCM Security★ 1.4k——Stale
1791jweny/pocassist傻瓜式漏洞PoC测试框架★ 1.4kGoApache-2.0Archived
1792jawj/IKEv2-setupSet up a fresh Ubuntu Server install as an IKEv2 VPN server★ 1.4kShell—Slowing
1793sham00n/busterAn advanced tool for email reconnaissance★ 1.4kPythonGPL-3.0Stale
1794thalesgroup-cert/WatcherWatcher - Open Source AI-powered Cyber Threat Intelligence & Hunting Platform. Developed with Django & React JS.★ 1.4kJavaScriptAGPL-3.0Active
1795rubyzip/rubyzipOfficial Rubyzip repository★ 1.4kRubyBSD-2-ClauseActive
1796xaitax/SploitScanSploitScan is a sophisticated cybersecurity utility designed to provide detailed information on vulnerabilities and associated exploits.★ 1.4kPythonGPL-3.0Active
1797BiZken/PhishMailerGenerate Professional Phishing Emails Fast And Easy★ 1.4kPythonMITStale
1798rosenpass/rosenpassRosenpass is a post-quantum-secure VPN that uses WireGuard to transport the actual data. ★ 1.4kRustApache-2.0Active
1799Kianmhz/GooseRelayVPNSOCKS5 VPN that tunnels raw TCP through Google Apps Script to a VPS exit server, with end-to-end AES-256-GCM and domain-fronted TLS to Googl★ 1.4kGoMITSlowing
1800dockovpn/dockovpn🔐 Out of the box stateless openvpn-server docker image which starts in less than 2 seconds★ 1.4kShellGPL-2.0Stale