SSealbook
Sealbook / Open source / Security & hacking

Top open-source security & hacking on GitHub

2,493 repositories with 1,000+ stars, ranked by stars. Leading: frp, sherlock, ghidra.

RepositoryStarsLanguageLicenseActivity
1901go-webauthn/webauthnFIDO2 Conformant WebAuthn and Passkey backend library for golang★ 1.4kGoBSD-3-ClauseActive
1902Hacking-Notes/Hacker-RoadmapA detailed plan to achieve proficiency in hacking and penetration testing, with pathways including obtaining a degree in cybersecurity or ea★ 1.3kPython—Active
1903jeffzh3ng/fuxiPenetration Testing Platform★ 1.3kPythonMITStale
1904ZupIT/horusecHorusec is an open source tool that improves identification of vulnerabilities in your project with just one command.★ 1.3kGoApache-2.0Active
1905dafthack/GraphRunnerA Post-exploitation Toolset for Interacting with the Microsoft Graph API★ 1.3kPowerShellMITSlowing
1906cecio/USBvalveExpose USB activity on the fly★ 1.3kCMITActive
1907ION28/BLUESPAWNAn Active Defense and EDR software to empower Blue Teams★ 1.3kC++GPL-3.0Slowing
1908OmerYa/Invisi-ShellHide your Powershell script in plain sight. Bypass all Powershell security features★ 1.3kC++MITStale
1909zardus/wargame-nexusA sorted and updated list of security wargame sites.★ 1.3kHTMLGPL-3.0Active
1910stenolabs/stenoaiStenographAI is the secure privacy-first AI notepad & notetaker for confidential conversations in government & defence sectors. On Windows, ★ 1.3kPythonMITActive
1911Arvanaghi/SessionGopherSessionGopher is a PowerShell tool that uses WMI to extract saved session information for remote access tools such as WinSCP, PuTTY, SuperPu★ 1.3kPowerShell—Stale
1912php-casbin/php-casbinAn authorization library that supports access control models like ACL, RBAC, ABAC in PHP .★ 1.3kPHPApache-2.0Active
1913erev0s/VAmPIVulnerable REST API with OWASP top 10 vulnerabilities for security testing★ 1.3kPythonMITSlowing
1914RickdeJager/stegseek:zap: Worlds fastest steghide cracker, chewing through millions of passwords per second :zap:★ 1.3kC++GPL-2.0Stale
1915tobefuturer/restore-symbolA reverse engineering tool to restore stripped symbol table for iOS app.★ 1.3kObjective-C—Stale
1916F6JO/RouteVulScanBurpsuite - Route Vulnerable Scanning 递归式被动检测脆弱路径的burp插件★ 1.3kJava—Slowing
1917sorah/envchainEnvironment variables meet macOS Keychain and gnome-keyring <3★ 1.3kCMITStale
1918x364e3ab6/DudeSuiteDudeSuite Web Security Tools★ 1.3k——Active
1919MrTuxx/SocialPwnedSocialPwned is an OSINT tool that allows to get the emails, from a target, published in social networks such as Instagram, Linkedin and Twit★ 1.3kPythonGPL-3.0Archived
1920tfhe/tfheTFHE: Fast Fully Homomorphic Encryption Library over the Torus★ 1.3kC++OtherStale
1921xploitstech/XteamXteam All in one Instagram,Android,phishing osint and wifi hacking tool available ★ 1.3kPythonOtherActive
1922ly4k/PwnKitSelf-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation★ 1.3kCMITStale
1923PlumHound/PlumHoundBloodhound Reporting for Blue and Purple Teams★ 1.3kPythonGPL-3.0Slowing
1924w-digital-scanner/w12scan🚀 A simple asset discovery engine for cybersecurity. (网络资产发现引擎)★ 1.3kCSSMITStale
1925DERE-ad2001/Frida-LabsThe repo contains a series of challenges for learning Frida for Android Exploitation.★ 1.3k—MITSlowing
1926Vector35/binaryninja-apiPublic API, examples, documentation and issues for Binary Ninja★ 1.3kC++MITActive
1927RUB-SysSec/DroneSecurityDroneSecurity (NDSS 2023)★ 1.3kPythonAGPL-3.0Stale
1928DNSCrypt/encrypted-dns-serverAn easy to install, high-performance, zero maintenance proxy to run an encrypted DNS server.★ 1.3kRustMITActive
1929RedTeamPentesting/pretenderYour MitM sidekick for relaying attacks featuring DHCPv6 DNS takeover as well as mDNS, LLMNR and NetBIOS-NS spoofing.★ 1.3kGoMITSlowing
1930infobyte/evilgradeEvilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates.★ 1.3kPerl—Stale
1931sharkdp/binoclea graphical tool to visualize binary data★ 1.3kRustApache-2.0Stale
1932stampery/mongoaudit🔥 A powerful MongoDB auditing and pentesting tool 🔥★ 1.3kPythonMITStale
1933rng70/TryHackMe-Roadmapa list of 350+ Free TryHackMe rooms to start learning cybersecurity with THM★ 1.3k——Slowing
1934nccgroup/singularityA DNS rebinding attack framework.★ 1.3kJavaScriptMITActive
1935Qianlitp/WatchADAD Security Intrusion Detection System★ 1.3kPythonGPL-3.0Archived
1936crifan/android_app_security_crack安卓应用的安全和破解★ 1.3kMakefile—Stale
1937iGio90/DwarfFull featured multi arch/os debugger built on top of PyQt5 and frida★ 1.3kPythonGPL-3.0Stale
1938Netflix/hubcommanderA Slack bot for GitHub organization management -- and other things too★ 1.3kPythonApache-2.0Slowing
1939research-virus/stuxnetPublic open-source code of malware Stuxnet (aka MyRTUs).★ 1.3kC—Stale
1940getdnsapi/stubbyStubby is the name given to a mode of using getdns which enables it to act as a local DNS Privacy stub resolver (using DNS-over-TLS).★ 1.3kCBSD-3-ClauseStale
1941deepfence/YaraHunter🔍🔍 Malware scanner for cloud-native, as part of CI/CD and at Runtime 🔍🔍★ 1.3kGoApache-2.0Slowing
1942freelabz/secatorsecator - the pentester's swiss knife★ 1.3kPythonOtherActive
1943devanshbatham/FavFreakMaking Favicon.ico based Recon Great again ! ★ 1.3kPythonMITStale
1944hukkelas/DeepPrivacyDeepPrivacy: A Generative Adversarial Network for Face Anonymization★ 1.3kPythonMITStale
1945stackrox/stackroxThe StackRox Kubernetes Security Platform performs a risk analysis of the container environment, delivers visibility and runtime alerts, and★ 1.3kGoApache-2.0Active
1946vincentcox/bypass-firewalls-by-DNS-historyFirewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for t★ 1.3kShellMITStale
1947HXSecurity/DongTaiDongtai IAST is an open-source Interactive Application Security Testing (IAST) tool that enables real-time detection of common vulnerabiliti★ 1.3kPythonApache-2.0Stale
1948demisto/contentDemisto is now Cortex XSOAR. Automate and orchestrate your Security Operations with Cortex XSOAR's ever-growing Content Repository. Pull Req★ 1.3kPythonMITActive
1949honeytrap/honeytrapAdvanced Honeypot framework.★ 1.3kGoOtherStale
1950codingo/VHostScanA virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, alias★ 1.3kPythonGPL-3.0Stale