SSealbook
Sealbook / Open source / Security & hacking

Top open-source security & hacking on GitHub

2,493 repositories with 1,000+ stars, ranked by stars. Leading: frp, sherlock, ghidra.

RepositoryStarsLanguageLicenseActivity
151s0md3v/PhotonIncredibly fast crawler designed for OSINT.★ 13.3kPythonGPL-3.0Active
152threat9/routersploitExploitation Framework for Embedded Devices★ 13.3kPythonOtherSlowing
153OWASP/mastgThe OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineerin★ 13.3kPythonCC-BY-SA-4.0Active
154projectdiscovery/nuclei-templatesCommunity curated list of templates for the nuclei engine to find security vulnerabilities.★ 13.1kJavaScriptMITActive
155PowerShellMafia/PowerSploitPowerSploit - A PowerShell Post-Exploitation Framework★ 13.1kPowerShellOtherArchived
156anchore/grypeA vulnerability scanner for container images and filesystems★ 13kGoApache-2.0Active
157keeweb/keewebFree cross-platform password manager compatible with KeePass★ 13kHTMLOtherSlowing
158arkenfox/user.jsFirefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening★ 12.9kJavaScriptMITActive
159libre-tube/LibreTubeAn alternative frontend for YouTube, for Android.★ 12.8kKotlinGPL-3.0Active
160google/oss-fuzzOSS-Fuzz - continuous fuzzing for open source software.★ 12.8kShellApache-2.0Active
161secdev/scapyScapy: the Python-based interactive packet manipulation program & library.★ 12.6kPythonGPL-2.0Active
162jopohl/urhUniversal Radio Hacker: Investigate Wireless Protocols Like A Boss★ 12.6kPythonGPL-3.0Archived
163HackTricks-wiki/hacktricksWelcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news★ 12.6kJavaScript—Active
164dstotijn/hettyAn HTTP toolkit for security research.★ 12.5kGoMITActive
165drduh/YubiKey-GuideCommunity guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.★ 12.5kHTMLMITActive
166vanhauser-thc/thc-hydrahydra★ 12.4kCAGPL-3.0Active
167lockfale/OSINT-FrameworkOSINT Framework★ 12.3kJavaScriptMITActive
168future-architect/vulsAgent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices★ 12.3kGoGPL-3.0Active
169BishopFox/sliverAdversary Emulation Framework★ 12.1kGoGPL-3.0Active
170calesthio/CrucixYour personal intelligence agent. Watches the world from multiple data sources and pings you when something changes.★ 12.1kJavaScriptAGPL-3.0Slowing
171docker-archive-public/docker.labsThis is a collection of tutorials for learning how to use Docker with various tools. Contributions welcome.★ 11.9kPHPApache-2.0Archived
172veracrypt/VeraCryptDisk encryption with strong security based on TrueCrypt★ 11.9kCOtherActive
173kubescape/kubescapeKubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, c★ 11.8kGoApache-2.0Active
174chaitin/xray一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档★ 11.8kVueOtherStale
175horsicq/Detect-It-EasyProgram for determining types of files for Windows, Linux and MacOS.★ 11.8kJavaScriptMITActive
176majd/ipatoolCommand-line tool that allows you to search for iOS, iPadOS, tvOS, watchOS, visionOS, and macOS apps on the App Store, and download .ipa or ★ 11.8kGoMITActive
177benbusby/whoogle-searchA self-hosted, ad-free, privacy-respecting metasearch engine★ 11.6kPythonMITArchived
178screetsec/TheFatRatThefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc .★ 11.5kCGPL-3.0Stale
1791N3/Sn1perAutomated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ det★ 11.5kShellOtherSlowing
180knownsec/404StarLink404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目★ 11.4k——Active
181WhiskeySockets/BaileysSocket-based TS/JavaScript API for WhatsApp Web★ 11.4kJavaScriptMITActive
182angristan/wireguard-installWireGuard VPN installer for Linux servers★ 11.4kShellMITSlowing
183BigBodyCobain/ShadowbrokerOpen-source intelligence for the global theater. Track everything from the corporate/private jets of the wealthy, and spy satellites, to sei★ 11.3kPythonAGPL-3.0Active
184SigmaHQ/sigmaMain Sigma Rule Repository★ 11.3kPythonOtherActive
185google/osv-scannerVulnerability scanner written in Go which uses the data provided by https://osv.dev★ 11.2kGoApache-2.0Active
186bunkerity/bunkerweb🛡️ Open-source and cloud-native Web Application Firewall (WAF)★ 11.1kPythonAGPL-3.0Active
187pwndbg/pwndbgExploit Development and Reverse Engineering with GDB & LLDB Made Easy★ 11.1kPythonMITActive
188beefproject/beefThe Browser Exploitation Framework Project★ 11.1kJavaScript—Active
189shadowsocks/shadowsocks-rustA Rust port of shadowsocks★ 10.9kRustMITActive
190monero-project/moneroMonero: the secure, private, untraceable cryptocurrency★ 10.9kC++OtherActive
191yokoffing/BetterfoxFirefox user.js for optimal privacy and security. Your favorite browser, but better.★ 10.9kJavaScriptMITActive
192trimstray/the-practical-linux-hardening-guideThis guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).★ 10.9k—MITStale
193infosecn1nja/Red-Teaming-ToolkitThis repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.★ 10.8k—GPL-3.0Slowing
194helmetjs/helmetHelp secure Express apps with various HTTP headers★ 10.7kTypeScriptMITActive
195blacklanternsecurity/bbotThe recursive internet scanner for hackers. 🧡★ 10.7kPythonAGPL-3.0Active
196sovereign/sovereignA set of Ansible playbooks to build and maintain your own private cloud: email, calendar, contacts, file sync, IRC bouncer, VPN, and more.★ 10.6kHTMLOtherStale
197itsfatduck/optimizerDuckFree, open-source Windows optimization tool for performance, privacy, and simplicity.★ 10.5kC#OtherActive
198projectdiscovery/httpxhttpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.★ 10.5kGoMITActive
199TeamPiped/PipedAn alternative privacy-friendly YouTube frontend which is efficient by design.★ 10.3kVueAGPL-3.0Active
200veeral-patel/how-to-secure-anythingHow to systematically secure anything: a repository about security engineering★ 10.2k——Stale