SSealbook
Sealbook / Open source / Security & hacking

Top open-source security & hacking on GitHub

2,493 repositories with 1,000+ stars, ranked by stars. Leading: frp, sherlock, ghidra.

RepositoryStarsLanguageLicenseActivity
1951stelligent/cfn_nagLinting tool for CloudFormation templates★ 1.3kRubyMITStale
1952tmobile/pacbotPacBot (Policy as Code Bot)★ 1.3kJavaApache-2.0Stale
1953Marven11/Fenjing专为CTF设计的Jinja2 SSTI全自动绕WAF脚本 | A Jinja2 SSTI cracker for bypassing WAF, designed for CTF★ 1.3kPythonMPL-2.0Active
1954k8gege/K8CScanK8Ladon大型内网渗透自定义插件化扫描神器，包含信息收集、网络资产、漏洞扫描、密码爆破、漏洞利用，程序采用多线程批量扫描大型内网多个IP段C段主机，目前插件包含: C段旁注扫描、子域名扫描、Ftp密码爆破、Mysql密码爆破、Oracle密码爆破、MSSQL密码爆破、Wind★ 1.3kPythonMITStale
1955Viralmaniar/PasshuntPasshunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors an★ 1.3kPythonGPL-3.0Stale
1956codingo/InterlaceEasily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.★ 1.3kPythonGPL-3.0Stale
1957linheitu/Cipher.soA simple way to encrypt your secure data like passwords into a native .so library.★ 1.3kJavaApache-2.0Stale
1958sebastianfeldmann/phpbuPHP Backup Utility - Creates and encrypts database and file backups, syncs your backups to other servers or cloud services and assists you m★ 1.3kPHPOtherSlowing
1959dwisiswant0/go-dorkThe fastest dork scanner written in Go.★ 1.3kGoMITStale
1960JFreegman/toxicA Tox-based instant messaging and video chat client.★ 1.3kCGPL-3.0Slowing
1961Rurik/NoribenNoriben - Portable, Simple, Malware Analysis Sandbox★ 1.3kPythonOtherActive
1962uphiago/recon-skillsRecon & pentest skill pack. CORS, XSS, SQLi, SSRF, RCE, WordPress, MCP, cloud, subdomain takeover, and more. Field-tested. MIT. Full write-u★ 1.3kPythonMITActive
1963Albert-Weasker/niubi_guardOpen-source GitHub repository abuse detection and response system.★ 1.3kTypeScriptOtherActive
1964beerisgood/Windows11_Hardeninga collection about Windows 11★ 1.3k—GPL-3.0Active
1965WindowsExploits/ExploitsWindows Exploits★ 1.3kPowerShell—Stale
1966TakeScoop/SwiftyRSARSA public/private key encryption in Swift★ 1.3kSwiftMITStale
1967liamcottle/reticulum-meshchatA simple mesh network communications app powered by the Reticulum Network Stack.★ 1.3kJavaScriptMITActive
1968Vu1nT0tal/IoT-vulhubIoT固件漏洞复现环境★ 1.3kPythonGPL-3.0Stale
1969OTRF/OSSEMOpen Source Security Events Metadata (OSSEM)★ 1.3kPythonMITStale
1970hausec/PowerZurePowerShell framework to assess Azure security★ 1.3kPowerShellBSD-3-ClauseStale
1971httpsok/httpsok🔥🔥🔥一行命令，轻松搞定SSL证书自动续期。 SSL泛域名证书，SSL证书管理，SSL证书自动续期，SSL证书自动更新，七牛云、阿里云、腾讯云、CDN、OSS、https证书管理,https证书管理,免费SSL证书,TLS证书自动续签,nginx证书自动续期工具，nginx证书管★ 1.3kShellMITSlowing
1972guyoung/CaptfEncoderCaptfencoder is opensource a rapid cross platform network security tool suite, providing network security related code conversion, classical★ 1.3kJavaScriptMITStale
1973owasp-dep-scan/dep-scanOWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for pro★ 1.3kPythonMITActive
1974bsauce/kernel-exploit-factoryLinux kernel CVE exploit analysis report and relative debug environment. You don't need to compile Linux kernel and configure your environme★ 1.3kC—Slowing
1975Te-k/harpoonCLI tool for open source and threat intelligence★ 1.3kPythonGPL-3.0Active
1976DhavalKapil/heap-exploitationThis book on heap exploitation is a guide to understanding the internals of glibc's heap and various attacks possible on the heap structure.★ 1.3kC—Stale
1977aspnet/Security[Archived] Middleware for security and authorization of web apps. Project moved to https://github.com/aspnet/AspNetCore★ 1.3kC#Apache-2.0Archived
1978wellyshen/react-cool-starter😎 🐣 A starter boilerplate for a universal web app with the best development experience and a focus on performance and best practices.★ 1.3kTypeScriptMITStale
1979al0ne/suricata-rulesSuricata IDS rules 用来检测红队渗透/恶意行为等，支持检测CobaltStrike/MSF/Empire/DNS隧道/Weevely/菜刀/冰蝎/挖矿/反弹shell/ICMP隧道等★ 1.3k——Stale
1980nette/latte☕ Latte: the safest & truly intuitive templates for PHP. Engine for those who want the most secure PHP sites.★ 1.3kPHPOtherActive
1981gaasedelen/patchingAn Interactive Binary Patching Plugin for IDA Pro★ 1.3kPythonMITStale
1982jvdsn/crypto-attacksPython implementations of cryptographic attacks and utilities.★ 1.3kPythonMITSlowing
1983miguelgrinberg/Flask-HTTPAuthSimple extension that provides Basic, Digest and Token HTTP authentication for Flask routes★ 1.3kPythonMITActive
1984Abao130/jichangtizi-tuijian2026 机场梯子推荐：稳定机场、Clash 节点测评与VPN优惠码。持续实测 Clash / V2Ray / SSR 机场，覆盖 IEPL/IPLC 专线、便宜机场、晚高峰测速、套餐价格与使用体验。★ 1.3k——Active
1985nickboucher/trojan-sourceTrojan Source: Invisible Vulnerabilities★ 1.3kSCSSMITStale
1986P1-Team/AlliNA flexible scanner★ 1.3kPython—Stale
1987zedless-editor/old-school-zedless(old variant) Zed fork focused on privacy and being local-first★ 1.3kRustOtherArchived
1988keratin/authn-serverAuthentication service that keeps you in control without forcing you to be an expert in web security.★ 1.3kGoLGPL-3.0Stale
1989entropy1337/infernal-twinwireless hacking - This is automated wireless hacking tool★ 1.3kPython—Stale
1990prism-break/prism-breakPrivacy/security-oriented software recommendations (mirrored from GitLab)★ 1.3kPugGPL-3.0Stale
1991CHYbeta/Software-Security-LearningSoftware-Security-Learning★ 1.3kHTML—Stale
1992passff/passffRead-only mirror of https://codeberg.org/PassFF/passff Pull requests and issues on GitHub cannot be accepted and will be automatically close★ 1.3kJavaScriptGPL-2.0Active
1993macadmins/nudgeA tool for encouraging the installation of macOS security updates.★ 1.3kSwiftApache-2.0Active
1994latchset/clevisAutomated Encryption Framework★ 1.3kShellGPL-3.0Active
1995khast3x/RedcloudAutomated Red Team Infrastructure deployement using Docker★ 1.3kPythonMITStale
1996mokshablr/ganderTake a gander at any file. Offline, zero-permission Android viewer for PDF, Word, Excel, PowerPoint, ODT, RTF, ZIP, STL, photos, video, audi★ 1.3kJavaScriptMITActive
1997verida/verida-jsThe Verida SDK provides several SDKs to interact with the Verida Network★ 1.3kTypeScriptISCStale
1998cisagov/log4j-scannerlog4j-scanner is a project derived from other members of the open-source community by CISA to help organizations identify potentially vulner★ 1.3kJava—Archived
1999W01fh4cker/VcenterKitVcenter综合渗透利用工具包 | Vcenter Comprehensive Penetration and Exploitation Toolkit★ 1.3kPythonApache-2.0Slowing
2000open-source-labs/SpearmintTesting, simplified. || An inclusive, accessibility-first GUI for generating clean, semantic Javascript tests in only a few clicks of a butt★ 1.3kTypeScriptMITActive