SSealbook
Sealbook / Open source / Security & hacking

Top open-source security & hacking on GitHub

2,493 repositories with 1,000+ stars, ranked by stars. Leading: frp, sherlock, ghidra.

RepositoryStarsLanguageLicenseActivity
24016abd/horusAn OSINT / digital forensics tool built in Python★ 1kPythonGPL-3.0Active
2402buffer/thugPython low-interaction honeyclient★ 1kPythonGPL-2.0Active
2403Netflix-Skunkworks/sleepy-puppySleepy Puppy XSS Payload Management Framework★ 1kJavaScriptApache-2.0Stale
2404openmls/openmlsRust implementation of the Messaging Layer Security (MLS) protocol★ 1kRustMITActive
2405M4cs/BabySploit:baby: BabySploit Beginner Pentesting Toolkit/Framework Written in Python :snake:★ 1kHTMLGPL-3.0Stale
2406Hidashimora/free-vpn-anti-rknБесплатные VPN-конфиги без лагов 🚀★ 1kHTML—Active
2407TryCatchHCF/DumpsterFire"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security eve★ 1kPythonMITStale
2408android/security-samplesMultiple samples showing the best practices in security APIs on Android.★ 1kKotlinApache-2.0Active
2409FaFre/WebLibreA libre Android browser built from scratch on Gecko. Privacy by default, powerful tab containers, and a local-first search engine.★ 1kDartAGPL-3.0Active
2410danielweidman/pixmob-ir-reverse-engineeringHacking the PixMob infrared (and now also RF!) protocol to enable control of PixMob wristbands at home.★ 1kPythonMITSlowing
2411rfunix/PompemFind exploit tool★ 1kPythonGPL-3.0Stale
2412SaadAhla/FilelessPELoaderLoading Remote AES Encrypted PE in memory , Decrypted it and run it ★ 1kC++MITStale
2413rapid7/hackazonA modern vulnerable web app★ 1kHTMLApache-2.0Archived
2414pingooio/pingooThe fast and secure Load Balancer / API Gateway / Reverse Proxy with built-in service discovery, GeoIP, WAF, bot protection and much more - ★ 1kRustMITSlowing
2415acheong08/obi-syncReverse engineering of the native Obsidian sync and publish server★ 1kGoGPL-2.0Archived
2416AndroidVTS/android-vtsAndroid Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the stat★ 1kJavaOtherStale
2417PhonePe/mantisMantis is a security framework that automates the workflow of discovery, reconnaissance, and vulnerability scanning.★ 1kPythonApache-2.0Slowing
2418google/fscryptGo tool for managing Linux filesystem encryption★ 1kGoApache-2.0Active
2419averagesecurityguy/scriptsScripts I use during pentest engagements.★ 1kPythonOtherStale
2420RoboSats/robosatsA simple and private bitcoin exchange★ 1kPythonAGPL-3.0Active
2421instagram4j/instagram4jAn object-oriented reverse engineered Instagram Private API in Java. Build bots, scrap data, create Instagram apps, and a lot more in very f★ 1kJavaApache-2.0Active
2422adi0x90/attifyosAttify OS - Distro for pentesting IoT devices ★ 1k——Stale
2423UnnoTed/wireguirdwireguard gtk gui for linux★ 1kGoMITSlowing
2424yassineaboukir/sublertSublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by s★ 1kPythonMITStale
2425Dheerajmadhukar/karma_v2⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Reconnaissance (framework)★ 1kShell—Stale
2426XWHQSJ/ebooksA repository for ebooks， including C, C plus plus, Linux Kernel, Compiler, OS, Algorithm, Security, Database, Network, ML and DL★ 1kC—Stale
2427sundaysec/Android-ExploitsA collection of android Exploits and Hacks★ 1kHTML—Stale
2428Malfrats/xeuledocFetch information about a public Google document.★ 1kPythonGPL-3.0Stale
2429safe6Sec/PentestDB各种数据库的利用姿势★ 1k——Stale
2430b3-v3r/HunnerHacking framework★ 1kPython—Stale
2431WithSecureLabs/doublepulsar-detection-scriptA python2 script for sweeping a network to find windows systems compromised with the DOUBLEPULSAR implant.★ 1kPythonBSD-3-ClauseStale
2432admintony/svnExploitSvnExploit支持SVN源代码泄露全版本Dump源码★ 1kPython—Stale
2433duo-labs/webauthnWebAuthn (FIDO2) server library written in Go ★ 1kGoBSD-3-ClauseArchived
2434mitre-attack/carCyber Analytics Repository★ 1kPythonApache-2.0Stale
2435pionxzh/wakaru🔪📦 Javascript decompiler for modern frontend★ 1kRustApache-2.0Active
2436JackJuly/linkook🔍 An OSINT tool for discovering linked social accounts and associated emails across multiple platforms using a single username.★ 1kPythonMITActive
2437gcarmix/HexWalkHex Viewer/Editor/Analyzer compatible with Linux/Windows/MacOS★ 1kC++GPL-3.0Active
24383had0w/Fuzzing-DictsWeb Security Dictionary★ 1k——Stale
2439safe6Sec/command红队常用命令速查★ 1k—MITSlowing
2440d4t4x/data-selfieData Selfie - a browser extension to track yourself on Facebook and analyze your data. ★ 1kJavaScriptGPL-3.0Stale
2441mapleafgo/singcastMulti-platform proxy client powered by sing-box, with full Clash, sing-box & v2ray subscription support★ 1kDartGPL-3.0Active
2442grumpycoders/pcsx-reduxThe PCSX-Redux project is a collection of tools, research, hardware design, and libraries aiming at development and reverse engineering on t★ 1kC++GPL-2.0Active
2443fO-000/bluingAn intelligence gathering tool for hacking Bluetooth★ 1kPythonGPL-3.0Stale
2444dvsekhvalnov/jose-jwtUltimate Javascript Object Signing and Encryption (JOSE), JSON Web Token (JWT) and Json Web Keys (JWK) Implementation for .NET and .NET Core★ 1kC#MITSlowing
2445Ridter/noPacExploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user ★ 1kPython—Stale
2446mxrch/GitFive🐙 Track down GitHub users.★ 1kPythonMPL-2.0Stale
2447google/tsunami-security-scanner-pluginsThis project aims to provide a central repository for many useful Tsunami Security Scanner plugins.★ 1kJavaApache-2.0Active
2448Ice1187/TW-Security-and-CTF-Resource台灣資安 / CTF 學習資源整理★ 1k—MITActive
2449Perflyst/PiHoleBlocklistPiHole and AGH Blocklists★ 1k—MITActive
2450ohmybahgosh/RockYou2021.txtRockYou2021.txt is a MASSIVE WORDLIST compiled of various other wordlists. RockYou2021.txt DOES NOT CONTAIN USER:PASS logins! ★ 1k—GPL-3.0Stale