SSealbook
Sealbook / Open source / Security & hacking

Top open-source security & hacking on GitHub

2,493 repositories with 1,000+ stars, ranked by stars. Leading: frp, sherlock, ghidra.

RepositoryStarsLanguageLicenseActivity
201github/codeqlCodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security★ 10.2kCodeQLMITActive
202OpenCTI-Platform/openctiOpen Cyber Threat Intelligence Platform★ 10.2kTypeScriptOtherActive
203samratashok/nishangNishang - Offensive PowerShell for red team, penetration testing and offensive security. ★ 10.2kPowerShellOtherStale
204TechnitiumSoftware/DnsServerTechnitium DNS Server★ 10.2kC#GPL-3.0Active
205shmilylty/OneForAllOneForAll是一款功能强大的子域收集工具★ 10.1kPythonGPL-3.0Slowing
206OWASP/wstgThe Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.★ 10.1kCSSCC-BY-SA-4.0Active
207AGWA/git-cryptTransparent file encryption in git★ 10kC++GPL-3.0Stale
208go-acme/legoLet's Encrypt/ACME client and library written in Go★ 9.9kGoMITActive
209quasar/QuasarRemote Administration Tool for Windows★ 9.9kC#MITArchived
210upgundecha/howtheysreA curated collection of publicly available resources on how technology and tech-savvy organizations around the world practice Site Reliabili★ 9.8kJavaScriptCC0-1.0Active
211reconurge/flowsintA modern platform for visual, flexible, and extensible graph-based investigations. For cybersecurity analysts and investigators.★ 9.8kTypeScriptApache-2.0Active
212owasp-modsecurity/ModSecurityModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based p★ 9.8kC++Apache-2.0Active
213wpscanteam/wpscanWPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites.★ 9.8kRubyOtherActive
214juliocesarfort/public-pentesting-reportsA list of public penetration test reports published by several consulting firms and academic security groups.★ 9.8kHTML—Slowing
215docker/docker-bench-securityThe Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.★ 9.7kShellApache-2.0Slowing
216alufers/mitmproxy2swaggerAutomagically reverse-engineer REST APIs via capturing traffic★ 9.7kHTML—Active
217spring-projects/spring-securitySpring Security★ 9.7kJavaApache-2.0Active
218telekom-security/tpotce🍯 T-Pot - The All In One Multi Honeypot Platform 🐝★ 9.6kShellGPL-3.0Active
219zardus/ctf-toolsSome setup scripts for security research tools.★ 9.5kNixBSD-3-ClauseActive
220Perfare/Il2CppDumperUnity il2cpp reverse engineer★ 9.5kC#MITStale
221toniblyx/my-arsenal-of-aws-security-toolsList of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.★ 9.5kShellApache-2.0Active
222malwaredllc/byobAn open-source post-exploitation framework for students, researchers and developers.★ 9.5kPythonGPL-3.0Active
223AdAway/AdAwayAdAway is a free and open source ad blocker for Android. ★ 9.5kCGPL-3.0Active
224falcosecurity/falcoCloud Native Runtime Security★ 9.5kC++Apache-2.0Active
225PDFCraftTool/pdfcraftPDFCraft is a free, privacy-focused PDF toolkit that runs entirely in your browser. With 90+ professional tools, you can edit, convert, merg★ 9.5kTypeScriptAGPL-3.0Active
226Universal-Debloater-Alliance/universal-android-debloater-next-generationCross-platform GUI written in Rust using ADB to debloat non-rooted Android devices. Improve your privacy, the security and battery life of y★ 9.5kRustGPL-3.0Active
227unicorn-engine/unicornUnicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, PowerPC, RiscV, S390x, TriCore, X86)★ 9.5kCGPL-2.0Active
228sensepost/objection📱 objection - runtime mobile exploration★ 9.4kPythonGPL-3.0Active
229ermaozi/get_subscribe✈️ 白嫖免费机场 / 免费VPN -> 自动获取免 clash/v2ray/trojan/sr/ssr 订阅链接，持续更新 | 科学上网 | 翻墙★ 9.4kPythonGPL-3.0Active
230Ignitetechnologies/MindmapThis repository will contain many mindmaps for cyber security technologies, methodologies, courses, and certifications in a tree structure t★ 9.4k——Active
231berty/bertyBerty is a secure peer-to-peer messaging app that works with or without internet access, cellular data or trust in the network★ 9.3kTypeScriptOtherActive
232igareck/vpn-configs-for-russia🗽Бесплатные и проверенные VPN/Tor конфигурации, работающие в РФ ⚪ Белые списки / обход белых списков ⚪ Free and checked VPN/Tor configuratio★ 9.2k—GPL-3.0Active
233golang-jwt/jwtGo implementation of JSON Web Tokens (JWT).★ 9.2kGoMITActive
234testssl/testssl.shTesting TLS/SSL encryption anywhere on any port ★ 9.2kShellGPL-2.0Active
235minbrowser/minA fast, minimal browser that protects your privacy★ 9.2kJavaScriptApache-2.0Active
236antoniaci/blackbirdAn OSINT tool to search for accounts by username and email in social networks.★ 9.2kPython—Active
237henrypp/simplewallSimple tool to configure Windows Filtering Platform (WFP) which can configure network activity on your computer.★ 9.2kCGPL-3.0Active
238mandiant/flare-vmA collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering enviro★ 9.2kPowerShellApache-2.0Active
239firezone/firezoneBlazing-fast remote access★ 9.1kElixirApache-2.0Active
240We5ter/Scanners-BoxThe Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents——面向极客、企业与 AI 智能体的全域开源网络安全工具矩阵★ 9.1k—OtherActive
241capstone-engine/capstoneCapstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PP★ 9.1kC—Active
242frohoff/ysoserialA proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.★ 9.1kJavaMITSlowing
243jofpin/trapePeople tracker on the Internet: OSINT analysis and research tool by Jose Pino★ 9.1kPython—Stale
244maxgoedjen/secretiveProtect your SSH keys with your Mac's Secure Enclave★ 9.1kSwiftMITActive
245securego/gosecGo security checker★ 9kGoApache-2.0Active
246smallstep/certificates🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & ★ 9kGoApache-2.0Active
247kata-containers/kata-containersKata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) tha★ 9kRustApache-2.0Active
248anyproto/anytype-tsOfficial Anytype client for MacOS, Linux, and Windows★ 8.9kTypeScriptOtherActive
249zhoutaoo/SpringCloudOpensabre是基于SpringCloud2023的微服务开发平台，整合了Spring Security、Springcloud Alibaba等组件。 包含了基础的RBAC权限管理、授权认证、网关管理、服务治理、审计日志等系统管理基础应用。 定义了相关开发规范、风格并落★ 8.9k—Apache-2.0Active
250shellphish/how2heapA repository for learning various heap exploitation techniques.★ 8.9kCMITSlowing