SSealbook
Sealbook / Open source / Security & hacking

Top open-source security & hacking on GitHub

2,493 repositories with 1,000+ stars, ranked by stars. Leading: frp, sherlock, ghidra.

RepositoryStarsLanguageLicenseActivity
401capcom6/android-sms-gatewayThe SMS Gateway for Android™ app enables sending and receiving SMS messages through an API that can be accessed directly on the device or vi★ 5.9kKotlinApache-2.0Active
402vimeo/psalmA PHP static analysis tool for finding errors and security vulnerabilities in PHP applications★ 5.9kPHPMITActive
403commixproject/commixAutomated Αll-in-One OS command injection exploitation tool.★ 5.9kPythonOtherActive
404TheSpeedX/PROXY-ListGet PROXY List that gets updated everyday★ 5.9k——Active
405windtf/wireproxyWireguard client that exposes itself as a socks5 proxy★ 5.8kGoISCActive
406ffay/lanproxylanproxy是一个将局域网个人电脑、服务器代理到公网的内网穿透工具，支持tcp流量转发，可支持任何tcp上层协议（访问内网网站、本地支付接口调试、ssh访问、远程桌面、http代理、https代理、socks5代理...）。技术交流QQ群 736294209★ 5.8kJava—Slowing
407dotenvx/dotenvxa secure dotenv—from the creator of `dotenv`★ 5.8kJavaScriptBSD-3-ClauseActive
408EdOverflow/can-i-take-over-xyz"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.★ 5.8kPythonCC-BY-4.0Stale
409jedisct1/dsvpnA Dead Simple VPN.★ 5.8kCMITActive
410ossf/scorecardOpenSSF Scorecard - Security health metrics for Open Source★ 5.8kGoApache-2.0Active
411elceef/dnstwistDomain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation★ 5.8kPythonApache-2.0Stale
412pfsense/pfsenseMain repository for pfSense★ 5.8kPHPApache-2.0Slowing
413rapid7/metasploitable3Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.★ 5.7kHTMLOtherStale
414telemt/telemtMTProxy for Telegram on Rust + Tokio★ 5.7kRustOtherActive
415ffffffff0x/1earnffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup★ 5.7kC++—Stale
416proxysu/ProxySUXray,V2ray，Trojan，NaiveProxy, Trojan-Go, ShadowsocksR(SSR),Shadowsocks-libev及相关插件,MTProto+TLS 一键安装工具，windows下用（一键科学上网）★ 5.7kC#MITActive
417free18/v2ray每日分享免费节点、免费机场、付费机场、电报代理、ssr节点、v2ray节点、v2ray订阅、clash节点、clash订阅、shadowrocket订阅、Quantumult X订阅、Clash .NET订阅、小火箭节点、小猫咪节点、免费翻墙、免费科学上网、免费梯子、免费troj★ 5.7k——Active
418ReagentX/imessage-exporterExport iMessage data + run iMessage Diagnostics★ 5.7kRustGPL-3.0Active
419snyk/cliSnyk CLI scans and monitors your projects for security vulnerabilities.★ 5.7kTypeScriptOtherActive
420OWASP/NettackerAutomated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management★ 5.7kPythonApache-2.0Active
421hobby-kube/guide Kubernetes clusters for the hobbyist.★ 5.7k—MITStale
422Shawn-Shan/fawkesFawkes, privacy preserving tool against facial recognition systems. More info at https://sandlab.cs.uchicago.edu/fawkes★ 5.6kPythonBSD-3-ClauseStale
423dsasmblr/game-hackingTutorials, tools, and more as related to reverse engineering video games.★ 5.6k—UnlicenseStale
424google/clusterfuzzScalable fuzzing infrastructure.★ 5.6kPythonApache-2.0Active
425celzero/rethink-appDNS over HTTPS / DNS over Tor / DNSCrypt client, WireGuard proxifier, firewall, and connection tracker for Android.★ 5.6kKotlinApache-2.0Active
426lief-project/LIEFLIEF - Library to Instrument Executable Formats (C++, Python, Rust)★ 5.6kC++Apache-2.0Active
427LyleMi/Learn-Web-HackingStudy Notes For Web Hacking / Web安全学习笔记★ 5.6kPythonCC0-1.0Active
428Hackplayers/evil-winrmThe ultimate WinRM shell for hacking/pentesting★ 5.6kRubyLGPL-3.0Active
429KingOfBugbounty/KingOfBugBountyTipsOur main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens th★ 5.6kPython—Slowing
430yggdrasil-network/yggdrasil-goAn experiment in scalable routing as an encrypted IPv6 overlay network★ 5.5kGoOtherActive
431DarthTon/BlackboneWindows memory hacking library★ 5.5kC++MITStale
432kanidm/kanidmKanidm: A simple, secure, and fast identity management platform★ 5.5kRustMPL-2.0Active
433Speykious/cve-rsBlazingly 🔥 fast 🚀 memory vulnerabilities, written in 100% safe Rust. 🦀★ 5.4kRustOtherStale
434drk1wi/ModlishkaModlishka. Reverse Proxy. ★ 5.4kGoGPL-3.0Active
435kaifcodec/user-scanner🕵️‍♂️ (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a single Email/Username. Analyze★ 5.4kPythonMITActive
436cjdelisle/cjdnsAn encrypted IPv6 network using public-key cryptography for address allocation and a distributed hash table for routing.★ 5.4kCGPL-3.0Active
437RhinoSecurityLabs/pacuThe AWS exploitation framework, designed for testing the security of Amazon Web Services environments.★ 5.4kPythonBSD-3-ClauseSlowing
438k8gege/LadonLadon大型内网渗透扫描器，PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描★ 5.3kC#MITStale
439hahwul/dalfox🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.★ 5.3kRustMITActive
440deepfence/ThreatMapperOpen Source Cloud Native Application Protection Platform (CNAPP)★ 5.3kTypeScriptApache-2.0Slowing
441Tribler/triblerPrivacy enhanced BitTorrent client with P2P content discovery★ 5.3kPythonGPL-3.0Active
442mentebinaria/retoolkitReverse Engineer's Toolkit★ 5.3kInno SetupApache-2.0Active
443timschneeb/GalaxyBudsClientUnofficial Galaxy Buds Manager for Windows, macOS, Linux, and Android★ 5.3kC#GPL-3.0Active
444Naituw/IPAPatchPatch iOS Apps, The Easy Way, Without Jailbreak.★ 5.3kObjective-CMITSlowing
445martin-ger/esp_wifi_repeaterA full functional WiFi NAT Router (and now also a WiFi Repeater)★ 5.3kCMITSlowing
446Ullaakut/cameradarCameradar hacks its way into RTSP videosurveillance cameras★ 5.3kGoMITActive
447NullArray/AutoSploitAutomated Mass Exploiter★ 5.3kPythonGPL-3.0Stale
448crazy-max/WindowsSpyBlockerBlock spying and tracking on Windows★ 5.2kGoMITActive
449tenable/terrascanDetect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.★ 5.2kGoApache-2.0Archived
450techchipnet/CamPhishGrab cam shots & GPS location from target's phone front camera or PC webcam just sending a link.★ 5.2kHTMLGPL-3.0Stale