Category · 196 repos
Security & Pentesting
Offensive and defensive security: pentesting, scanning, crypto, auth and OSINT. Ranked by star velocity over the last 24 hours.
Showing 151–196 of 196
Unofficial USB driver and command-line printing tool for Paperang D1 (Miaomiaoji wrong-answer printer). Reverse-engineers the private protocol and requires no official SDK.
Explore RootSec's DDOS Archive, featuring top-tier scanners, powerful botnets (Mirai & QBot) and other variants, high-impact exploits, advanced methods, and efficient sniffers. Ideal for cybersecurity professionals and researchers.
An OSINT CLI tool desgined to fast track IP Reputation and Geo-locaton look up for Security Analysts.
A guide to using Kali Linux tools for web penetration testing, ethical hacking, forensics, and bug bounty. Covers setup, key tools, methodologies, and best practices. Optimized for security professionals.
Every public signal of the war in Ukraine on one live map: air threats, alerts, the front line, military air and sea, satellites and forecasts. EDTH London 2026.
A modern platform for visual, flexible, and extensible graph-based investigations. For cybersecurity analysts and investigators.
"Secure Boot & Data Encryption" using ECC P-256 with ECDH, AES-256-GCM, and ECDSA. Achieves RSA-Equivalent Security" with 90% Smaller Keys, O(log n) Complexity, <200 bytes State, and 100–1000× faster on "ESP32/RPi for Secure IoT/Embedded Systems.
Permission decay analysis for entitlement exports - unused permissions, narrowable roles, dormant principals and ungranted use across an explicit observation window.
Incredibly fast crawler designed for OSINT.
Native OpenWrt on the Nubia RedMagic 7 (NX679J, SM8450): verified documentation, boot-chain reverse engineering, and porting payload. MIT (code) + CC BY 4.0 (documentation).
A custom Instagram phishing tool for educational and research purposes.
Six channels of per-track USB audio for the Elektron Model:Samples and Model:Cycles. Ships patches, not firmware.
Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this to
Hunt down social media accounts by username across social networks
Rust reverse-engineering toolkit with CLI and local MCP server.
chat log tool, easily use your own chat data. 聊天记录工具，轻松使用自己的聊天数据
🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.
A Cyber Range to learn hacking (both attacking & defending) techniques locally in your computer
Information gathering framework for phone numbers
Awesome list of Official YouTube Channels offering Free Official Content like Movies, Anime, Cartoons, Documentaries, TV Shows, Sports, VFX Breakdown
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
The easiest, most secure way to use WireGuard and 2FA.
Extract WeChat (WCDB/SQLCipher4) database encryption keys on Linux. Auto-adapts to new versions via ELF static analysis — no manual reverse engineering needed per update. Linux 微信数据库密钥提取工具。通过 ELF静态分析自动适配新版本，无需每次更新手动逆向。
A playable PC port of Sly Cooper and the Thievius Raccoonus, rebuilt through reverse engineering.
🐳 Full-fledged Android SDK Docker Image
Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
Phishing Tool & Information Collector
Claude Code multi-account manager, usage monitor (CLI, TUI & cross-account delegation via MCP)
Open-source, cross platform Qt6 based IDE for reverse-engineering Android application packages. It features a friendly IDE-like layout including code editor with syntax highlighting support for *.smali code files.
The VD Infos app reads several of these details and information to show you an example of what can be captured from your device in use. A.k.a VDInfos, VDInfo, VD Info.
Awesome-Cellular-Hacking
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an easy-to-use web hacking environment designed for labs, security enthusiasts, classrooms, CTF, and vulnerability assessment tool targets.
🧿 AutorizePro是一款强大越权检测 Burp 插件，通过增加 AI 辅助分析 && 进一步优化检测逻辑，大幅降低误报率，提升越权漏洞检出效率。 [ AutorizePro is a authorization enforcement detection extension for burp suite. By adding Ai-assisted analysis, it significantly reduces the false positive rate and improves the efficiency of vulnerability detection.
A reverse engineering of Linear's sync engine.
Kali Linux penetration testing skill for AI agents (Claude Code, OpenClaw, Hermes Agent). 200+ CLI tools, 15 scenario playbooks. Autonomously plans attack paths, selects tools, and integrates results across phases to adapt the penetration strategy — with human approval gates for high-risk actions.
Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.
An AI Agent penetration-testing platform developed by the Ye An team, emphasizing self-supervision, self-cycling, and self-evolution. It pioneered a treasure-hunt mechanism and three-stage upward structure, covering red-team operations, SRC, and CTF, with particularly impressive capabilities in red teaming.
DetectDee: Hunt down social media accounts by username, email or phone across social networks.
ALL IN ONE Hacking Tool For Hackers
Pre-built, deduplicated Pi-hole blocklists merged from 35 curated sources — a 2.4M+ domain master list plus advertising, tracking, malware/phishing, suspicious, and NSFW categories. Hosts format, rebuilt weekly.
Decompilation of The Legend of Zelda: Breath of the Wild (Switch 1.5.0)
Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code, Kiro, Cursor, Cline, and other AI coding clients 逆向/渗透/安全技能路由包 - AI 自动路由 + 按需自举工具链 + 自动进化经验库 | 支持 Cla
Plugin for JADX to integrate MCP server
ZITADEL - Identity infrastructure, simplified for you.
Legal flags a risk. Finance flags another. We connect and cite. Open-source forensic M&A due diligence: 13 AI agents read your data room across 9 domains (Legal, Finance, Commercial, Tech, Cyber, HR, Tax, Regulatory, ESG), cross-reference findings no single reviewer connects, and trace every one to