Cybersecurity projects on GitHub

1. 1
   #1 · Hack-with-Github/Awesome-Hacking

   Awesome-Hacking

   A massive index that links out to dozens of other awesome-lists covering nearly every security domain: android security, bug bounty, fuzzing, malware analysis, OSINT, reverse engineering, web hacking, and more.

   122.8K
2. 2
   #2 · sherlock-project/sherlock

   sherlock

   Sherlock hunts down social media accounts by username: give it a name and it checks across social networks for accounts registered under it.

   94.3K
3. 3
   #3 · NationalSecurityAgency/ghidra

   ghidra

   Ghidra is a software reverse engineering (SRE) framework created and maintained by the NSA's Research Directorate, used to disassemble, decompile, graph, and analyze compiled code.

   89.8K

4. 4

   PayloadsAllTheThings

   81.8Kswisskyrepo/PayloadsAllTheThings · Python

   A massive curated collection of payloads, bypass techniques, and exploitation methodology for web application security testing, pentesting, and CTF challenges.

   • methodology
   • web-application
   • privilege-escalation
   • bugbounty
5. 5

   Best-websites-a-programmer-should-visit

   76.2Ksdmg15/Best-websites-a-programmer-should-visit

   A curated list of useful websites for programmers, covering news, learning resources, coding practice, tools, interview prep, and more.

   • programmer
   • books
   • interview-questions
   • interview
6. 6

   SecLists

   74.2Kdanielmiessler/SecLists · PHP

   SecLists is a huge collection of ready-made wordlists for security testing: usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells and more, all gathered in one repository.

   • wordlist
   • patterns
   • password
   • hacking-tools
7. 7

   strix

   69.1Kusestrix/strix · Python

   Strix is an open-source tool that uses autonomous AI agents to pentest your application like real hackers: it runs your code dynamically, finds vulnerabilities, and proves them with working exploits instead of just flagging suspicious patterns.

   • ai-hacking
   • ctf-tools
   • ai-penetration-testing
   • pentesting-tools
8. 8

   ImHex

   55.4KWerWolv/ImHex · C++

   ImHex is a hex editor built for reverse engineers, programmers, and anyone analyzing binary data, with a custom pattern language for parsing and highlighting file structures.

   • analyzer
   • multi-platform
   • disassembler
   • forensics
9. 9

   x64dbg

   49.9Kx64dbg/x64dbg · C++

   x64dbg is an open-source user-mode debugger for Windows, built specifically for reverse engineering and malware analysis.

   • dynamic-analysis
   • x64
   • exploit-development
   • disassembler
10. 10

    shannon

    49KKeygraphHQ/shannon · TypeScript

    Shannon is an autonomous AI pentester that analyzes your web application's source code, maps attack vectors, and then executes real exploits against the running app to prove vulnerabilities before they reach production — 'no exploit, no report'.

    • ai-penetration-testing
    • sarif
    • security-testing
    • pentesting-tools
11. 11

    big-list-of-naughty-strings

    47.7Kminimaxir/big-list-of-naughty-strings · Python

    It is a curated collection of strings with a high probability of breaking software when used as user input, meant to help QA testing of input validation.

    • unicode
    • qa
    • fuzzing
    • web-security
12. 12

    mitmproxy

    45.7Kmitmproxy/mitmproxy · Python

    mitmproxy is an interactive, SSL/TLS-capable intercepting proxy for HTTP/1, HTTP/2, and WebSockets, used by penetration testers and developers to inspect and modify traffic. mitmdump is its CLI version, and mitmweb is a web-based interface.

    • http2
    • ssl
    • pentesting
    • tls
13. 13

    reverse-skill

    42.4Kzhaoxuya520/reverse-skill · PowerShell

    It is a skill pack that routes AI coding agents to the right reverse engineering, penetration testing, and security research methodology for a given task (APK, binary, JS, CTF, malware, etc.), checks which tools are installed, and runs a repeatable workflow instead of letting the agent guess commands.

    • malware-analysis
    • ctf
    • binary-analysis
    • powershell
14. 14

    sniffnet

    41.6KGyulyVGC/sniffnet · Rust

    Sniffnet is a cross-platform desktop app for monitoring your network traffic in real time, with a graphical interface instead of raw terminal output.

    • packet-capture
    • application
    • network-monitoring
    • network
15. 15

    metasploit-framework

    39.2Krapid7/metasploit-framework · Ruby

    Metasploit Framework is an open-source penetration testing framework written in Ruby — one of the best-known security toolkits on GitHub, with about 39,000 stars.

    • kali-linux
    • exploitation
    • api-documentation
    • infosec
16. 16

    maigret

    39.2Ksoxoj/maigret · Python

    Maigret is an OSINT command-line tool that builds a dossier on a person by checking for an account under a given username across thousands of websites and pulling together whatever profile info it finds, with no API keys required.

    • investigation
    • osint-python
    • osint-framework
    • osint-tool
17. 17

    500-AI-Agents-Projects

    38.7Kashishpatel26/500-AI-Agents-Projects · Python

    A curated collection of 500+ AI agent projects spanning every major framework (LangGraph, CrewAI, AutoGen, Agno) and industries like healthcare, finance, education, and cybersecurity, with links to working implementations.

    • genai
    • langgraph
    • multi-agent-systems
    • autonomous-agents
18. 18

    CyberChef

    36.1Kgchq/CyberChef · JavaScript

    CyberChef is a web app that bundles encoding, encryption, compression, hashing and other data-analysis operations ('cyber' operations) into a single drag-and-drop recipe builder that runs entirely in your browser.

    • hashing
    • encoding
    • forensics
    • ctf
19. 19

    web-check

    35.1Klissy93/web-check · TypeScript

    Web-Check is an open-source OSINT dashboard that lets you analyse any website: it pulls IP info, SSL chain, DNS records, cookies, headers, server location, and more into one report so you can understand its tech stack and security posture.

    • netlify
    • ssl-certificate
    • osint-tool
    • reconnaissance
20. 20

    Anthropic-Cybersecurity-Skills

    34.6Kmukul975/Anthropic-Cybersecurity-Skills · Python

    An open-source library of 818 production-grade cybersecurity skills for AI agents, covering 34 security domains and mapped to six frameworks including MITRE ATT&CK and NIST CSF 2.0.

    • container-security
    • threat-hunting
    • cloud-security
    • vulnerability-management
21. 21

    CheatSheetSeries

    33.7KOWASP/CheatSheetSeries · JavaScript

    A collection of concise, high-value cheat sheets covering specific application security topics, maintained by OWASP.

    • cheatsheets
    • code
    • appsec
    • owasp
22. 22

    How-To-Secure-A-Linux-Server

    31.8Kimthenachoman/How-To-Secure-A-Linux-Server

    This is a long-form, evolving how-to guide (written as a GitHub README) that walks you through hardening a self-hosted Linux server, step by step, from SSH to firewalls to intrusion detection.

    • security-hardening
    • hardening
    • checklist
    • firewall
23. 23

    security-audit-skill

    30.4Kcloudflare/security-audit-skill · JavaScript

    A Cloudflare coding-agent skill that turns your agent into a security auditor: it orchestrates isolated agents through a structured, multi-phase audit and returns independently verified, machine-readable findings.

    • security-testing
    • security-audit
    • vulnerability-scanner
    • ai-security
24. 24

    awesome-osint

    30.3Kjivoi/awesome-osint

    This is a curated 'awesome list' of hundreds of free and paid OSINT (open source intelligence) tools and resources, organized into categories like general search, Google dorks, data breach lookup, social media, threat actors, and dark web.

    • threat-hunting
    • domain
    • osint-tool
    • information-gathering
25. 25

    h4cker

    29.8KThe-Art-of-Hacking/h4cker · Jupyter Notebook

    A curated collection of thousands of cybersecurity resources — references, scripts, tools, code, labs, and training material — maintained by Omar Santos as a companion to his books, video courses, and live training.

    • cloud-security
    • vulnerability-management
    • vulnerability-research
    • certification
26. 26

    trufflehog

    28.5Ktrufflesecurity/trufflehog · Go

    TruffleHog is a CLI tool that discovers, classifies, validates, and analyzes leaked secrets like API keys, database passwords, and private keys across many sources (Git, GitHub, S3, Docker, Slack, filesystems, and more).

    • dynamic-analysis
    • scanning
    • credentials
    • secret-management
27. 27

    awesome-pentest

    27.4Kenaqx/awesome-pentest

    A curated collection of penetration testing and offensive-security resources: tools, books, courses, conferences and practice targets for authorized security testing.

    • password-cracking
    • wifi-security
    • privilege-escalation
    • ethical-hacking
28. 28

    masscan

    26.1Krobertdavidgraham/masscan · C

    Masscan is an Internet-scale TCP port scanner that transmits SYN packets asynchronously and can scan the entire IPv4 Internet in under 5 minutes, sending up to 10 million packets per second from a single machine.

    • scanner
    • reconnaissance
    • vulnerability-scanner
    • infosec
29. 29

    osquery

    23.7Kosquery/osquery · C++

    osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework: it exposes your OS as a high-performance relational database you can query with SQL.

    • sysadmin
    • sql
    • observability
    • security-tools
30. 30

    spiderfoot

    23.5Ksmicallef/spiderfoot · Python

    Open source OSINT automation — it collects intelligence on a target for threat intel and attack surface mapping, whether you are doing red team recon or checking what your organisation has exposed.

    • darknet
    • osint-framework
    • osint-tool
    • recon
31. 31

    anubis

    23.5KTecharoHQ/anubis · Go

    Anubis is a Web AI Firewall Utility that weighs the soul of incoming connections with challenges to protect upstream resources from AI scraper bots — built to defend the small internet from endless storms of AI-company requests.

    • waf
    • anti-bot
    • bot-detection
    • firewall
32. 32

    API-Security-Checklist

    23.3Kshieldfy/API-Security-Checklist

    A community checklist of the most important security countermeasures to apply when designing, testing, and releasing an API — a list of checkboxes you run through before shipping.

    • security-hardening
    • secret-management
    • zero-trust
    • checklist
33. 33

    SafeLine

    22.8Kchaitin/SafeLine · Go

    SafeLine is a self-hosted web application firewall (WAF) and reverse proxy that protects your web apps from attacks and exploits by filtering and monitoring HTTP traffic.

    • web-application-firewall
    • sql-injection
    • waf
    • bruteforce
34. 34

    personal-security-checklist

    22.5Klissy93/personal-security-checklist · TypeScript

    A community-maintained checklist of 300+ tips for protecting your digital security and privacy, curated by Alicia Sykes (Lissy93) and kept current for 2026.

    • surveillance
    • checklist
    • censorship
    • privacy-tools
35. 35

    mimikatz

    21.9Kgentilkiwi/mimikatz · C

    A small Windows security tool, originally written to learn C. It is best known for extracting plaintext passwords, hashes, PIN codes and Kerberos tickets from memory, and can perform pass-the-hash, pass-the-ticket or build Golden tickets.

    • post-exploitation
    • password
    • visual-studio
    • driver
36. 36

    L1B3RT4S

    21.9Kelder-plinius/L1B3RT4S

    A public collection of jailbreak prompts — the author calls them 'liberation prompts' — meant to make flagship AI models respond without their usual refusals. It is maintained by AI red-teamer elder-plinius.

    • adversarial-attacks
    • ai-hacking
    • llm-jailbreak
    • hack
37. 37

    vulhub

    21.4Kvulhub/vulhub · Dockerfile

    Vulhub is an open-source collection of pre-built, ready-to-use vulnerable Docker environments: with one command you get a working lab for security research, learning, or demos.

    • dockerfile
    • security-research
    • vulnerability
    • exploit
38. 38

    security-guide-for-developers

    21.1KFallibleInc/security-guide-for-developers

    This is a practical security guide for web developers that explains common security issues (authentication, encryption, sessions, attacks, etc.) and gives a checklist for building more secure systems.

    • checklist
    • owasp
    • web-security
    • books
39. 39

    SWE-agent

    20.6KSWE-agent/SWE-agent · Python

    SWE-agent takes a GitHub issue and tries to fix it automatically using the language model you choose. It can also tackle offensive cybersecurity (CTF) challenges or other custom tasks.

    • ctf
    • software-engineering
    • offensive-security
    • yaml
40. 40

    SkillSpector

    20.4KNVIDIA/SkillSpector · Python

    SkillSpector is a security scanner for AI agent skills (used by Claude Code, Codex CLI, Gemini CLI, and MCP) that detects vulnerabilities, malicious patterns, prompt injection, data exfiltration, and supply-chain risks before you install a skill.

    • sarif
    • sast
    • security-scanner
    • agent-security
41. 41

    bettercap

    20.1Kbettercap/bettercap · Go

    A portable all-in-one framework written in Go for recon and attacks on WiFi, Bluetooth Low Energy, wireless HID, CAN-bus and IPv4/IPv6 networks, built for security researchers and red teamers.

    • redteaming
    • wifi-security
    • mitm
    • redteam
42. 42

    90DaysOfCyberSecurity

    20.1Kfarhanashrafdev/90DaysOfCyberSecurity

    A free, 90-day self-paced cybersecurity study plan: daily tasks and curated resources that take you from networking basics to ethical hacking, ending with job-hunting help.

    • learn
    • ethical-hacking
    • resume
    • roadmap
43. 43

    GhostTrack

    19.1KHunxByts/GhostTrack · Python

    GhostTrack is a Python command-line OSINT tool used to track a target's approximate location or gather details about a phone number, essentially a piece of information-gathering tooling for recon work.

    • osint-python
    • phone-number
    • termux
    • osint-tool
44. 44

    Micro8

    18KMicropoor/Micro8

    A free, open-source series of penetration-testing lessons written by veteran Chinese pentester Micropoor and published as a GitBook. It covers code audit, web, intranet and domain penetration, tunneling, and log-based tracing.

    • exploitation
    • information-gathering
    • pentest
    • redteam
45. 45

    Awesome-Hacking-Resources

    17.5Kvitalysim/Awesome-Hacking-Resources

    A curated collection of hacking, penetration testing and AI red-teaming resources — courses, YouTube channels, CTF platforms and guides, picked to make you better at offensive security.

    • kali-linux
    • exploit-development
    • privilege-escalation
    • owasp
46. 46

    wazuh

    17.3Kwazuh/wazuh · C++

    Wazuh is a free, open source security platform (XDR and SIEM) for threat prevention, detection and response across on-premises, virtualized, containerized and cloud workloads.

    • container-security
    • pci-dss
    • cloud-security
    • security-hardening
47. 47

    awesome-hacking

    17.3Kcarpedm20/awesome-hacking

    A curated list of hacking tutorials, tools and resources covering system exploitation, reverse engineering, web security, network security, forensics, cryptography and wargames.

    • hacking-tools
    • forensics
    • ctf
    • network-security
48. 48

    MHDDoS

    16.9KMatrixTM/MHDDoS · Python

    MHDDoS is a Python 3 DDoS testing toolkit with 57 attack methods spanning Layer 7 (HTTP floods, Cloudflare/OVH bypasses) and Layer 4/3 (TCP, UDP, SYN, amplification attacks), meant for authorized security testing and research.

    • cloudflare-bypass
    • bypass
    • vps
    • hacking-tool
49. 49

    how-web-works

    16.8Kvasanthk/how-web-works

    A detailed walkthrough of everything that happens behind the scenes between typing 'google.com' into a browser and the page rendering on screen, covering keyboard input, URL parsing, DNS, TLS, HTTP, and browser rendering internals.

    • system-design
    • dns
    • curriculum
    • interview-preparation
50. 50

    lynis

    16.5KCISOfy/lynis · Shell

    Lynis is a security auditing and hardening tool for Linux, macOS, BSD, and other Unix-like systems. It scans the host it runs on for vulnerable software, misconfigurations, and weak settings, and gives hardening tips while also assisting with compliance testing (HIPAA, ISO27001, PCI DSS).

    • pci-dss
    • security-hardening
    • gdpr
    • hardening
51. 51

    impacket

    16.2Kfortra/impacket · Python

    Impacket is a collection of Python classes for working with network protocols, giving low-level programmatic access to packets and, for some protocols like SMB1-3 and MSRPC, full protocol implementations.

    • network-programming
    • network
    • protocol
    • red-team
52. 52

    PentestGPT

    16KGreyDGL/PentestGPT · Python

    PentestGPT is an agentic framework that uses large language models to run automated penetration testing and solve CTF challenges, working through staged phases like recon, exploitation and reporting.

    • ctf
    • hacking-tool
    • offensive-security
    • red-team
53. 53

    zaproxy

    16Kzaproxy/zaproxy · Java

    ZAP (Zed Attack Proxy) by Checkmarx is the world's most widely used web app security scanner, used to automatically find vulnerabilities in web applications during development and testing.

    • security-scanner
    • appsec
    • opensource
    • vulnerability-scanner
54. 54

    evilginx2

    15.7Kkgretzky/evilginx2 · Go

    Evilginx is a man-in-the-middle attack framework used for phishing login credentials along with session cookies, which lets an attacker bypass 2-factor authentication.

    • credentials
    • phishing
    • two-factor-authentication
    • session
55. 55

    hacker-roadmap

    15.7Ksundowndev/hacker-roadmap

    This is a curated roadmap and toolkit index for learning and practicing ethical hacking: it explains what penetration testing is and groups hundreds of security tools, wordlists and references by category (recon, password attacks, wireless, exploitation, web hacking, post-exploitation, frameworks).

    • wordlist
    • password-cracking
    • post-exploitation
    • wireless
56. 56

    social-engineer-toolkit

    15.4Ktrustedsec/social-engineer-toolkit · Python

    The Social-Engineer Toolkit (SET) is an open-source penetration testing framework for authorized social-engineering assessments, giving security teams guided attack vectors to test user awareness and validate controls.

    • pentesting-tools
    • ethical-hacking
    • pentest
    • exploit
57. 57

    amass

    15.4Kowasp-amass/amass · Go

    Amass is an OWASP project that maps attack surfaces and discovers external assets (like subdomains, IPs, and infrastructure) using open source intelligence gathering and active reconnaissance.

    • subdomain
    • recon
    • owasp
    • information-gathering
58. 58

    holehe

    15.2Kmegadose/holehe · Python

    Holehe is an OSINT tool that checks whether an email address is registered on 120+ websites (Twitter, Instagram, Spotify, Imgur, etc) by abusing each site's 'forgot password' or registration flow, without alerting the target.

    • osint-python
    • osint-tools
    • social-network
    • instagram
59. 59

    XSStrike

    15.2Ks0md3v/XSStrike · Python

    XSStrike is a Cross Site Scripting (XSS) detection suite built around four hand-written parsers, an intelligent payload generator, a fuzzing engine, and a fast crawler. Instead of just firing generic payloads like most scanners, it analyzes the live response and crafts payloads guaranteed to work through context analysis.

    • web-application-firewall
    • xss
    • web-security
    • vulnerability-scanner
60. 60

    crowdsec

    15.2Kcrowdsecurity/crowdsec · Go

    CrowdSec is an open-source IDS/IPS and WAF that detects malicious behavior by analyzing logs and HTTP requests, blocks bad actors locally, and shares anonymized attack data with a crowdsourced network to build a real-time community blocklist.

    • web-application-firewall
    • blocklist
    • waf
    • anti-bot
61. 61

    prowler

    15Kprowler-cloud/prowler · Python

    Prowler is an open-source cloud security platform that automates security and compliance checks across AWS, Azure, GCP, Kubernetes, M365, GitHub, and many other providers.

    • multi-cloud
    • security-hardening
    • gdpr
    • hardening
62. 62

    esp8266_deauther

    15KSpacehuhnTech/esp8266_deauther · C

    ESP8266 Deauther is open-source firmware for the ESP8266 chip that lets you scan nearby WiFi networks, send deauthentication packets to disconnect devices, and spin up dozens of fake WiFi networks to confuse scanners - an affordable platform for testing and learning about WiFi security.

    • esp8266
    • scanning
    • hack
    • wifi-security
63. 63

    awesome-security

    15Ksbilly/awesome-security

    A curated, categorized collection of well-known security resources — software, libraries, documents, books and other cool stuff — maintained by the community in the spirit of awesome-php and awesome-python.

    • forensics
    • web-security
    • malware-analysis
    • firewall
64. 64

    wifiphisher

    14.9Kwifiphisher/wifiphisher · Python

    Wifiphisher is a rogue access point framework for conducting Wi-Fi phishing and man-in-the-middle attacks against wireless clients, used in red team and penetration testing engagements.

    • redteaming
    • phishing
    • wifi-security
    • malware
65. 65

    Reverse-Engineering

    14.8Kmytechnotalent/Reverse-Engineering · Assembly

    A free, massive collection of reverse engineering and hacking tutorials covering x86, x64, ARM (32/64-bit), AVR, RISC-V, Windows internals, malware analysis, embedded systems, Rust, Go, Wasm, and more, delivered as free ebooks/lessons.

    • assembly-language
    • x64
    • risc-v
    • malware
66. 66

    subfinder

    14.6Kprojectdiscovery/subfinder · Go

    Subfinder is a fast passive subdomain enumeration tool that returns valid subdomains for a website by querying passive online sources, built for penetration testers and bug bounty hunters.

    • subdomain-enumeration
    • bugbounty
    • reconnaissance
    • osint
67. 67

    hacker101

    14.6KHacker0x01/hacker101 · SCSS

    Hacker101 is a free online class for web and mobile security from HackerOne (the Hacker0x01 org), aimed at everyone from programmers curious about bug bounties to seasoned security professionals.

    • csrf
    • sql-injection
    • xss
    • mobile-security
68. 68

    binwalk

    14.5KReFirmLabs/binwalk · Rust

    Binwalk is a firmware analysis tool that can identify, and optionally extract, files and data that have been embedded inside other files.

    • forensics
    • binary-analysis
    • embedded-systems
    • hacking-tool
69. 69

    gophish

    14.3Kgophish/gophish · Go

    Gophish is an open-source phishing toolkit for businesses and penetration testers: it lets you quickly set up and run phishing engagements and security awareness training campaigns.

    • phishing
    • red-team
    • pentesting
    • email
70. 70

    awesome-malware-analysis

    14.3Krshipp/awesome-malware-analysis

    A curated 'awesome list' of malware analysis tools and resources, covering sample collection, sandboxes, detection tools, threat intelligence feeds, reverse engineering, and forensics.

    • dynamic-analysis
    • chinese-translation
    • threat-intelligence
    • forensics
71. 71

    gobuster

    14.2KOJ/gobuster · Go

    Gobuster is a fast, multi-threaded command-line tool written in Go for brute-forcing web directories/files, DNS subdomains, and virtual hosts, plus enumerating S3/GCS cloud storage buckets and TFTP files.

    • brute-force
    • subdomain-enumeration
    • fuzzing
    • scanner
72. 72

    opensnitch

    14.2Kevilsocket/opensnitch · Python

    OpenSnitch is an interactive application firewall for GNU/Linux, inspired by macOS's 'Little Snitch', that lets you see and approve or block each app's outgoing connections in real time.

    • ebpf
    • malware
    • firewall
    • linux-app
73. 73

    juice-shop

    14.1Kjuice-shop/juice-shop · TypeScript

    OWASP Juice Shop is an intentionally insecure web application (a fake online juice store) built for security training, awareness demos, CTFs, and testing security tools.

    • appsec
    • owasp
    • application-security
    • security-audit
74. 74

    PENTESTING-BIBLE

    14KblaCCkHatHacEEkr/PENTESTING-BIBLE

    A curated catalog of over 200 numbered links to pentesting articles, bug bounty write-ups, cheat sheets and other security lists — a reading collection, not software.

    • recon
    • privilege-escalation
    • bug-bounty
    • pentest
75. 75

    opennhp

    13.9KOpenNHP/opennhp · Go

    OpenNHP is a lightweight, cryptography-powered, open-source Zero Trust toolkit: it hides server ports, IP addresses, and domain names so your infrastructure stays invisible until a client is cryptographically authorized.

    • zero-trust
    • cryptography
    • infrastructure
    • authentication
76. 76

    awesome-web-security

    13.9Kqazbnm456/awesome-web-security · Python

    A curated list of web security materials and resources, organized by vulnerability class and attack type (XSS, SQL injection, CSRF, SSRF, XXE, deserialization, OAuth, JWT, and more), plus cheatsheets, tools, and write-ups for penetration testing.

    • waf
    • recon
    • appsec
    • information-gathering
77. 77

    DVWA

    13.9Kdigininja/DVWA · PHP

    DVWA (Damn Vulnerable Web Application) is a PHP/MariaDB web app that is deliberately full of security bugs, built as a legal practice target for security pros, students, and developers to learn web application security.

    • sql-injection
    • application-security
    • web-security
    • vulnerability-scanner
78. 78

    openhaystack

    13.8Kseemoo-lab/openhaystack · Swift

    OpenHaystack is a framework that lets you build your own 'AirTag'-like trackers by exploiting Apple's Find My network, so you can track Bluetooth accessories (keyrings, backpacks, notebooks) using nearby iPhones as relays.

    • bluetooth
    • flutter
    • embedded
    • apple
79. 79

    pwntools

    13.8KGallopsled/pwntools · Python

    Pwntools is a CTF framework and exploit development library written in Python, built for rapid prototyping with the goal of making exploit writing as simple as possible.

    • assembly
    • ctf
    • exploit
    • python3
80. 80

    GTFOBins.github.io

    13.8KGTFOBins/GTFOBins.github.io · YAML

    GTFOBins is a curated list of Unix-like executables that can be abused to bypass local security restrictions in misconfigured systems — for example, binaries a restricted user can turn into a root shell.

    • post-exploitation
    • exploitation
    • privilege-escalation
    • pentest
81. 81

    SoftEtherVPN

    13.7KSoftEtherVPN/SoftEtherVPN · C

    SoftEther VPN is a free, open-source, cross-platform VPN program where a single server can speak SSL-VPN, WireGuard, OpenVPN, IPsec, L2TP, MS-SSTP, L2TPv3 and EtherIP.

    • wireguard-vpn
    • openvpn
    • vpn-server
    • wireguard
82. 82

    theZoo

    13.5Kytisf/theZoo · Python

    theZoo is a public repository of live malware samples and their source code, gathered so that anyone interested in malware analysis can study real specimens in an organized and accessible way.

    • malware
    • malware-analysis
    • infosec
    • virtualization
83. 83

    secguide

    13.4KTencent/secguide

    A free, Tencent-maintained secure coding guide for developers that catalogs API-level security risks and gives concrete, actionable secure-coding solutions.

    • application-security
    • devsecops
    • vulnerability
    • cheatsheet
84. 84

    git-secrets

    13.4Kawslabs/git-secrets · Shell

    git-secrets is a command-line tool that scans your git commits, commit messages, and merges to stop you from accidentally committing passwords, AWS keys, and other secrets.

    • regex
    • secrets
    • aws
    • git
85. 85

    RemoveWindowsAI

    13.4Kzoicware/RemoveWindowsAI · PowerShell

    RemoveWindowsAI is a PowerShell script that force-removes Copilot, Recall, Image Creator and other AI features Microsoft keeps adding to Windows 11, to improve privacy, security and user experience.

    • bloatware
    • optimizer
    • bloatware-removal
    • windows-tweaker
86. 86

    mastg

    13.3KOWASP/mastg · Python

    A comprehensive OWASP manual for mobile app security testing and reverse engineering. It gives technical processes for verifying the weaknesses listed in the OWASP Mobile Security Weakness Enumeration (MASWE).

    • dynamic-analysis
    • android-application
    • network-analysis
    • checklist
87. 87

    nuclei-templates

    13.1Kprojectdiscovery/nuclei-templates · JavaScript

    This is a community-curated collection of over 11,000 detection templates for the Nuclei vulnerability scanner, covering CVEs, misconfigurations, exposed panels, and other security issues.

    • vulnerability-detection
    • cve
    • fingerprint
    • exploit-development
88. 88

    PowerSploit

    13.1KPowerShellMafia/PowerSploit · PowerShell

    PowerSploit is a collection of PowerShell modules that penetration testers use during all phases of an assessment, covering code execution, persistence, privilege escalation, credential theft, exfiltration and reconnaissance on Windows systems.

    • persistence
    • credentials
    • post-exploitation
    • encoding
89. 89

    grype

    13Kanchore/grype · Go

    Grype is a command-line vulnerability scanner that checks container images, filesystems, and SBOMs for known security vulnerabilities.

    • vulnerabilities
    • oci
    • supply-chain-security
    • devsecops
90. 90

    ida-pro-mcp

    13Kmrexodia/ida-pro-mcp · Python

    It is an MCP server that bridges IDA Pro with AI language models, letting coding agents like Claude, Codex or Cursor help you reverse engineer binaries ('vibe reversing').

    • disassembler
    • decompiler
    • malware-analysis
    • binary-analysis
91. 91

    user.js

    12.9Karkenfox/user.js · JavaScript

    arkenfox user.js is a community-maintained Firefox configuration template that hardens privacy and security settings, aiming to reduce tracking and fingerprinting as much as possible while trying to keep the browser usable.

    • anti-tracking
    • hardening
    • mozilla
    • fingerprint
92. 92

    hexstrike-ai

    12.9K0x4m4/hexstrike-ai · Python

    HexStrike AI MCP Agents is an MCP server that lets AI agents like Claude, GPT, or Copilot autonomously run 150+ real cybersecurity tools for automated pentesting, bug bounty hunting, CTF challenges, and vulnerability discovery.

    • ai-hacking
    • ctf-tools
    • ai-penetration-testing
    • ai-security-tool
93. 93

    undetected-chromedriver

    12.9Kultrafunkamsterdam/undetected-chromedriver · Python

    It is a patched Selenium Chromedriver for Python that automatically downloads and modifies the chromedriver binary so it evades anti-bot systems like Distil, Imperva, DataDome and Cloudflare IUAM.

    • webdriver
    • cloudflare-bypass
    • anti-bot
    • anti-detection
94. 94

    ESP32Marauder

    12.8Kjustcallmekoko/ESP32Marauder · C++

    ESP32 Marauder is a suite of offensive and defensive WiFi and Bluetooth tools that run as firmware on an ESP32 microcontroller, used for things like wardriving, scanning, and wireless security testing.

    • flipperzero
    • esp32-s3
    • arduino
    • scanner
95. 95

    atomic-red-team

    12.7Kredcanaryco/atomic-red-team · C

    Atomic Red Team is a library of small, portable security tests, each mapped to a specific MITRE ATT&CK technique, that security teams run to check whether their defenses actually detect real attacker behavior.

    • mitre-attack
    • offensive-security
    • red-team
    • ruby
96. 96

    wifi-cracking

    12.7Kbrannondorsey/wifi-cracking

    A step-by-step tutorial for cracking WPA/WPA2 Wi-Fi passwords: capture a handshake with Airodump-ng, then crack it offline with Aircrack-ng or Hashcat.

    • password-cracking
    • wireless
    • wifi-security
    • cracking
97. 97

    scapy

    12.6Ksecdev/scapy · Python

    Scapy is a Python-based interactive packet manipulation program and library that lets you forge, decode, send, capture, and analyze network packets.

    • packet-capture
    • network-analysis
    • network
    • network-security
98. 98

    urh

    12.6Kjopohl/urh · Python

    URH (Universal Radio Hacker) is a suite for investigating wireless protocols: it captures radio signals via SDR hardware, demodulates them with automatic modulation detection, and helps you reverse-engineer the bits and bytes flying over the air.

    • sdr
    • wireless
    • radio
    • fuzzing
99. 99

    hacktricks

    12.6KHackTricks-wiki/hacktricks · JavaScript

    A free, open wiki of hacking tricks and techniques — everything the author has learnt from CTFs, real-world apps and security research, organized into a browsable reference with 12.5k+ GitHub stars.

    • pentesting-tools
    • exploitation
    • recon
    • privilege-escalation
100. 100

     thc-hydra

     12.4Kvanhauser-thc/thc-hydra · C

     Hydra is a parallelized network login cracker by van Hauser / THC: a proof-of-concept tool showing researchers and security consultants how easily a remote system can be broken into through weak passwords. It supports over 50 protocols.

     • brute-force
     • bruteforce
     • password-cracking
     • pentest-tool

Showing the 100 most-starred of 245. See every one in the catalog.

• security976
• security-tools282
• linux4,184
• open-source5,666
• windows3,403
• macos3,544
• penetration-testing126
• hacking135
• pentesting113
• python2,383
• cli2,227
• red-team79
• docker1,660
• mit3,312
• offensive-security77
• reverse-engineering221
• cross-platform2,623
• terminal1,101
• self-hosted1,929
• hacking-tool75
• network-security66
• developer-tools2,924
• osint68
• vulnerability50