# OpenSecTools

> Curated open source tools for AI, security, and digital research.

- Homepage: https://tools.secretshare.me/
- RSS Feed: https://tools.secretshare.me/rss.xml
- Total Projects: 249

## Projects

- [public-apis/public-apis](https://github.com/public-apis/public-apis): A collective list of free APIs for software and web development. The largest curated collection of public APIs on GitHub with 410k+ stars. Covers cate... (410.9k stars, Developer Tools)
- [openclaw/openclaw](https://github.com/openclaw/openclaw): OpenClaw is a personal AI assistant you run on your own devices, accessible through 20+ messaging platforms including WhatsApp, Telegram, Slack, and D... (317.0k stars, AI & Machine Learning)
- [awesome-selfhosted/awesome-selfhosted](https://github.com/awesome-selfhosted/awesome-selfhosted): A list of Free Software network services and web applications which can be hosted on your own servers... (280.3k stars, DevOps & Infrastructure)
- [n8n-io/n8n](https://github.com/n8n-io/n8n): Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.... (179.5k stars, AI & Machine Learning)
- [massgravel/Microsoft-Activation-Scripts](https://github.com/massgravel/Microsoft-Activation-Scripts): Open-source Windows and Office activator featuring HWID, Ohook, TSforge, and Online KMS activation methods, along with advanced troubleshooting.... (168.9k stars, Developer Tools)
- [anomalyco/opencode](https://github.com/anomalyco/opencode): The open source coding agent.... (123.5k stars, Developer Tools)
- [browser-use/browser-use](https://github.com/browser-use/browser-use): Browser Use is a Python library that makes websites accessible for AI agents, enabling automated web-based task completion with ease. Integrates with... (80.9k stars, AI & Machine Learning)
- [jaywcjlove/awesome-mac](https://github.com/jaywcjlove/awesome-mac): A curated list of awesome macOS applications, software, tools, and resources.... (79.0k stars, Developer Tools)
- [microsoft/ML-For-Beginners](https://github.com/microsoft/ML-For-Beginners): Microsoft's 12-week machine learning curriculum with scikit-learn, regression, classification, clustering, NLP, and time series.... (70.0k stars, AI & Machine Learning)
- [OpenBB-finance/OpenBB](https://github.com/OpenBB-finance/OpenBB): Financial data platform for analysts, quants and AI agents. An open source project hosted on GitHub by OpenBB-finance. Built with Python. Topics: ai,... (63.2k stars, AI & Machine Learning)
- [twitter/the-algorithm](https://github.com/twitter/the-algorithm): Twitter's recommendation algorithm source code. The core ranking and timeline algorithms that power the platform.... (62.0k stars, AI & Machine Learning)
- [laurent22/joplin](https://github.com/laurent22/joplin): Joplin - the privacy-focused note taking app with sync capabilities for Windows, macOS, Linux, Android and iOS.... (53.9k stars, Developer Tools)
- [commaai/openpilot](https://github.com/commaai/openpilot): openpilot is an open source driver assistance system. Provides adaptive cruise control and lane keeping for 275+ supported cars.... (52.0k stars, AI & Machine Learning)
- [pi-hole/pi-hole](https://github.com/pi-hole/pi-hole): A black hole for Internet advertisements. Network-wide ad blocking via your own Linux hardware.... (51.0k stars, DevOps & Infrastructure)
- [jellyfin/jellyfin](https://github.com/jellyfin/jellyfin): The Free Software Media System - Server Backend & API An open source project hosted on GitHub by jellyfin. Built with C#. Topics: csharp, dotnet, hack... (49.4k stars, Security & Pentesting)
- [upstash/context7](https://github.com/upstash/context7): Context7 delivers current, version-specific documentation and code examples directly into LLM prompts, eliminating outdated training data and hallucin... (49.2k stars, Developer Tools)
- [agalwood/Motrix](https://github.com/agalwood/Motrix): A full-featured download manager supporting HTTP, FTP, BitTorrent, Magnet with a clean interface.... (46.0k stars, Developer Tools)
- [exo-explore/exo](https://github.com/exo-explore/exo): exo lets you run frontier AI models locally by connecting multiple devices into a distributed AI cluster. Automatically discovers devices on your netw... (42.6k stars, AI & Machine Learning)
- [tw93/Mole](https://github.com/tw93/Mole): 🐹 Deep clean and optimize your Mac. An open source project hosted on GitHub by tw93. Built with Shell. Topics: analyzer, appcleaner, clean, cleaner, c... (40.4k stars, AI & Machine Learning)
- [koala73/worldmonitor](https://github.com/koala73/worldmonitor): WorldMonitor is a real-time global intelligence dashboard with AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking. Prov... (39.1k stars, AI & Machine Learning)
- [nushell/nushell](https://github.com/nushell/nushell): A new type of shell An open source project hosted on GitHub by nushell. Built with Rust. Topics: nushell, rust, shell.... (38.8k stars, Developer Tools)
- [ruvnet/RuView](https://github.com/ruvnet/RuView): RuView is an edge AI perception system that uses WiFi signals to detect human pose, vital signs (breathing and heart rate), and presence in real-time... (37.3k stars, AI & Machine Learning)
- [microsoft/AI-For-Beginners](https://github.com/microsoft/AI-For-Beginners): Microsoft's 12-week AI curriculum covering neural networks, computer vision, NLP, and generative AI with hands-on projects.... (36.0k stars, AI & Machine Learning)
- [rapid7/metasploit-framework](https://github.com/rapid7/metasploit-framework): The world's most used penetration testing framework. Exploit development, payload generation, and post-exploitation.... (35.0k stars, Security & Pentesting)
- [KeygraphHQ/shannon](https://github.com/KeygraphHQ/shannon): Shannon Lite is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and exec... (33.7k stars, Security & Pentesting)
- [AdguardTeam/AdGuardHome](https://github.com/AdguardTeam/AdGuardHome): Network-wide ads & trackers blocking DNS server An open source project hosted on GitHub by AdguardTeam. Built with Go. Topics: adblock, adguard, dns,... (33.1k stars, DevOps & Infrastructure)
- [ItzCrazyKns/Vane](https://github.com/ItzCrazyKns/Vane): Vane is a privacy-focused AI answering engine that runs on your own hardware. Combines web search with local LLMs via Ollama and cloud providers like... (33.0k stars, AI & Machine Learning)
- [binwiederhier/ntfy](https://github.com/binwiederhier/ntfy): ntfy (pronounced "notify") is a simple HTTP-based pub-sub notification service that lets you send push notifications to your phone or desktop via PUT/... (29.2k stars, DevOps & Infrastructure)
- [facefusion/facefusion](https://github.com/facefusion/facefusion): FaceFusion is an industry-leading open-source face manipulation platform. Supports face swapping, lip syncing, and deepfake generation with state-of-t... (27.1k stars, AI & Machine Learning)
- [exelban/stats](https://github.com/exelban/stats): macOS system monitor in your menu bar. CPU, GPU, memory, disk, network, battery, and sensor monitoring.... (27.0k stars, Developer Tools)
- [dragonflydb/dragonfly](https://github.com/dragonflydb/dragonfly): A modern in-memory data store compatible with Redis and Memcached APIs. 25x throughput with multi-threaded architecture.... (27.0k stars, Database)
- [jivoi/awesome-osint](https://github.com/jivoi/awesome-osint): Awesome OSINT is a comprehensive curated list of open source intelligence tools and resources for cybersecurity professionals, threat hunters, and int... (25.3k stars, Security & Pentesting)
- [Cinnamon/kotaemon](https://github.com/Cinnamon/kotaemon): An open-source RAG-based tool for chatting with your documents. An open source project hosted on GitHub by Cinnamon. Built with Python. Topics: chatbo... (25.2k stars, AI & Machine Learning)
- [GoogleChromeLabs/squoosh](https://github.com/GoogleChromeLabs/squoosh): Squoosh is a web-based image compression tool by Google Chrome Labs. Reduces image file sizes using best-in-class codecs right in the browser with zer... (24.9k stars, Developer Tools)
- [ml-explore/mlx](https://github.com/ml-explore/mlx): MLX is an array framework for machine learning on Apple silicon by Apple ML Research. Features NumPy-like APIs, composable function transformations, l... (24.6k stars, AI & Machine Learning)
- [warpdotdev/Warp](https://github.com/warpdotdev/Warp): Warp is a modern GPU-accelerated terminal built in Rust with AI integration, collaborative features, and developer workflows.... (22.0k stars, Developer Tools)
- [hashcat/hashcat](https://github.com/hashcat/hashcat): World's fastest and most advanced password recovery utility supporting 300+ hash types with GPU acceleration.... (22.0k stars, Security & Pentesting)
- [browserbase/stagehand](https://github.com/browserbase/stagehand): Stagehand is the AI browser automation framework. Built on Playwright, it enables LLM-powered web automation with natural language instructions. Suppo... (21.5k stars, AI & Machine Learning)
- [lfnovo/open-notebook](https://github.com/lfnovo/open-notebook): An open-source implementation of Notebook LM with more flexibility and features. Provides AI-powered note-taking, learning assistance, and knowledge m... (21.0k stars, AI & Machine Learning)
- [containerd/containerd](https://github.com/containerd/containerd): An open and reliable container runtime An open source project hosted on GitHub by containerd. Built with Go. Topics: cncf, containerd, containers, cri... (20.5k stars, AI & Machine Learning)
- [docker-mailserver/docker-mailserver](https://github.com/docker-mailserver/docker-mailserver): A production-ready, fullstack mail server running inside a Docker container. Provides SMTP, IMAP, LDAP, antispam (Rspamd), and antivirus capabilities... (18.0k stars, DevOps & Infrastructure)
- [renovatebot/renovate](https://github.com/renovatebot/renovate): Automated dependency updates. Multi-platform and multi-language. Keep your dependencies up-to-date automatically.... (18.0k stars, DevOps & Infrastructure)
- [phil-opp/blog_os](https://github.com/phil-opp/blog_os): Writing an OS in Rust An open source project hosted on GitHub by phil-opp. Built with HTML. Topics: kernel, operating-system, rust, x86-64.... (17.4k stars, Security & Pentesting)
- [AlexsJones/llmfit](https://github.com/AlexsJones/llmfit): llmfit matches LLM models to your hardware capabilities. Detects RAM, CPU cores, and GPU specs, then scores hundreds of language models across quality... (17.2k stars, AI & Machine Learning)
- [browser-use/web-ui](https://github.com/browser-use/web-ui): Browser Use Web UI lets you run AI agents directly in your browser with a visual interface. Provides a web-based control panel for launching, monitori... (15.7k stars, AI & Machine Learning)
- [MatrixTM/MHDDoS](https://github.com/MatrixTM/MHDDoS): MHDDoS is a network stress testing tool with 56+ methods across Layer 7 and Layer 4 protocols. Supports HTTP flooding, DNS amplification, and various... (15.6k stars, Security & Pentesting)
- [tiann/KernelSU](https://github.com/tiann/KernelSU): A Kernel based root solution for Android An open source project hosted on GitHub by tiann. Built with Kotlin. Topics: android, kernel, kernelsu, root,... (15.5k stars, Developer Tools)
- [lyogavin/airllm](https://github.com/lyogavin/airllm): AirLLM is a memory-optimized inference framework that runs 70B+ parameter LLMs on a single 4GB GPU without quantization. Decomposes models into layer-... (14.0k stars, AI & Machine Learning)
- [pytube/pytube](https://github.com/pytube/pytube): Lightweight, dependency-free Python library and CLI for downloading YouTube videos, playlists, and captions.... (13.1k stars, Developer Tools)
- [maurosoria/dirsearch](https://github.com/maurosoria/dirsearch): Web path scanner. Brute-force directories and files in web servers with advanced features and wordlists.... (12.0k stars, Security & Pentesting)
- [benbusby/whoogle-search](https://github.com/benbusby/whoogle-search): A self-hosted, ad-free, privacy-respecting metasearch engine An open source project hosted on GitHub by benbusby. Built with Python. Topics: adblock,... (11.4k stars, DevOps & Infrastructure)
- [apple/pkl](https://github.com/apple/pkl): A configuration as code language with rich validation and tooling. An open source project hosted on GitHub by apple. Built with Java. Topics: config,... (11.1k stars, Security & Pentesting)
- [prowler-cloud/prowler](https://github.com/prowler-cloud/prowler): Prowler is an open source security tool for AWS, Azure, GCP, and Kubernetes to perform security assessments and compliance.... (11.0k stars, Security & Pentesting)
- [Chia-Network/chia-blockchain](https://github.com/Chia-Network/chia-blockchain): Chia blockchain reference implementation. Green cryptocurrency using proof of space and time.... (10.8k stars, Other)
- [pymumu/smartdns](https://github.com/pymumu/smartdns): SmartDNS is a local DNS server that identifies and returns the fastest IP addresses for websites. Supports encrypted DNS protocols including DNS-over-... (10.6k stars, Networking)
- [quay/clair](https://github.com/quay/clair): Vulnerability static analysis for containers. Scans container images for known vulnerabilities.... (10.5k stars, Security & Pentesting)
- [google/magika](https://github.com/google/magika): Fast and accurate AI powered file content types detection  An open source project hosted on GitHub by google. Built with Python. Topics: ai, deep-lear... (10.2k stars, AI & Machine Learning)
- [oceanbase/oceanbase](https://github.com/oceanbase/oceanbase): The Fastest Distributed Database for Transactional, Analytical, and  AI Workloads.... (10.0k stars, AI & Machine Learning)
- [browseros-ai/BrowserOS](https://github.com/browseros-ai/BrowserOS): BrowserOS is an open-source agentic browser — an alternative to ChatGPT Atlas, Perplexity Comet, and Dia. Provides AI-powered web browsing with LLM in... (9.9k stars, AI & Machine Learning)
- [vxcontrol/pentagi](https://github.com/vxcontrol/pentagi): PentAGI is a fully autonomous AI agent system for penetration testing. Multiple specialized AI agents (researchers, developers, executors) collaborate... (9.8k stars, Security & Pentesting)
- [blacklanternsecurity/bbot](https://github.com/blacklanternsecurity/bbot): The recursive internet scanner for hackers. 🧡 An open source project hosted on GitHub by blacklanternsecurity. Built with Python. Topics: asm, attack-... (9.5k stars, AI & Machine Learning)
- [berty/berty](https://github.com/berty/berty): Berty is a secure peer-to-peer messaging app that works with or without internet access, cellular data, or trust in the network. Built on IPFS and lib... (9.1k stars, Security & Pentesting)
- [OpenPipe/ART](https://github.com/OpenPipe/ART): Agent Reinforcement Trainer: train multi-step agents for real-world tasks using GRPO. Give your agents on-the-job training. Reinforcement learning for... (9.0k stars, AI & Machine Learning)
- [firezone/firezone](https://github.com/firezone/firezone): Enterprise-ready zero-trust access platform built on WireGuard®. An open source project hosted on GitHub by firezone. Built with Elixir. Topics: cloud... (8.5k stars, Security & Pentesting)
- [LaurieWired/GhidraMCP](https://github.com/LaurieWired/GhidraMCP): GhidraMCP is a Model Context Protocol server that enables LLMs to autonomously reverse engineer applications through Ghidra. Exposes Ghidra binary ana... (7.9k stars, Security & Pentesting)
- [epi052/feroxbuster](https://github.com/epi052/feroxbuster): Feroxbuster is a fast, simple, recursive content discovery tool written in Rust. Designed for web application penetration testing, it brute-forces dir... (7.6k stars, Security & Pentesting)
- [ellite/Wallos](https://github.com/ellite/Wallos): Wallos: Open-source, self-hostable personal subscription tracker. Visualize your recurring expenses, manage your budget, and save money.... (7.6k stars, DevOps & Infrastructure)
- [axi0mX/ipwndfu](https://github.com/axi0mX/ipwndfu): open-source jailbreaking tool for many iOS devices An open source project by axi0mX.... (7.3k stars, Developer Tools)
- [guess-js/guess](https://github.com/guess-js/guess): 🔮 Libraries & tools for enabling Machine Learning driven user-experiences on the web... (7.1k stars, Developer Tools)
- [telekom-security/tpotce](https://github.com/telekom-security/tpotce): T-Pot — the all-in-one multi-honeypot platform. 20+ honeypots in Docker containers with SIEM integration.... (7.0k stars, Security & Pentesting)
- [mitre/caldera](https://github.com/mitre/caldera): CALDERA is a cyber security platform by MITRE designed to automate adversary emulation, assist manual red-teams, and automate incident response. Built... (6.8k stars, Security & Pentesting)
- [fastfire/deepdarkCTI](https://github.com/fastfire/deepdarkCTI): deepdarkCTI is a curated collection of cyber threat intelligence sources from deep and dark web platforms. Aggregates intelligence from Telegram chann... (6.7k stars, Security & Pentesting)
- [stamparm/maltrail](https://github.com/stamparm/maltrail): Malicious traffic detection system utilizing publicly available blacklists and custom heuristics.... (6.7k stars, Security & Pentesting)
- [devlikeapro/waha](https://github.com/devlikeapro/waha): WAHA (WhatsApp HTTP API) is a REST API wrapper for WhatsApp that you can configure in a click. Supports three engines: WEBJS (browser-based), NOWEB (W... (6.3k stars, Developer Tools)
- [GhostTroops/scan4all](https://github.com/GhostTroops/scan4all): Official repository  vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scannin... (6.0k stars, Security & Pentesting)
- [Cveinnt/LiveTerm](https://github.com/Cveinnt/LiveTerm): 💻 Build terminal styled websites in minutes! An open source project hosted on GitHub by Cveinnt. Built with TypeScript. Topics: nextjs, personal-websi... (5.4k stars, Security & Pentesting)
- [KingOfBugbounty/KingOfBugBountyTips](https://github.com/KingOfBugbounty/KingOfBugBountyTips): A curated collection of bug bounty tips and methodologies from well-known bug hunters. Covers reconnaissance techniques for finding subdomains, APIs,... (5.2k stars, Security & Pentesting)
- [3proxy/3proxy](https://github.com/3proxy/3proxy): 3proxy - tiny free proxy server An open source project hosted on GitHub by 3proxy. Built with C. Topics: accounting, c, https-proxy, ipv6, network-man... (5.0k stars, Networking)
- [dashingsoft/pyarmor](https://github.com/dashingsoft/pyarmor): A tool used to obfuscate python scripts, bind obfuscated scripts to fixed machine or expire obfuscated scripts.... (5.0k stars, Developer Tools)
- [Nyr/wireguard-install](https://github.com/Nyr/wireguard-install): WireGuard road warrior installer for Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS and Fedora... (4.8k stars, DevOps & Infrastructure)
- [SadeghHayeri/GreenTunnel](https://github.com/SadeghHayeri/GreenTunnel): GreenTunnel is an anti-censorship utility designed to bypass the DPI system that is put in place by various ISPs to block access to certain websites.... (4.7k stars, Networking)
- [XiaoYouChR/Ghost-Downloader-3](https://github.com/XiaoYouChR/Ghost-Downloader-3): A cross-platform multi-threaded downloader with AI-boost and fluent design built with Python and PySide6. Supports QUIC/HTTP3 protocol for faster down... (4.7k stars, Developer Tools)
- [apurvsinghgautam/robin](https://github.com/apurvsinghgautam/robin): Robin is an AI-powered dark web OSINT tool for automated investigation and intelligence gathering on Tor hidden services. Leverages large language mod... (4.5k stars, Security & Pentesting)
- [tomnomnom/waybackurls](https://github.com/tomnomnom/waybackurls): Fetch all the URLs that the Wayback Machine knows about for a domain An open source project hosted on GitHub by tomnomnom. Built with Go.... (4.4k stars, AI & Machine Learning)
- [scanopy/scanopy](https://github.com/scanopy/scanopy): Scanopy provides self-updating network documentation that keeps itself current. It automatically discovers, maps, and visualizes your network infrastr... (4.2k stars, Networking)
- [szabodanika/microbin](https://github.com/szabodanika/microbin): MicroBin is a secure, configurable file-sharing and URL shortening web application written in Rust. Lightweight alternative to Pastebin with support f... (4.1k stars, Developer Tools)
- [DedSecInside/TorBot](https://github.com/DedSecInside/TorBot): Dark Web OSINT Tool An open source project hosted on GitHub by DedSecInside. Built with Python. Topics: algorithm, crawler, dark-web, dedsec-inside, d... (3.8k stars, Security & Pentesting)
- [infosecn1nja/Red-Teaming-Toolkit](https://github.com/infosecn1nja/Red-Teaming-Toolkit): A collection of tools used by red teamers for adversary simulation and penetration testing.... (3.8k stars, Security & Pentesting)
- [google/trillian](https://github.com/google/trillian): A transparent, highly scalable and cryptographically verifiable data store.... (3.7k stars, Developer Tools)
- [WGDashboard/WGDashboard](https://github.com/WGDashboard/WGDashboard): Simple dashboard for WireGuard VPN written in Python & Vue.js... (3.4k stars, DevOps & Infrastructure)
- [getwud/wud](https://github.com/getwud/wud): Keep your containers up-to-date! An open source project hosted on GitHub by getwud. Built with TypeScript. Topics: docker, nodejs, semver, update-chec... (3.4k stars, AI & Machine Learning)
- [sc0tfree/updog](https://github.com/sc0tfree/updog): Updog is a replacement for Python's SimpleHTTPServer. It allows uploading and downloading via HTTP/S, can set ad hoc SSL certificates and use http bas... (3.3k stars, Developer Tools)
- [wppconnect-team/wppconnect](https://github.com/wppconnect-team/wppconnect): WPPConnect is an open-source library that exports WhatsApp Web functions to Node.js, enabling developers to build WhatsApp bots, automation tools, and... (3.2k stars, Developer Tools)
- [aleixrodriala/wa-tunnel](https://github.com/aleixrodriala/wa-tunnel): WA-Tunnel enables tunneling internet traffic over WhatsApp messages. It uses WhatsApp as a transport layer to bypass network restrictions, firewalls,... (3.2k stars, Networking)
- [teler-sh/teler](https://github.com/teler-sh/teler): Real-time HTTP Intrusion Detection An open source project hosted on GitHub by teler-sh. Built with Go. Topics: analyze-logs, go, golang, ids, intrusio... (3.1k stars, Developer Tools)
- [orhun/kmon](https://github.com/orhun/kmon): Linux Kernel Manager and Activity Monitor 🐧💻 An open source project hosted on GitHub by orhun. Built with Rust. Topics: hacktoberfest, kernel-activiti... (2.9k stars, Developer Tools)
- [DependencyTrack/dependency-track](https://github.com/DependencyTrack/dependency-track): Intelligent Component Analysis platform for identifying and reducing risk in the software supply chain.... (2.8k stars, Security & Pentesting)
- [Narasimha1997/fake-sms](https://github.com/Narasimha1997/fake-sms): A simple command line tool using which you can skip phone number based SMS verification by using a temporary phone number that acts like a proxy.... (2.8k stars, Networking)
- [0xSojalSec/airllm](https://github.com/0xSojalSec/airllm): AirLLM enables running 70B parameter large language models with inference on a single 4GB GPU. Uses layer-by-layer computation and memory-efficient te... (2.7k stars, AI & Machine Learning)
- [martinvigo/email2phonenumber](https://github.com/martinvigo/email2phonenumber): A OSINT tool to obtain a target's phone number just by having his email address... (2.6k stars, AI & Machine Learning)
- [oxylabs/free-proxy-list](https://github.com/oxylabs/free-proxy-list): Free Proxy List by Oxylabs provides free datacenter proxies with United States IP addresses for developers and testers. It offers HTTP, HTTPS, and SOC... (2.6k stars, Networking)
- [protectai/vulnhuntr](https://github.com/protectai/vulnhuntr): Zero shot vulnerability discovery using LLMs An open source project hosted on GitHub by protectai. Built with Python. Topics: ai, llm, security, stati... (2.6k stars, AI & Machine Learning)
- [google/osv.dev](https://github.com/google/osv.dev): Open source vulnerability DB and triage service. An open source project hosted on GitHub by google. Built with Python. Topics: security, security-tool... (2.5k stars, Security & Pentesting)
- [favonia/cloudflare-ddns](https://github.com/favonia/cloudflare-ddns): A small, feature-rich, and robust Cloudflare DDNS updater written in Go. It automatically detects your public IP addresses and updates Cloudflare DNS... (2.4k stars, DevOps & Infrastructure)
- [Nheko-Reborn/nheko](https://github.com/Nheko-Reborn/nheko): Desktop client for Matrix using Qt and C++20. An open source project hosted on GitHub by Nheko-Reborn. Built with C++. Topics: desktop, hacktoberfest,... (2.4k stars, Security & Pentesting)
- [NVIDIA/NemoClaw](https://github.com/NVIDIA/NemoClaw): NVIDIA plugin for secure installation of OpenClaw... (2.4k stars, AI & Machine Learning)
- [free5gc/free5gc](https://github.com/free5gc/free5gc): Open source 5G core network based on 3GPP R15 An open source project hosted on GitHub by free5gc. Built with Go. Topics: 3gpp, 5g, 5gc, amf, ausf, cor... (2.3k stars, Networking)
- [login-securite/lsassy](https://github.com/login-securite/lsassy): Extract credentials from lsass remotely An open source project hosted on GitHub by login-securite. Built with Python.... (2.2k stars, Developer Tools)
- [NatLabRockies/api-umbrella](https://github.com/NatLabRockies/api-umbrella): Open source API management platform An open source project hosted on GitHub by NatLabRockies. Built with Ruby. Topics: api-gateway, api-management, ap... (2.2k stars, Developer Tools)
- [SnaffCon/Snaffler](https://github.com/SnaffCon/Snaffler): A tool for pentesters to find delicious candy in Active Directory environments. Credential hunting in file shares.... (2.1k stars, Security & Pentesting)
- [gquere/pwn_jenkins](https://github.com/gquere/pwn_jenkins): Notes about attacking Jenkins servers An open source project by gquere. Topics: exploit, hacking, jenkins, pentest, rce.... (2.1k stars, Developer Tools)
- [6mile/DevSecOps-Playbook](https://github.com/6mile/DevSecOps-Playbook): This is a step-by-step guide to implementing a DevSecOps program for any size organization... (2.0k stars, Security & Pentesting)
- [eset/malware-ioc](https://github.com/eset/malware-ioc): Indicators of Compromises (IOC) of our various investigations... (1.9k stars, Security & Pentesting)
- [nizos/tdd-guard](https://github.com/nizos/tdd-guard): TDD Guard is an automated Test-Driven Development enforcement tool for Claude Code that ensures AI agents follow proper TDD discipline. It hooks into... (1.8k stars, Developer Tools)
- [nizos/tdd-guard](https://github.com/nizos/tdd-guard): TDD Guard is an automated Test-Driven Development enforcement tool for Claude Code. Validates coding practices and prevents implementations that bypas... (1.8k stars, Developer Tools)
- [googleprojectzero/0days-in-the-wild](https://github.com/googleprojectzero/0days-in-the-wild): Tracking 0-day vulnerabilities found exploited in-the-wild by Google Project Zero.... (1.8k stars, Security & Pentesting)
- [wagiro/BurpBounty](https://github.com/wagiro/BurpBounty): Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and pass... (1.8k stars, Security & Pentesting)
- [GH05TCREW/pentestagent](https://github.com/GH05TCREW/pentestagent): PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows. Leverages la... (1.8k stars, Security & Pentesting)
- [froxlor/froxlor](https://github.com/froxlor/froxlor): The server administration software for your needs - The official Froxlor development Git repository... (1.7k stars, Security & Pentesting)
- [oxen-io/lokinet](https://github.com/oxen-io/lokinet): Lokinet is an anonymous, decentralized overlay network built on top of the Oxen blockchain service node network.... (1.7k stars, Networking)
- [KeenSecurityLab/BinAbsInspector](https://github.com/KeenSecurityLab/BinAbsInspector): BinAbsInspector: Vulnerability Scanner for Binaries An open source project by KeenSecurityLab. Topics: abstract-interpretation, binary-analysis, ghidr... (1.7k stars, Security & Pentesting)
- [taviso/ctftool](https://github.com/taviso/ctftool): Interactive CTF Exploration Tool An open source project by taviso. Topics: reverse-engineering, security, windows, windows-internals.... (1.7k stars, Developer Tools)
- [SiriusScan/Sirius](https://github.com/SiriusScan/Sirius): Sirius is a comprehensive vulnerability scanner and security assessment platform. Provides automated vulnerability discovery, asset management, and se... (1.6k stars, Security & Pentesting)
- [Phishing-Database/Phishing.Database](https://github.com/Phishing-Database/Phishing.Database): Phishing Domains, urls websites and threats database. We use the PyFunceble testing tool to validate the status of all known Phishing domains and prov... (1.5k stars, AI & Machine Learning)
- [cossacklabs/acra](https://github.com/cossacklabs/acra): Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, ho... (1.5k stars, Security & Pentesting)
- [addyosmani/web-quality-skills](https://github.com/addyosmani/web-quality-skills): Web Quality Skills is a collection of Agent Skills for Claude Code that help developers optimize web projects based on Google Lighthouse guidelines an... (1.4k stars, Developer Tools)
- [ptoomey3/Keychain-Dumper](https://github.com/ptoomey3/Keychain-Dumper): A tool to check which keychain items are available to an attacker once an iOS device has been jailbroken... (1.4k stars, AI & Machine Learning)
- [BlackSnufkin/LitterBox](https://github.com/BlackSnufkin/LitterBox): A secure sandbox environment for malware developers and red teamers to test payloads against detection mechanisms before deployment. Integrates with L... (1.3k stars, AI & Machine Learning)
- [projectdiscovery/nuclei-burp-plugin](https://github.com/projectdiscovery/nuclei-burp-plugin): Nuclei plugin for BurpSuite An open source project hosted on GitHub by projectdiscovery. Built with Java.... (1.3k stars, Security & Pentesting)
- [ION28/BLUESPAWN](https://github.com/ION28/BLUESPAWN): An Active Defense and EDR software to empower Blue Teams... (1.3k stars, Developer Tools)
- [oiov/vmail](https://github.com/oiov/vmail): VMail is a temporary email service built entirely on Cloudflare infrastructure — Workers, D1 database, Pages, and Email Routing. Deploy with just a do... (1.3k stars, Developer Tools)
- [MichaelKoczwara/Awesome-CobaltStrike-Defence](https://github.com/MichaelKoczwara/Awesome-CobaltStrike-Defence): Defences against Cobalt Strike An open source project hosted on GitHub by MichaelKoczwara. Topics: beacon, cobalt-strike, cobaltstrike-defence, defenc... (1.3k stars, Security & Pentesting)
- [ParallelSSH/parallel-ssh](https://github.com/ParallelSSH/parallel-ssh): Asynchronous parallel SSH client library. An open source project hosted on GitHub by ParallelSSH. Built with Python. Topics: aio, async, asynchronous,... (1.3k stars, Networking)
- [taviso/123elf](https://github.com/taviso/123elf): A native port of Lotus 1-2-3 to Linux. An open source project hosted on GitHub by taviso. Built with C. Topics: lotus, retrocomputing, spreadsheet, te... (1.2k stars, Developer Tools)
- [Rurik/Noriben](https://github.com/Rurik/Noriben): Noriben - Portable, Simple, Malware Analysis Sandbox... (1.2k stars, Developer Tools)
- [monosans/proxy-scraper-checker](https://github.com/monosans/proxy-scraper-checker): HTTP, SOCKS4, SOCKS5 proxies scraper and checker with rich functionality. An open source project hosted on GitHub by monosans. Built with Rust. Topics... (1.2k stars, Networking)
- [olafhartong/ThreatHunting](https://github.com/olafhartong/ThreatHunting): ThreatHunting is a Splunk application that provides structured threat hunting guidance mapped to the MITRE ATT&CK framework. It includes over 130 pre-... (1.2k stars, Security & Pentesting)
- [ostafen/digler](https://github.com/ostafen/digler): Digler is a forensic disk analysis and file recovery tool written in Go. Designed to unearth lost or deleted data from disk images and raw devices. Su... (1.2k stars, Security & Pentesting)
- [zaps166/QMPlay2](https://github.com/zaps166/QMPlay2): QMPlay2 is a video and audio player which can play most formats and codecs.... (1.1k stars, Developer Tools)
- [projectdiscovery/pdtm](https://github.com/projectdiscovery/pdtm): PDTM is ProjectDiscovery's open-source tool manager for installing, updating, and managing their security toolkit. Unified CLI to manage nuclei, httpx... (1.1k stars, Security & Pentesting)
- [mgeeky/cobalt-arsenal](https://github.com/mgeeky/cobalt-arsenal): My collection of battle-tested Aggressor Scripts for Cobalt Strike 4.0+... (1.1k stars, Security & Pentesting)
- [joshhighet/ransomwatch](https://github.com/joshhighet/ransomwatch): the transparent ransomware claim tracker 🥷🏼🧅🖥️ An open source project hosted on GitHub by joshhighet. Built with HTML. Topics: darkweb, ransomware.... (1.1k stars, Developer Tools)
- [Leeon123/CC-attack](https://github.com/Leeon123/CC-attack): Using Socks4/5 or http proxies to make a multithreading Http-flood/Https-flood (cc) attack.... (1.1k stars, Developer Tools)
- [passbolt/passbolt_docker](https://github.com/passbolt/passbolt_docker): Get started with Passbolt CE using docker!... (1.1k stars, DevOps & Infrastructure)
- [mikeroyal/Open-Source-Security-Guide](https://github.com/mikeroyal/Open-Source-Security-Guide): Open Source Security Guide. Learn all about Security Standards (FIPS, CIS, FedRAMP, FISMA, etc.), Frameworks, Threat Models, Encryption, and Benchmark... (1.1k stars, Security & Pentesting)
- [OWASP/DevSecOpsGuideline](https://github.com/OWASP/DevSecOpsGuideline): The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.... (1.0k stars, Security & Pentesting)
- [calesthio/Crucix](https://github.com/calesthio/Crucix): Crucix is an open-source intelligence terminal that aggregates 27 global data feeds into a unified 3D WebGL dashboard. Monitors satellite imagery, fli... (1.0k stars, Security & Pentesting)
- [wwh1004/ExtremeDumper](https://github.com/wwh1004/ExtremeDumper): .NET Assembly Dumper An open source project hosted on GitHub by wwh1004. Built with C#.... (998 stars, Developer Tools)
- [atenreiro/opensquat](https://github.com/atenreiro/opensquat): openSquat is an open-source cybersquatting and phishing domain detection tool. It searches newly registered domains to find look-alikes that might imp... (942 stars, Security & Pentesting)
- [mzfr/liffy](https://github.com/mzfr/liffy): Local file inclusion exploitation tool An open source project by mzfr. Topics: hac, lfi, lfi-exploitation, local-file-inclusion, reverse-shell.... (931 stars, Developer Tools)
- [Esc4iCEscEsc/skanuvaty](https://github.com/Esc4iCEscEsc/skanuvaty): Dangerously fast DNS/network/port scanner An open source project by Esc4iCEscEsc. Topics: cybersecurity, dns, dns-client, hacking-tools, osint-tool, p... (923 stars, Developer Tools)
- [InQuest/ThreatIngestor](https://github.com/InQuest/ThreatIngestor): Extract and aggregate threat intelligence. An open source project hosted on GitHub by InQuest. Built with Python. Topics: dfir, fraud-detection, indic... (908 stars, Security & Pentesting)
- [Furkan-Gulsen/turkce-go-egitimi](https://github.com/Furkan-Gulsen/turkce-go-egitimi): Bu repo, Go dilini hızlı bir şekilde öğrenmek isteyenler için hazırlanmış bir eğitim serisidir. Toplamda 40 konuyu, örnekler üzerinden anlatarak dilin... (865 stars, Developer Tools)
- [InitRoot/BurpJSLinkFinder](https://github.com/InitRoot/BurpJSLinkFinder): Burp Extension for a passive scanning JS files for endpoint links. An open source project by InitRoot.... (814 stars, Security & Pentesting)
- [meehow/privtracker](https://github.com/meehow/privtracker): Private BitTorrent tracker generator An open source project hosted on GitHub by meehow. Built with Go. Topics: bittorrent, bittorrent-tracker, privacy... (797 stars, Security & Pentesting)
- [six2dez/burp-ai-agent](https://github.com/six2dez/burp-ai-agent): A Burp Suite extension that adds AI-assisted security analysis with built-in MCP tooling. Features passive and active scanning augmented by LLM intell... (786 stars, Security & Pentesting)
- [naksyn/Pyramid](https://github.com/naksyn/Pyramid): a tool to help operate in EDRs' blind spots An open source project hosted on GitHub by naksyn. Built with Python. Topics: edr, edr-testing, hacking, p... (768 stars, Developer Tools)
- [h9zdev/WireTapper](https://github.com/h9zdev/WireTapper): WireTapper is a wireless OSINT tool for passive signal intelligence. Detects and maps Wi-Fi networks, Bluetooth devices, CCTV cameras, vehicles, headp... (758 stars, Security & Pentesting)
- [mandiant/stringsifter](https://github.com/mandiant/stringsifter): A machine learning tool that ranks strings based on their relevance for malware analysis.... (754 stars, Developer Tools)
- [rewanthtammana/Damn-Vulnerable-Bank](https://github.com/rewanthtammana/Damn-Vulnerable-Bank): Damn Vulnerable Bank is an intentionally vulnerable Android banking application designed for learning mobile security testing. Features authentication... (735 stars, Security & Pentesting)
- [Alb-310/Geogramint](https://github.com/Alb-310/Geogramint): An OSINT Geolocalization tool for Telegram that find nearby users and groups 📡🌍🔍... (722 stars, Developer Tools)
- [drb-ra/C2IntelFeeds](https://github.com/drb-ra/C2IntelFeeds): Automatically created C2 Feeds An open source project hosted on GitHub by drb-ra. Built with REXX. Topics: cobalt-strike, cobaltstrike, empire, indica... (668 stars, Security & Pentesting)
- [sophoslabs/IoCs](https://github.com/sophoslabs/IoCs): Sophos-originated indicators of compromise (IoCs) extracted from published threat intelligence reports. Contains 148+ CSV files and YARA rules documen... (652 stars, Security & Pentesting)
- [cloudfuzz/android-kernel-exploitation](https://github.com/cloudfuzz/android-kernel-exploitation): Android Kernel Exploitation An open source project hosted on GitHub by cloudfuzz. Built with C++. Topics: android, exploit-dev, exploit-development, e... (642 stars, Security & Pentesting)
- [SatelliteWP/rocket-nginx](https://github.com/SatelliteWP/rocket-nginx): Rocket-Nginx is a Nginx configuration that makes WP-Rocket even faster by serving static pages directly without loading WordPress or PHP.... (614 stars, Developer Tools)
- [haileyydev/maildrop](https://github.com/haileyydev/maildrop): Maildrop is a simple, self-hostable disposable email service. Provides temporary email inboxes for privacy-conscious users, developers testing email w... (598 stars, Developer Tools)
- [mstfknn/malware-sample-library](https://github.com/mstfknn/malware-sample-library): A curated malware sample library containing specimens from major threat actors and campaigns including APT28, APT29, APT34, APT37, APTC23, and Babuk r... (593 stars, Security & Pentesting)
- [desec-io/desec-stack](https://github.com/desec-io/desec-stack): Backbone of the deSEC Free Secure DNS Hosting Service An open source project hosted on GitHub by desec-io. Built with Python. Topics: dns, dnssec, dyn... (585 stars, DevOps & Infrastructure)
- [northpolesec/santa](https://github.com/northpolesec/santa): A binary and file access authorization system for macOS. An open source project hosted on GitHub by northpolesec. Built with Objective-C++. Topics: al... (564 stars, Security & Pentesting)
- [mazen160/shennina](https://github.com/mazen160/shennina): Automating Host Exploitation with AI An open source project hosted on GitHub by mazen160. Built with Python. Topics: ai, deception-detection, host-exp... (548 stars, Developer Tools)
- [AminForou/mcp-gsc](https://github.com/AminForou/mcp-gsc): MCP server connecting Google Search Console to AI assistants like Claude, Cursor, and Gemini CLI. Enables natural language analysis of SEO data includ... (542 stars, Developer Tools)
- [zux0x3a/0xsp-Mongoose](https://github.com/zux0x3a/0xsp-Mongoose): a unique framework for cybersecurity simulation and red teaming operations, windows auditing for newer vulnerabilities, misconfigurations and privileg... (535 stars, Developer Tools)
- [KasperskyLab/triangle_check](https://github.com/KasperskyLab/triangle_check): triangle_check by KasperskyLab — open source project on GitHub.... (528 stars, Developer Tools)
- [lepotekil/MsfMania](https://github.com/lepotekil/MsfMania): Python AV Evasion Tools An open source project hosted on GitHub by lepotekil. Built with Python. Topics: compression, cross-platform, crosscompiler, d... (518 stars, Developer Tools)
- [muchdogesec/awesome_threat_intel_blogs](https://github.com/muchdogesec/awesome_threat_intel_blogs): A curated list of Awesome Threat Intelligence Blogs An open source project hosted on GitHub by muchdogesec. Topics: atom, cybersecurity, infosec, rss,... (513 stars, Security & Pentesting)
- [edoardottt/csprecon](https://github.com/edoardottt/csprecon): Discover new target domains using Content Security Policy  An open source project hosted on GitHub by edoardottt. Built with Go. Topics: bounty-huntin... (508 stars, AI & Machine Learning)
- [thecmdguy/Ducky](https://github.com/thecmdguy/Ducky): Ducky is a powerful, open-source, all-in-one desktop application for network engineers, students, and tech enthusiasts. Built with Python and PySide6,... (487 stars, Networking)
- [aydinnyunus/exifLooter](https://github.com/aydinnyunus/exifLooter): ExifLooter extracts geolocation data from image EXIF metadata and integrates with OpenStreetMap for visualization. Written in Go, it analyzes individu... (484 stars, Security & Pentesting)
- [DarkWebInformer/FBI_Watchdog](https://github.com/DarkWebInformer/FBI_Watchdog): FBI Watchdog is an OSINT tool that monitors domain seizures and DNS record changes in real-time. Detects law enforcement domain takeovers by watching... (466 stars, Security & Pentesting)
- [x0xr00t/Automated-MUlti-UAC-Bypass](https://github.com/x0xr00t/Automated-MUlti-UAC-Bypass): Automated Multi UAC BYPASS for win10|win11|win12-pre-release|ws2019|ws2022 An open source project hosted on GitHub by x0xr00t. Built with C#.... (455 stars, Security & Pentesting)
- [gendigitalinc/ioc](https://github.com/gendigitalinc/ioc): Threat Intel IoCs + bits and pieces of dark matter. Published by Gen Threat Labs.... (437 stars, Security & Pentesting)
- [owasp-dep-scan/blint](https://github.com/owasp-dep-scan/blint): blint is a Binary Linter that checks the security properties and capabilities of your executables. It can also generate a Software Bill-of-Materials (... (436 stars, AI & Machine Learning)
- [ParetoSecurity/pareto-mac](https://github.com/ParetoSecurity/pareto-mac): Automatically audit your Mac for basic security hygiene. An open source project hosted on GitHub by ParetoSecurity. Built with Swift. Topics: endpoint... (429 stars, Security & Pentesting)
- [bing0o/SubEnum](https://github.com/bing0o/SubEnum): bash script for Subdomain Enumeration  An open source project hosted on GitHub by bing0o. Built with Shell.... (405 stars, AI & Machine Learning)
- [Tsuyoken/ImgBackdoor](https://github.com/Tsuyoken/ImgBackdoor): Hide your payload into .jpg file An open source project hosted on GitHub by Tsuyoken. Built with Shell. Topics: backdoor, backdoor-attacks, backdoors,... (397 stars, Developer Tools)
- [CriticalPathSecurity/Zeek-Intelligence-Feeds](https://github.com/CriticalPathSecurity/Zeek-Intelligence-Feeds): Zeek-Formatted Threat Intelligence Feeds An open source project hosted on GitHub by CriticalPathSecurity. Built with Zeek. Topics: malware, phishing,... (390 stars, Security & Pentesting)
- [bytecode77/living-off-the-land](https://github.com/bytecode77/living-off-the-land): Fileless attack with persistence An open source project hosted on GitHub by bytecode77. Built with C++. Topics: fileless, fileless-attack, poc.... (371 stars, Developer Tools)
- [proxidize/proxidize-android](https://github.com/proxidize/proxidize-android): Proxidize Android enables creating 5G/4G mobile proxies using smartphones without additional hardware. Converts phones into HTTP(S) and SOCKS5 proxy s... (334 stars, Networking)
- [InfosecMatter/default-http-login-hunter](https://github.com/InfosecMatter/default-http-login-hunter): Login hunter of default credentials for administrative web interfaces leveraging NNdefaccts dataset.... (332 stars, Developer Tools)
- [cihanmehmet/sub.sh](https://github.com/cihanmehmet/sub.sh): Multiprocessing(Parallel)Subdomain Detect Script An open source project by cihanmehmet.... (329 stars, Developer Tools)
- [spacesiren/spacesiren](https://github.com/spacesiren/spacesiren): A honey token manager and alert system for AWS. An open source project hosted on GitHub by spacesiren. Built with Python. Topics: aws, honeypot, lambd... (321 stars, Developer Tools)
- [g0ldencybersec/EasyEASM](https://github.com/g0ldencybersec/EasyEASM): Zero-dollar attack surface management tool An open source project hosted on GitHub by g0ldencybersec. Built with Go. Topics: attack-surface-management... (317 stars, Security & Pentesting)
- [kasteckis/TempFastMail](https://github.com/kasteckis/TempFastMail): TempFastMail is a self-hosted temporary email box service. Built with PHP (Symfony) backend and React frontend, it provides disposable email addresses... (315 stars, Developer Tools)
- [redcode-labs/Revssl](https://github.com/redcode-labs/Revssl): A script that automates generation of OpenSSL reverse shells An open source project by redcode-labs. Topics: openssl, openssl-reverse, reverse-shell.... (303 stars, Developer Tools)
- [elcuervo/tangalanga](https://github.com/elcuervo/tangalanga): Tangalanga: the Zoom conference scanner hacking tool An open source project hosted on GitHub by elcuervo. Built with Go. Topics: hacking, hacking-tool... (288 stars, Security & Pentesting)
- [reposaur/reposaur](https://github.com/reposaur/reposaur): Open source compliance tool for development platforms.... (286 stars, Developer Tools)
- [cloudflare/mcp](https://github.com/cloudflare/mcp): Cloudflare MCP Server provides token-efficient access to the entire Cloudflare API via Model Context Protocol. Instead of exposing 2,500+ endpoints as... (266 stars, DevOps & Infrastructure)
- [IncideDigital/Mistica](https://github.com/IncideDigital/Mistica):   An open source swiss army knife for arbitrary communication over application protocols... (245 stars, Developer Tools)
- [Securonix/AutonomousThreatSweeper](https://github.com/Securonix/AutonomousThreatSweeper): Threat Hunting queries for various attacks An open source project hosted on GitHub by Securonix. Topics: cybersecurity, infosec, security, threat-hunt... (244 stars, AI & Machine Learning)
- [Shiva108/ai-llm-red-team-handbook](https://github.com/Shiva108/ai-llm-red-team-handbook): The AI/LLM Red Team Field Manual and Consultant's Handbook. A comprehensive guide covering adversarial testing methodologies for AI and large language... (238 stars, Security & Pentesting)
- [qeeqbox/raven](https://github.com/qeeqbox/raven): Advanced Cyber Threat Map (Simplified, customizable, responsive and optimized)... (226 stars, Developer Tools)
- [PayloadSecurity/VxAPI](https://github.com/PayloadSecurity/VxAPI): A generic interface and CLI for all endpoints of the Falcon Sandbox API... (225 stars, Security & Pentesting)
- [JarryShaw/darc](https://github.com/JarryShaw/darc): Darkweb Crawler Project An open source project hosted on GitHub by JarryShaw. Built with Python. Topics: crawler, darkweb.... (214 stars, Developer Tools)
- [emrekybs/Pip-Intel](https://github.com/emrekybs/Pip-Intel): PIP-INTEL is an OSINT (Open Source Intelligence) tool designed using various open-source tools and pip packages.... (193 stars, Security & Pentesting)
- [rufftruffles/spameater](https://github.com/rufftruffles/spameater): SpamEater is a secure, self-hosted temporary email service with automatic message deletion. Protected by ModSecurity WAF for enhanced security. Built... (182 stars, Security & Pentesting)
- [fxb-cocacoding/yara-signator](https://github.com/fxb-cocacoding/yara-signator): Automatic YARA rule generation for Malpedia An open source project hosted on GitHub by fxb-cocacoding. Built with Java.... (168 stars, Security & Pentesting)
- [BountySecurity/gbounty](https://github.com/BountySecurity/gbounty): GBounty is a multi-step website vulnerability scanner developed in Golang designed to help companies, pentesters, and bug hunters identify potential v... (161 stars, Security & Pentesting)
- [mthcht/ThreatHunting-Keywords-yara-rules](https://github.com/mthcht/ThreatHunting-Keywords-yara-rules): yara detection rules for hunting with the threathunting-keywords project An open source project hosted on GitHub by mthcht. Built with YARA. Topics: a... (157 stars, Security & Pentesting)
- [elceef/subzuf](https://github.com/elceef/subzuf): a smart DNS response-guided subdomain fuzzer An open source project hosted on GitHub by elceef. Built with Python. Topics: dns, fuzzing, subdomain-enu... (156 stars, Developer Tools)
- [swimlane/atomic-operator](https://github.com/swimlane/atomic-operator): A Python package is used to execute Atomic Red Team tests (Atomics) across multiple operating system environments.... (139 stars, Security & Pentesting)
- [JannisKirschner/Horn3t](https://github.com/JannisKirschner/Horn3t): Powerful Visual Subdomain Enumeration at the Click of a Mouse An open source project by JannisKirschner. Topics: enumeration, penetration-testing, pen... (137 stars, Developer Tools)
- [utkusen/rhodiola](https://github.com/utkusen/rhodiola): Personalized wordlist generator with NLP, by analyzing tweets. (A.K.A crunch2049)... (136 stars, Developer Tools)
- [kacakb/jsfinder](https://github.com/kacakb/jsfinder): Fetches JavaScript files quickly and comprehensively.... (133 stars, Developer Tools)
- [mstfknn/rat-collection](https://github.com/mstfknn/rat-collection): A comprehensive collection of Remote Access Trojan (RAT) samples for security research and malware analysis. Includes specimens from families such as... (120 stars, Security & Pentesting)
- [ninoseki/shimon](https://github.com/ninoseki/shimon): Shimon is a URL fingerprinting OSINT tool that identifies website characteristics across ten different threat intelligence platforms including Shodan,... (89 stars, Security & Pentesting)
- [apple/pkl-lang.org](https://github.com/apple/pkl-lang.org): The pkl-lang.org website An open source project hosted on GitHub by apple. Built with CSS.... (82 stars, Developer Tools)
- [ambionics/vbulletin-exploits](https://github.com/ambionics/vbulletin-exploits): Exploits targeting vBulletin. An open source project hosted on GitHub by ambionics. Built with Python.... (74 stars, Security & Pentesting)
- [mstfknn/android-malware-sample-library](https://github.com/mstfknn/android-malware-sample-library): An Android malware sample library containing APK specimens from major mobile threat families including Anubis, BankBot, Cerberus, and COVID-19 themed... (71 stars, Security & Pentesting)
- [curated-intel/MOVEit-Transfer](https://github.com/curated-intel/MOVEit-Transfer): A repository for tracking events related to the MOVEit Transfer Cl0p Campaign... (71 stars, Security & Pentesting)
- [jamesread/StencilBox](https://github.com/jamesread/StencilBox): Build data driven super speedy simple static sites, with sleek templates. An open source project hosted on GitHub by jamesread. Built with Go. Topics:... (67 stars, Developer Tools)
- [redhuntlabs/antisquat](https://github.com/redhuntlabs/antisquat): antisquat — open source project An open source project hosted on GitHub by redhuntlabs. Built with Python. Topics: research.... (56 stars, Developer Tools)
- [Trendyol/swagger-parser-burp-extension](https://github.com/Trendyol/swagger-parser-burp-extension): swagger-parser-burp-extension by Trendyol — open source project on GitHub.... (44 stars, Security & Pentesting)
- [mstfknn/ransomware-decryptors](https://github.com/mstfknn/ransomware-decryptors): A curated collection of ransomware decryption tools gathered for incident response teams, malware analysts, and security professionals. Provides decry... (35 stars, Security & Pentesting)
- [PeernetOfficial/core](https://github.com/PeernetOfficial/core): Core library. Use this to create a new Peernet application.... (35 stars, Developer Tools)
- [forestallio/ActiveDirectoryRedTeaming](https://github.com/forestallio/ActiveDirectoryRedTeaming): Tools & TTP's for Active Directory Red Teaming An open source project by forestallio.... (31 stars, Developer Tools)
- [abusech/YARAify](https://github.com/abusech/YARAify): Open YARA scan- and search engine An open source project hosted on GitHub by abusech. Built with Python.... (26 stars, AI & Machine Learning)
- [BRANDEFENSE/IoC](https://github.com/BRANDEFENSE/IoC): IoC by BRANDEFENSE — open source project on GitHub.... (24 stars, Security & Pentesting)
- [BRANDEFENSE/Threat-Intelligence-Researches](https://github.com/BRANDEFENSE/Threat-Intelligence-Researches): The Brandefense cyber threat intelligence team is always researching new threats and writing research reports. Our latest Threat Reports is available... (23 stars, Security & Pentesting)
- [foss-dev/up10.me](https://github.com/foss-dev/up10.me): up10.me file storage site which only store data given data one day An open source project by foss-dev. Topics: appengine-go, file-storage, golang, goo... (22 stars, Developer Tools)
- [cmd-tools/gtfocli](https://github.com/cmd-tools/gtfocli): GTFO Command Line Interface for easy binaries search commands that can be used to bypass local security restrictions in misconfigured systems.... (18 stars, Security & Pentesting)
- [ka1nsha/sslandwhoistrack](https://github.com/ka1nsha/sslandwhoistrack): Calculate and Track SSL and Domain expiration dates An open source project by ka1nsha. Topics: python3.... (16 stars, Developer Tools)
- [gkhan496/phishing-brute-earthquake](https://github.com/gkhan496/phishing-brute-earthquake): phishing-brute-earthquake by gkhan496 — open source project on GitHub.... (14 stars, Security & Pentesting)
- [mstfknn/Stealers-Collection](https://github.com/mstfknn/Stealers-Collection): A collection of information stealer malware samples and source code for security research and malware analysis purposes. Provides researchers and anal... (10 stars, Security & Pentesting)
- [antichown/idea_information_nmap](https://github.com/antichown/idea_information_nmap): JetBrains .idea project directory sensitive information Nmap Script An open source project by antichown.... (10 stars, Developer Tools)
- [forestallio/kangal](https://github.com/forestallio/kangal): Combined Attack Paths for BloodHound An open source project hosted on GitHub by forestallio. Built with Python.... (6 stars, Developer Tools)
- [kevsersrca/pypagespeed](https://github.com/kevsersrca/pypagespeed): Python Pagespeed Insights Api :alien: An open source project by kevsersrca. Topics: pagespeed-insights-api, python-pagespeed.... (4 stars, Developer Tools)
- [tedmdelacruz/assetwarden](https://github.com/tedmdelacruz/assetwarden): assetwarden is a simple monitoring framework that detects changes in JS files of websites... (2 stars, DevOps & Infrastructure)
- [Damlaaulku/Android-App-Project](https://github.com/Damlaaulku/Android-App-Project): Android-App-Project by Damlaaulku — open source project on GitHub.... (2 stars, Developer Tools)
- [forestallio/Invoke-Ulubat](https://github.com/forestallio/Invoke-Ulubat): Invoke-Ulubat is a PowerShell command and script deobfuscator An open source project hosted on GitHub by forestallio. Built with PowerShell.... (2 stars, Developer Tools)
- [mstfknn/OnionV3-Link-Generator](https://github.com/mstfknn/OnionV3-Link-Generator): Onion URL Finder is a Python tool that generates random .onion V3 addresses and checks their accessibility through the Tor network. Supports parallel... (1 stars, Security & Pentesting)
- [mstfknn/awesome-url-shortening-services](https://github.com/mstfknn/awesome-url-shortening-services): A curated list of 4,713 free and paid URL shortening service domains compiled for developers, researchers, and security analysts. Covers services like... (1 stars, Security & Pentesting)
- [mstfknn/malware-sample](https://github.com/mstfknn/malware-sample): A collection of malware samples for security research and analysis purposes. Provides real-world specimens for malware analysts and threat researchers... (1 stars, Security & Pentesting)
- [forestallio/Kerberos](https://github.com/forestallio/Kerberos): Kerberos Protocol Security An open source project by forestallio.... (1 stars, Developer Tools)
- [forestallio/Manage-ServiceAccount](https://github.com/forestallio/Manage-ServiceAccount): Active Directory Service Account Management Scripts An open source project by forestallio.... (1 stars, Developer Tools)
- [mstfknn/tor-proxy](https://github.com/mstfknn/tor-proxy): A Dockerized Tor proxy server that routes internet traffic through the Tor network via a SOCKS5 proxy with DNS support. Offers multiple image variants... (0 stars, Security & Pentesting)
- [mstfknn/bucket-stream](https://github.com/mstfknn/bucket-stream): Bucket Stream monitors certificate transparency logs to discover publicly accessible Amazon S3 buckets in real time. It listens to CertStream for new... (0 stars, Security & Pentesting)
- [mstfknn/phishing-fasttext-model](https://github.com/mstfknn/phishing-fasttext-model): A lightweight FastText-based machine learning model to classify domain names as phishing or clean in real time. Trained on a dataset of 2 million labe... (0 stars, AI & Machine Learning)
- [mstfknn/disposable-email-list](https://github.com/mstfknn/disposable-email-list): A comprehensive list of 117,981 free and disposable email provider domains. Built for developers, researchers, and security professionals who need to... (0 stars, Security & Pentesting)
- [forestallio/technet-scripts](https://github.com/forestallio/technet-scripts): Microsoft Technet Scripts An open source project by forestallio.... (0 stars, Developer Tools)