discover · compare · collections · requirements · contribute · feed · watching · stats · help with your tokens
AI & LLMAgents & MCPSelf-hostedNetworkingSecurityDevOps & cloudData & databasesWebMobileTerminalDeveloper toolsLearningMusic & mediaHome & IoT
PythonTypeScriptJavaScriptGoRustCC++JavaC#SwiftKotlinPHPRubyShellHTMLZig
- gopasspw/gopass
The slightly more awesome standard unix password manager for teams
- presidentbeef/brakeman
A static analysis security vulnerability scanner for Ruby on Rails applications
- Openpanel-dev/openpanel
OpenPanel is an open-source web and product analytics platform, an open-source alternative to Mixpanel with optional self-hosting.
- onionshare/onionshare
Securely and anonymously share files, host websites, and chat with friends using the Tor network
- sobolevn/awesome-cryptography
A curated list of cryptography resources and links.
- authzed/spicedb
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
- meta/pyre-check
Performant type-checking for python.
- lwthiker/curl-impersonate
curl-impersonate: A special build of curl that can impersonate Chrome & Firefox
- liamg/traitor
:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock
- hwdsl2/docker-ipsec-vpn-server
Docker image to run an IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2. Auto-generates server config and supports VPN client setup on Linux, Windows, macOS, iOS and Android.
- paragonie/awesome-appsec
A curated list of resources for learning about application security
- fleetdm/fleet
Open device management
- guardicore/monkey
Infection Monkey - An open-source adversary emulation platform
- LasCC/HackTools
The all-in-one browser extension for offensive security professionals 🛠
- aistra0528/Hail
Disable / Hide / Suspend / Uninstall Android apps without root.
- beenuar/AiSOC
Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.
- aquasecurity/tfsec
Tfsec is now part of Trivy
- microsoft/Security-101
8 Lessons, Kick-start Your Cybersecurity Learning.
- InterceptSuite/ProxyBridge
Force Proxy to any Windows/MacOS/Linux Application TCP and UDP traffic
- urbanadventurer/WhatWeb
Next generation web scanner
- openstyles/stylus
Stylus - Userstyles Manager
- daffainfo/AllAboutBugBounty
All about bug bounty (bypasses, payloads, and etc)
- sottlmarek/DevSecOps
Ultimate DevSecOps library
- CTFd/CTFd
CTFs as you need them
- zizmorcore/zizmor
Static analysis for GitHub Actions (and more)
- AFLplusplus/AFLplusplus
AFL++ is a state-of-the-art fuzzer, and #1 in benchmarks. It was originally based on AFL. Today it comes with qemu 5.1, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!
- chaifeng/ufw-docker
To fix the Docker and UFW security flaw without disabling iptables
- infobyte/faraday
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.
- superagent-ai/superagent
Superagent protects your AI applications against prompt injections, data leaks, and harmful outputs. Embed safety directly into your app and prove compliance to your customers.
- ihebski/DefaultCreds-cheat-sheet
One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️