batesposture
wtbates99
26stars
Local-first desktop posture monitor with real-time webcam scoring, personal calibration, and private on-device processing.
Security · GitHub
Protect systems, find vulnerabilities, and improve privacy.
Useful GitHub projects
4,319 projects
Antenna
wuba
722stars
Antenna是58同城安全团队打造的一款辅助安全从业人员验证网络中多种漏洞是否存在以及可利用性的工具。其基于带外应用安全测试(OAST)通过任务的形式，将不同漏洞场景检测能力通过插件的形式进行集合，通过与目标进行out-bind的数据通信方式进行辅助检测。
powerauth-push-server
wultra
29stars
PowerAuth Push Server repository
ora
wuwangzhang1216
64stars
Real-time on-device speech translation for macOS. Silero VAD + Qwen3-ASR-1.7B + Qwen3.5 (MLX) on Apple Silicon. No cloud, no API keys, no telemetry.
Perun
WyAtu
1,051stars
Perun是一款主要适用于乙方安服、渗透测试人员和甲方RedTeam红队人员的网络资产漏洞扫描器/扫描框架
tweets_analyzer
x0rz
2,979stars
Tweets metadata scraper & activity analyzer
SpotifyAdBlock
x0uid
1,501stars
Protect your privacy by blocking all annoying Spotify ads & analytics in Linux, OSX and Windows with hosts file.
zero-calendar
x1xhlol
366stars
Zero Calendar is an open-source AI-native calendar that manages your schedule intelligently, giving you more time for what matters.
- Natural-language scheduling and calendar actions
- Google Calendar sync and webhook-based updates
secureum-mind_map
x676f64
1,899stars
Central Repository for the Epoch 0 coursework and quizzes. Contains all the content, cross-referenced and linked.
SploitScan
xaitax
1,439stars
SploitScan is a sophisticated cybersecurity utility designed to provide detailed information on vulnerabilities and associated exploits.
- CVE Information RetrievalRetrieve detailed information about vulnerabilities.
- EPSS IntegrationCheck the likelihood of exploitation with data from the Exploit Prediction Scoring System.
wordlists
xajkep
953stars
Infosec Wordlists and more.
security
xapax
1,052stars
Stuff about it-security that might be good to know
vault-kv-search
xbglowx
47stars
Recursively search Hashicorp Vault
- Recursive Search: Traverses nested paths in Vault to find secrets.
- Multi-Target Search: Search within secret values, keys, or paths.
The_spy_job
XDeadHackerX
501stars
The spy's job es una Herramienta enfocada al OSINT la cual cuenta con los mejores métodos para recolectar Información sobre algo o alguien. Como todas las Herramientas creadas por XDeadHackerX una de las mejores cualidades es la automatización de todos los procesos. [NO ME HAGO RESPONSABLE DEL MAL USO DE ESTA HERRAMIENTA]
Echos
xdrew87
35stars
Echos is a stealthy C2 traffic emulator built in Rust for Red Teamers. It simulates adversarial beaconing patterns and custom jitter to test EDR/NDR detection logic. Ideal for validating network security signatures in a safe, modular framework.
- 11 protocols — HTTP, HTTPS, HTTP/2, DNS, ICMP, SMB, WebSocket, SMTP, FTP, LDAP, RDP
- 19 built-in profiles — Cobalt Strike, APT28, Lazarus, APT29, Emotet, FIN7, APT41, ICMP, SMB, WebSocket, SMTP, Sandworm, Turla, Carbanak, CS DNS Beacon, Meterpreter, FTP Beacon, LDAP Beacon, RDP Beacon
code-guardian-report
Xenonesis
49stars
Enterprise-Grade AI-Powered Security Analysis Platform
- 100% Client-Side Processing: Your code never leaves your browser - complete privacy guaranteed
- Real-Time Analysis: Instant feedback as you upload or analyze code
dsh-remote
xgone
46stars
让你通过浏览器安全地远程使用 DeepSeek Harness：登录、MFA 两步验证、角色权限和远程文件预览。 | Use DeepSeek Harness securely in a remote browser with login, MFA, roles, and remote file preview.
ruoyi-scan
xiabai2008
55stars
RuoYi (若依) dedicated vulnerability scanner: plugin architecture, three-state verdict, WAF bypass, exploit chains, AI POC generation, nuclei compatible. 若依专项漏洞扫描器
goblin
xiecat
1,544stars
一款适用于红蓝对抗中的仿真钓鱼系统
exploits
XiphosResearch
1,573stars
Miscellaneous exploit code
OpenSCA-cli
XmirrorSecurity
1,138stars
OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a widely noticed accuracy by the community.
DorkEye
xPloits3c
162stars
Automated Google Dorking tool. It generates and executes advanced search queries to locate exposed files. It also checks for vulnerabilities such as SQLi and XSS, performs metadata analysis and extraction.
XposedOrNot-API
XposedOrNot
103stars
Open-source API to check if an email has been exposed in a data breach and monitor breaches across your verified domains. Real-time alerts and breach analytics protect your online identity.
- Check whether an email has appeared in a known data breach, with stats on where and when
- See if an email shows up in public pastes
188stars
List of past and future infosec related events.