samlists
the-xentropy
662stars
Free, libre, effective, and data-driven wordlists for all!
Security · GitHub
Protect systems, find vulnerabilities, and improve privacy.
Useful GitHub projects
4,326 projects
bof-launcher
The-Z-Labs
354stars
[ BOF-LAUNCHER ] -> an API for loading, executing and in-memory masking BOFs on Windows and Linux for use in C/Zig/Go/Rust agents/implants. [ Z-BEAC0N ] -> a custom-written stage-1 (aka pre-C2) solution engineered with a small footprint, stealth and modularity in mind.
NIVOS
theahmadov
484stars
NIVOS is a hacking tool that allows you to scan deeply , crack wifi, see people on your network. It applies to all linux operating systems. And it is improving every day, new packages are added. Thank You For Using NIVOS :> [NIVOS Created By NIVO Team]
JSRecon-Buddy
TheArqsz
191stars
A simple browser extension to quickly find interesting security-related information on a webpage.
- On-Page Overlay - all results are displayed in an overlay directly on the page you're testing.
- Comprehensive Scan - analyzes inline scripts, external JavaScript files, and the main HTML document.
Secure-Pastebin-Cloudflare-Worker
TheGreatAzizi
30stars
🔐 Secure Pastebin — End-to-End Encrypted Message Sharing. Zero-knowledge, password protected, self-destructing. Live demo: https://sp.theazizi.ir #InternetForAll
- 🔒 AES-256-GCM Encryption - Military-grade encryption in your browser
- 🛡️ Zero-Knowledge Architecture - Server cannot read your data. Ever.
Secure-Pastebin-Self-Hosted
TheGreatAzizi
36stars
🔐 Secure Pastebin (Self-Hosted Ver) — End-to-End Encrypted Message Sharing. Zero-knowledge, password protected, self-destructing. Live demo: https://sphost.theazizi.ir #InternetForAll
- 🔒 Client-side AES-256-GCM encryption using the native Web Crypto API
- 🛡️ Zero-knowledge architecture — server never receives plaintext, password, or key
race-the-web
TheHackerDev
639stars
Tests for race conditions in web applications. Includes a RESTful API to integrate into a continuous integration pipeline.
hackdroid
thehackingsage
1,086stars
Security Apps for Android
secbutler
thelicato
96stars
The perfect butler for pentesters, bug-bounty hunters and security researchers
- Generate a reverse shell command
- Download & deploy common payloads
polymarket-nonce-guard
TheOneWhoBurns
60stars
Detect and defend against the nonce race exploit on Polymarket's CTF Exchange
core
theopenlane
339stars
Open source compliance automation for SOC 2, GDPR, ISO27001, NIST 800-53, and more
- Compliance management: policies, controls, evidence, and programs, with editors, approvals, comments, and full history on every object
- Frameworks and standards: importable control sets for SOC 2, ISO 27001, NIST 800-53, and more; one control can satisfy requirements across multiple frameworks
BraveOriginFree
thesajidalam
43stars
Brave Origin for Windows - Free. No purchase required. Official signed binary with free activation bypass. Portable, no install, no admin. Saves you .
- Brave Shields - ✅ Enabled
- Bookmarks & History - ✅ Enabled
security-suite
TheSecuredAnalyst
134stars
Open-source security suite for OSINT, web scanning, API testing, SIEM integration, and AI-powered analysis
- OSINT - DNS, WHOIS, subdomains, ports, tech detection, headers, emails - nmap, Shodan, VirusTotal
- Web Scanner - XSS, SQLi, directory bruteforce, SSL/TLS analysis, crawling - Nuclei
go-tuf
theupdateframework
726stars
Go implementation of The Update Framework (TUF)
Symbiont
ThirdKeyAI
58stars
Symbiont lets teams build production agentic applications where every action is governed, every tool is verified, every agent has identity, and every decision leaves an audit trail.
- Policy engine - Fine-grained Cedar authorization for agent actions, tool calls, and resource access
- Tool verification - SchemaPin cryptographic verification of MCP tool schemas before execution
mls-go
thomas-vilte
33stars
MLS Protocol (RFC 9420) implementation in Go. Secure group key exchange with forward secrecy and post-compromise security for E2EE messaging.
Spectre
thomasbuilds
206stars
Radio frequency scanner with recon and offensive capabilities
- RF exposure: A single live dBm figure for the total received RF power across cellular, Wi-Fi, and Bluetooth.
- Cellular: Serving and neighbor cells on 5G, 4G, 3G, and 2G with operator, identifiers, bands, reference measurements, and a timing-advance distance estimate where available, across every active SIM.
learnjavabug
threedr3am
2,680stars
Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。
Awesome-Laws
Threekiii
259stars
一个网络安全相关法律法规、安全政策、国家标准、行业标准知识库。A knowledge base of cybersecurity policies, laws, guidelines, and technical standards.
Awesome-Redteam
Threekiii
4,398stars
一个攻防知识库。A knowledge base for red teaming and offensive security.
dianxing
tianchong-zerotemp
858stars
DianXing - AI-Driven End-to-End Code Security Auditing
tidecloak-gettingstarted
tide-foundation
65stars
TideCloak lets your users hold their own digital authority—no central control, no blind trust.
sbomnix
tiiuae
352stars
SBOM, provenance, dependency graph, and vulnerability tools for Nix.
BreakingLab
TiiZss
38stars
Bash script to manage insecure web apps using docker and hosts aliases for pentest practice
- Modular Architecture: Clean separation of code (breakinglab.sh), configuration (config/), and libraries (lib/).
- GitHub Import: Import Docker projects directly from GitHub URLs with Auto-Sanitization and conflict resolution.