Security · GitHub

🕵️‍♂️ (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a single Email/Username. Analyzes 2720+ actively maintained scan vectors (210+ email / 2510+ username) for security research, investigations, and digital footprinting.

• 🔎 Deep Email & Username OSINT: Look up email registrations and perform advanced username profiling across 2710+ platforms.
• 👤 Rich Metadata Scraping: Scrapes avatars, bio descriptions, follower counts, UID numbers, seller statuses, and account attributes.

Immutable.Friendly.Secure — Reliable embedded Linux for any device

Fully local, private and cross platform Speech-to-Text with LLM Post-processing

• Privacy First: All processing happens locally on your device. No data ever leaves your computer.
• No Telemetry: Zero tracking, zero analytics. Your data stays yours, always.

A curated list of resources dedicated to reinforcement learning applied to cyber security.

A research platform to develop automated security policies using quantitative methods, e.g., optimal control, computational game theory, reinforcement learning, optimization, evolutionary methods, and causal inference.

OSINT tool for WhatsApp that allows you to obtain profile pictures, verify Business accounts, check status and user information, analyze linked devices, review privacy settings, and access complete data using the RapidAPI WhatsApp OSINT API. Supports 6 endpoints.

• Retrieve WhatsApp profile photos via phone number
• Verify WhatsApp Business accounts

Firefox extension to automatically open websites in a container

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

• SBOM generation across many ecosystems (npm, PyPI, Maven, Gradle, Go, Cargo, RubyGems, Composer, NuGet, Hex, Dart, pnpm, Poetry, yarn and more) with owned per-ecosystem lockfile parsers.
• Vulnerability detection from Synapse's own advisory store as the primary source, matched alongside a live advisory API, cross-correlated and de-duplicated; the store ingests OSV, GHSA, CSAF and OVAL for detection independence.

A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.

C# based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can later be weaponized during Red Team Operations to evade EDR's.

404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目

Fast, private, modern sandbox designed for desktop Linux

Voice dictation menu-bar app for macOS. Press a hotkey, speak, transcript appears at the cursor. Whisper runs locally via WhisperKit on Apple Silicon — no audio, text, or telemetry leaves your Mac. MIT, Swift.

LeanType is an Open-source keyboard, fork of HeliBoard with additional features and customisation

Active Directory Auditing and Enumeration

Multiplatform app for Android and Desktop for removing tracking parameters from shared URLs