1,452 repositories starred since Jul 2019. Mostly web and app development, and lately AI and language models.

Open-source intelligence for the global theater. Track everything from the corporate/private jets of the wealthy, and spy satellites, to seismic events in one unified interface. Hook an AI agent up to have it parse through data and find previously unseen correlations. The knowledge is available to all but rarely aggregated in the open, until now.

A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

🏴‍☠️ Find dead-links (broken links)

Laravel Security Tool

Free Windows, Mac and Linux cleaner, scanner, and more.

Agent skill that audits vibe-coded apps for common security vulnerabilities introduced by AI coding assistants

Audits codebases for security vulnerabilities common in Vibe Coded projects.

⚡️A native, local-first alternative to Logitech Options+, written in Rust 🦀 — remap buttons, DPI, and SmartShift over HID++. No account, no telemetry.

A production-grade, autonomous, AI-powered penetration testing and security automation platform.

Pentest Copilot is an AI-powered browser based ethical hacking assistant tool designed to streamline pentesting workflows.

AI-powered bug bounty hunting toolkit that works with or without subscription.

Linux Patch Management & Automation Platform

Cross-platform backup tool for Windows, macOS & Linux with fast, incremental backups, client-side end-to-end encryption, compression and data deduplication. CLI and GUI included.

Find secrets with Gitleaks 🔑

FHEVM, a full-stack framework for integrating Fully Homomorphic Encryption (FHE) with blockchain applications

Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

Daemon to ban hosts that cause multiple authentication errors

🚀 An open and lightweight modification to Windows, designed to optimize performance, privacy and usability.

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

🕵️‍♂️ All-in-one OSINT tool for analysing any website

Best hands-on lab for learning the fundamentals of cybersecurity and penetration testing workflows also packaged as Docker containers for fast, safe setup.

一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

Uscrapper Vanta: Dive deeper into the web with this powerful open-source tool. Extract valuable insights with ease and efficiency, from both surface and deep web sources. Empower your data mining and analysis with Vanta's advanced capabilities. Fast, reliable, and user-friendly, Uscrapper Vanta is the ultimate choice for researchers and analysts.

A Cross-chain Protocol with Security Scoring and Decentralized Reimbursements for Building Secure dApps and Blockchains

Hunt down social media accounts by username across social networks

The LAZY script will make your life easier, and of course faster.

An HTTP toolkit for security research.

An OOB interaction gathering server and client library

All about bug bounty (bypasses, payloads, and etc)

Open source vulnerability DB and triage service.

An all-in-one hacking tool to remotely take over Android devices.

Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.

Real-world infosec wordlists, updated regularly

Simple Encryption in PHP.

A tool for reverse engineering Android apk files

Android Reverse-Engineering Workbench for VS Code

Reversense (Dexcalibur2) is a fully rewriting and rethinking of Dexcalibur. Reversense is a binary intelligence platform that automates the reverse engineering of mobile and embedded applications.

Quickly analyze and reverse engineer Android packages

Android Security Suite for in-depth reconnaissance and static bytecode analysis based on Ghera benchmarks.

Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname

Bitcoin Core integration/staging tree

An automated phishing tool with 30+ templates. This Tool is made for educational purpose only ! Author will not be responsible for any misuse of this toolkit !

Introducing "URL Making Technology" to the world for the very FIRST TIME. Give a Mask to Phishing URL like a PRO.. A MUST have tool for Phishing.

Projects for security students

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Ha3Mrx Pentesting and Security Hacking