diff --git a/.env.example b/.env.example index 8a487c9..6ae207c 100644 --- a/.env.example +++ b/.env.example @@ -1,7 +1,7 @@ -# GitHub personal access token (needs public_repo scope) -GITHUB_TOKEN=ghp_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx +# GitHub token with read access to public repositories +GITHUB_TOKEN=replace-with-your-github-token # OpenAI-compatible API endpoint (LiteLLM proxy, OpenAI, etc.) LLM_API_BASE=http://localhost:4000/v1 -LLM_API_KEY=sk-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx +LLM_API_KEY=replace-with-your-llm-api-key LLM_MODEL=gpt-4o-mini diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml new file mode 100644 index 0000000..ddef117 --- /dev/null +++ b/.github/workflows/ci.yml @@ -0,0 +1,59 @@ +name: CI + +on: + pull_request: + push: + branches-ignore: [main] + +permissions: + contents: read + +jobs: + test: + runs-on: ubuntu-latest + timeout-minutes: 20 + env: + HUGO_BIN: hugo + + steps: + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 + + - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6 + with: + go-version-file: go.mod + cache: true + cache-dependency-path: go.sum + + - name: Install Hugo + uses: peaceiris/actions-hugo@2752ce1d29631191ea3f27c23495fa06139a5b78 # v3 + with: + hugo-version: "0.164.0" + extended: true + + - name: Test + run: go test ./... + + - name: Vet + run: go vet ./... + + - name: Build CLI + run: go build -o hackyfeed ./cmd/hackyfeed/ + + - name: Restore checked-in seed + env: + HACKYFEED_DB: ${{ runner.temp }}/hackyfeed-ci.db + run: ./hackyfeed catalog-import data/catalog.jsonl + + - name: Generate site and public catalog + env: + HACKYFEED_DB: ${{ runner.temp }}/hackyfeed-ci.db + run: ./hackyfeed generate + + - name: Production Hugo build + run: hugo --config hugo.toml,hackyfeed.generated.toml --minify + working-directory: site + + - name: Verify RSS artifact + run: | + test -s site/public/feed.xml + test -s site/public/catalog.manifest.json diff --git a/.github/workflows/daily-update.yml b/.github/workflows/daily-update.yml index 3684436..b27f4e2 100644 --- a/.github/workflows/daily-update.yml +++ b/.github/workflows/daily-update.yml @@ -1,9 +1,12 @@ -name: Daily Update & Deploy +name: Update & Deploy on: + push: + branches: [main] schedule: - - cron: '0 14 * * *' # 8am MT / 2pm UTC daily - workflow_dispatch: # manual trigger + # Changing this schedule also re-enables it after GitHub inactivity pauses. + - cron: "7 14 * * *" + workflow_dispatch: permissions: contents: read @@ -17,59 +20,95 @@ concurrency: jobs: update-and-deploy: runs-on: ubuntu-latest + timeout-minutes: 120 environment: name: github-pages url: ${{ steps.deployment.outputs.page_url }} + steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 - - name: Restore DB cache - uses: actions/cache@v4 + - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6 with: - path: hackyfeed.db - key: hackyfeed-db-${{ github.run_id }} - restore-keys: | - hackyfeed-db- + go-version-file: go.mod + cache: true + cache-dependency-path: go.sum - - uses: actions/setup-go@v5 + - name: Install Hugo + uses: peaceiris/actions-hugo@2752ce1d29631191ea3f27c23495fa06139a5b78 # v3 with: - go-version: '1.22' + hugo-version: "0.164.0" + extended: true + + - name: Restore working database cache + id: database-cache + uses: actions/cache/restore@caa296126883cff596d87d8935842f9db880ef25 # v5 + with: + path: hackyfeed.db + key: hackyfeed-db-${{ runner.os }}-${{ github.run_id }}-${{ github.run_attempt }} + restore-keys: | + hackyfeed-db-${{ runner.os }}- - name: Build CLI run: go build -o hackyfeed ./cmd/hackyfeed/ - - name: Clean stale content - run: rm -f site/content/tools/*.md + - name: Run tests + env: + HUGO_BIN: hugo + run: go test ./... + + - name: Restore durable catalog state + run: ./hackyfeed restore --allow-empty - - name: Fetch repos + - name: Remove legacy cached README bodies + run: ./hackyfeed purge-readmes + + - name: Check database + run: ./hackyfeed doctor + + # A push safely republishes known state. Scheduled and manual runs also + # perform the potentially expensive discovery and summarization update. + - name: Fetch repositories + if: github.event_name != 'push' env: - GITHUB_TOKEN: ${{ secrets.GH_PAT }} + GITHUB_TOKEN: ${{ secrets.GH_PAT || github.token }} run: ./hackyfeed fetch - - name: Summarize new repos + - name: Summarize new repositories + if: github.event_name != 'push' env: LLM_API_BASE: ${{ secrets.LLM_API_BASE }} LLM_API_KEY: ${{ secrets.LLM_API_KEY }} - LLM_MODEL: gpt-4o-mini + LLM_MODEL: ${{ vars.LLM_MODEL || 'gpt-4o-mini' }} run: ./hackyfeed summarize - - name: Generate Hugo content + - name: Generate site and public catalog run: ./hackyfeed generate - - uses: peaceiris/actions-hugo@v3 - with: - hugo-version: 'latest' - - name: Build Hugo site - run: hugo --minify + run: hugo --config hugo.toml,hackyfeed.generated.toml --minify working-directory: site - - uses: actions/configure-pages@v5 + - name: Verify RSS artifact + run: | + test -s site/public/feed.xml + test -s site/public/catalog.manifest.json - - uses: actions/upload-pages-artifact@v4 + - uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6 + + - uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5 with: path: site/public - name: Deploy to GitHub Pages id: deployment - uses: actions/deploy-pages@v4 + uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5 + + # Cache is only a resumable work area. The published catalog and checked-in + # seed are the durable sources of truth. Save even when a later step fails. + - name: Save working database cache + if: always() + uses: actions/cache/save@caa296126883cff596d87d8935842f9db880ef25 # v5 + with: + path: hackyfeed.db + key: hackyfeed-db-${{ runner.os }}-${{ github.run_id }}-${{ github.run_attempt }} diff --git a/.gitignore b/.gitignore index 26ebadb..beeaa9f 100644 --- a/.gitignore +++ b/.gitignore @@ -6,6 +6,7 @@ site/public/ site/resources/ site/.hugo_build.lock +site/hackyfeed.generated.toml # Go binary /hackyfeed @@ -19,3 +20,5 @@ Thumbs.db .vscode/ *.swp site/content/tools/ +site/static/catalog.jsonl +site/static/catalog.manifest.json diff --git a/README.md b/README.md index c218945..140fa34 100644 --- a/README.md +++ b/README.md @@ -1,159 +1,261 @@ # HackyFeed -A cybersecurity tools aggregator inspired by [KitPloit](https://www.kitploit.com). Automatically discovers security tools from GitHub, generates AI summaries, and publishes a static site via Hugo + GitHub Pages. +[![CI](https://github.com/rainmana/hackyfeed/actions/workflows/ci.yml/badge.svg)](https://github.com/rainmana/hackyfeed/actions/workflows/ci.yml) +[![Update & Deploy](https://github.com/rainmana/hackyfeed/actions/workflows/daily-update.yml/badge.svg)](https://github.com/rainmana/hackyfeed/actions/workflows/daily-update.yml) +[RSS feed](https://rainmana.github.io/hackyfeed/feed.xml) -**Fork this repo and edit `hackyfeed.toml` to create your own tool aggregator for any topic.** +HackyFeed is a self-updating GitHub Pages catalog for discovering cybersecurity tools. It searches GitHub, summarizes new repositories through any OpenAI-compatible API, renders a Hugo site, and publishes a small, standards-friendly RSS feed. -## How It Works +The repository is also intended to be forked into other focused catalogs, including an LLM tooling feed. -``` -GitHub API ──→ SQLite DB ──→ AI Summaries ──→ Hugo Markdown ──→ GitHub Pages - (topics) (diff) (LiteLLM) (generate) (deploy) +## How it works + +```text +GitHub API ──> SQLite ──> AI summary ──> Hugo pages ──> GitHub Pages + │ │ + └──── public catalog ────────┘ ``` -A single Go CLI tool handles the entire pipeline: +Third-party READMEs are transient input to the summarizer. They are not stored in the catalog and are never copied into the site. Generated pages contain bounded, YAML-quoted metadata only, Hugo's raw HTML renderer remains disabled, and generation stages a complete replacement before changing the current tool collection. -- **`hackyfeed fetch`** — Searches GitHub for repos by topic and parses awesome lists. Upserts into SQLite. -- **`hackyfeed summarize`** — Fetches READMEs and generates summaries via any OpenAI-compatible API. -- **`hackyfeed generate`** — Renders Hugo markdown from the database. -- **`hackyfeed all`** — Runs fetch → summarize → generate in sequence. +The CLI commands are: -## Quick Start +| Command | Purpose | +| --- | --- | +| `hackyfeed fetch` | Discover and update repositories from GitHub topics and awesome lists. | +| `hackyfeed summarize` | Summarize repositories that do not yet have a summary. | +| `hackyfeed generate` | Generate Hugo pages and the public recovery catalog. | +| `hackyfeed all` | Run fetch, summarize, and generate. | +| `hackyfeed restore` | Merge the last published catalog and the checked-in seed into SQLite. Use `--allow-empty` only for a brand-new feed. | +| `hackyfeed doctor` | Run a SQLite integrity check and report the repository count. | +| `hackyfeed catalog-import [path]` | Import a catalog JSONL file. | +| `hackyfeed catalog-export [path]` | Export summarized public state as JSONL. | +| `hackyfeed reset` | Clear summaries so they can be regenerated. | +| `hackyfeed purge-readmes` | Explicitly remove legacy stored README bodies from an older database. | -### Prerequisites +## Quick start -- Go 1.22+ -- Hugo (extended) -- A GitHub personal access token -- An OpenAI-compatible API endpoint (LiteLLM, OpenAI, Ollama, etc.) +Requirements: -### Setup +- Go 1.25.6 or the compatible version declared in `go.mod` +- Hugo Extended 0.164.0 +- A GitHub token for higher API limits +- An OpenAI-compatible endpoint for summarization + +Build and restore the known catalog: ```bash -git clone https://github.com/rainmana/hackyfeed.git -cd hackyfeed -cp .env.example .env -# Edit .env with your tokens +go build -o hackyfeed ./cmd/hackyfeed/ +./hackyfeed restore +./hackyfeed generate +hugo server --source site --config hugo.toml,hackyfeed.generated.toml ``` -### Build & Run Locally +To perform a full update, set the environment variables described below and run: ```bash -go build -o hackyfeed ./cmd/hackyfeed/ -export $(grep -v '^#' .env | xargs) ./hackyfeed all -cd site && hugo server ``` -### Run Tests +On Windows, the built executable is `hackyfeed.exe`; set environment variables in PowerShell rather than using the Unix-style `.env` loading pattern. -```bash -go test ./... -v -``` +## RSS -## Customization +The feed is published at [`/feed.xml`](https://rainmana.github.io/hackyfeed/feed.xml) and advertised from every page. -The entire pipeline is driven by `hackyfeed.toml`. Fork this repo and edit it to aggregate anything: +Its contract is intentionally narrow: -### Change Topics +- only tool pages are included; +- newest discoveries appear first with full UTC timestamps; +- links and GUIDs are absolute and stable; +- descriptions contain only bounded plain-text AI summaries; +- the feed is limited to the newest 50 tools; +- About, Disclaimer, README content, scripts, and relative links are excluded. -```toml -[fetch] -topics = [ - "machine-learning", - "deep-learning", - "llm", - "transformer", -] -min_stars = 50 -``` +The Hugo integration test builds a deliberately hostile sample with `--minify`, parses the resulting feed, and enforces that contract. -### Add Your Own Awesome Lists +## Durable state and recovery + +SQLite is the fast working database, not the only copy of the catalog. + +- `data/catalog.jsonl` is a checked-in recovery seed containing 1,070 historical summaries, including 74 entries recovered from the last successful live deployment. +- `data/catalog.manifest.json` records the schema version, record count, and SHA-256 digest; restore rejects mismatched published state. +- Every successful generation publishes a refreshed catalog and matching manifest with the site. +- A clean run restores the newest published catalog first, then fills any gaps from the seed. +- GitHub Actions cache preserves in-progress work, including summaries completed before a later failure, but it is treated as disposable. + +Catalogs contain bounded public repository metadata and AI summaries only. Raw README bodies and credentials are excluded. Legacy cached README bodies are removed explicitly with `purge-readmes` so simply opening a local database remains non-destructive. + +## Configuration and reuse + +Discovery, categorization, and summarization are configured in `hackyfeed.toml`. The file is required, unknown keys fail validation, and an explicit `[categories.rules]` table replaces the cybersecurity defaults instead of merging with them. + +For an LLM tooling catalog, a starting point could be: ```toml [fetch] -awesome_lists = [ - "https://raw.githubusercontent.com/yourname/awesome-list/main/README.md", +topics = [ + "llm", + "large-language-models", + "ai-agents", + "mcp", + "rag", + "prompt-engineering", ] -``` +min_stars = 10 -### Define Custom Categories +[summarize] +system_prompt = """You catalog LLM developer tools. Given a repository README, write a concise technical summary covering the tool's purpose, intended workflow, and distinguishing capability. Respond with summary text only.""" -```toml [categories] -default_category = "ai-tools" +default_category = "llm-tools" [categories.rules] -nlp = ["nlp", "natural-language", "text-processing"] -vision = ["computer-vision", "image", "object-detection"] -llm = ["llm", "large-language-model", "gpt", "transformer"] +agents = ["agent", "multi-agent", "orchestration"] +mcp = ["mcp", "model-context-protocol"] +rag = ["rag", "retrieval", "vector-database"] +evaluation = ["eval", "benchmark", "observability"] ``` -### Customize AI Summaries - -```toml -[summarize] -system_prompt = """You are an AI/ML tools cataloger. Given a README, produce JSON with: -- "summary": 2-3 sentence description for a technical audience. -- "install": Primary installation method. -Respond ONLY with valid JSON.""" -max_readme_chars = 4000 -``` +When creating a new feed, update: -### Site Branding +1. `[site]` in `hackyfeed.toml`. +2. Topic, category, and prompt rules for the new domain. +3. The Curated Sources, About, and Disclaimer pages under `site/content/`. +4. GitHub Pages settings, repository secrets, and the optional `LLM_MODEL` Actions variable. +5. The recovery seed and manifest: export the new catalog instead of reusing HackyFeed's cybersecurity data. -```toml -[site] -title = "ML Feed" -description = "Discover the latest machine learning tools from GitHub." -author = "yourname" -``` +`hackyfeed generate` writes `site/hackyfeed.generated.toml`, making `[site]` the authoritative branding and canonical-URL configuration. The checked-in `site/hugo.toml` contains structural Hugo settings and deliberately generic fallback identity only. -Then update `site/hugo.toml` to match your site title/URL. +See [the template guide](docs/template-guide.md) for the extraction checklist and the design boundaries that should remain intact. -## Environment Variables +## Environment variables | Variable | Description | Required | -|----------|-------------|----------| -| `GITHUB_TOKEN` | GitHub PAT with `public_repo` scope | Recommended | -| `LLM_API_BASE` | OpenAI-compatible API base URL | For summarize | -| `LLM_API_KEY` | API key for the LLM endpoint | For summarize | -| `LLM_MODEL` | Model name (default: `gpt-4o-mini`) | No | -| `HACKYFEED_DB` | SQLite DB path (default: `hackyfeed.db`) | No | -| `HACKYFEED_SITE` | Hugo site directory (default: `site`) | No | -| `HACKYFEED_CONFIG` | Config file path (default: `hackyfeed.toml`) | No | +| --- | --- | --- | +| `GITHUB_TOKEN` | GitHub token used for discovery. | Recommended | +| `LLM_API_BASE` | Base URL of an OpenAI-compatible API. | For summarization | +| `LLM_API_KEY` | API key for the summarization endpoint. | Endpoint-dependent | +| `LLM_MODEL` | Model name; defaults to `gpt-4o-mini`. | No | +| `HACKYFEED_DB` | SQLite path; defaults to `hackyfeed.db`. | No | +| `HACKYFEED_SITE` | Hugo site directory; defaults to `site`. | No | +| `HACKYFEED_CONFIG` | TOML configuration path; defaults to `hackyfeed.toml`. | No | +| `HACKYFEED_CATALOG` | Recovery seed path; defaults to `data/catalog.jsonl`. | No | ## GitHub Actions -The included workflow runs daily at 8am MT (2pm UTC). Set these repo secrets: +The deployment workflow behaves differently by trigger to make updates predictable: + +- a push to `main` tests and republishes known catalog state without calling the LLM; +- scheduled and manual runs also fetch and summarize new repositories; +- Hugo is pinned, Go follows `go.mod`, and every reusable action is pinned to a full commit SHA; +- the database cache is explicitly saved even if a later build or deployment step fails. + +Configure these repository secrets: + +- `LLM_API_BASE` +- `LLM_API_KEY` +- `GH_PAT` (optional; the workflow falls back to `github.token`) + +Set the repository's Pages source to **GitHub Actions**. Public repositories can have scheduled workflows paused after prolonged inactivity; a push still runs the deployment workflow. + +## Changelog + +### 2026-08-02 — Recovery, security, and reliability overhaul + +This release repairs the original end-to-end pipeline and replaces the fragile generated-state model that caused repeated GitHub Pages failures. + +#### Safe content generation -- `GH_PAT` — GitHub personal access token -- `LLM_API_BASE` — Your LLM API endpoint -- `LLM_API_KEY` — Your LLM API key +- Removed third-party README bodies from the persistent repository model, public catalog, generated pages, and RSS output. +- Restricted published content to bounded repository metadata and bounded AI summaries. +- Kept Hugo's unsafe raw HTML renderer disabled instead of weakening minification to accommodate hostile upstream content. +- Encoded generated front matter defensively so arbitrary repository text cannot alter page structure or trigger local security scanners. +- Changed tool generation to stage a complete replacement before swapping it into place, preventing partial sites after an interrupted run. +- Added stable SHA-256-based source filenames and deterministic URL-slug collision handling while preserving existing non-conflicting URLs. +- Added full RFC 3339 UTC timestamps and token-aware category matching. +- Moved generated branding and canonical URL settings behind the required `[site]` configuration. -In repo Settings → Pages, set source to **GitHub Actions**. +#### Durable catalog and recovery -## Project Structure +- Added deterministic JSONL catalog import and export with transactional merging. +- Added a versioned manifest containing the record count and SHA-256 digest; corrupt or mismatched published catalogs now fail closed. +- Added atomic catalog replacement with Windows-safe backup and rollback behavior. +- Recovered 74 entries that existed only on the last successful live deployment. +- Checked in a recovery seed containing 1,070 summarized repositories so a clean runner can reproduce the complete site without an old Actions cache. +- Preserved newer local state during catalog merges and normalized repository identities case-insensitively. +- Added explicit legacy README purging without making ordinary database opening destructive. +#### Discovery and summarization + +- Changed GitHub discovery ordering to surface recently updated qualifying repositories instead of repeatedly scanning only the most-starred results. +- Canonicalized awesome-list GitHub URLs, bounded response sizes, and made empty or unusable source responses fail visibly. +- Aggregated source failures while allowing useful sources to complete. +- Prevented lower-quality awesome-list metadata from overwriting richer GitHub API metadata. +- Distinguished definitive README absence from transient GitHub failures so temporary outages remain retryable. +- Added bounded, rune-safe README and LLM response handling. +- Added request, response, malformed endpoint, protocol, and persistence error handling throughout the summarizer. +- Added a service-failure circuit breaker that preserves completed work without allowing a few repository-specific failures to starve the remaining queue. + +#### RSS and Hugo site + +- Replaced the broken default RSS output with a custom feed containing only the newest 50 tool entries. +- Added stable absolute permalinks and GUIDs, complete publication dates, categories, and safe plain-text descriptions. +- Excluded static pages, raw README content, scripts, and relative links from the feed. +- Advertised the feed from every rendered page. +- Filtered the home page and taxonomies to use the explicit generated tool model. +- Renamed the awesome-list-facing site section to the domain-neutral **Curated Sources** for reuse by other catalogs. + +#### CLI, configuration, and automation + +- Added `restore`, `doctor`, `catalog-import`, `catalog-export`, and `purge-readmes` commands. +- Made configuration files required, rejected unknown TOML keys, and added semantic validation for URLs, limits, categories, and summarization settings. +- Made explicit category-rule tables replace defaults, which prevents domain templates from accidentally inheriting cybersecurity matches. +- Added a dedicated CI workflow for tests, vetting, catalog restoration, generation, and a production Hugo build. +- Rebuilt the Pages workflow so pushes safely republish known state while scheduled and manual runs perform discovery and summarization. +- Pinned Hugo and every reusable GitHub Action to explicit versions or full commit SHAs. +- Replaced secret-shaped example credentials with inert placeholders that do not trigger push-protection scanners. +- Made the SQLite cache resumable but non-authoritative, with public and checked-in catalogs as durable state. +- Added Pages artifact checks and preserved the database cache even when a later deployment step fails. + +#### Testing, analysis, and reuse + +- Added coverage for configuration, catalog integrity, network failures, retry behavior, queue progress, hostile metadata, atomic generation, slug collisions, and recovery orchestration. +- Added a real Hugo integration test that builds hostile sample content with minification and validates the resulting RSS feed. +- Verified every recovered route and the complete 1,070-page production build. +- Indexed and queried the final Go codebase with Joern to confirm that fetched README content has no dataflow path into generated page writes. +- Added a detailed [recovery journal](docs/recovery-journal.md) for the future article and a [template extraction guide](docs/template-guide.md) for building feeds in other domains. + +## Validation + +Run the full suite, including the real Hugo integration test: + +```bash +HUGO_BIN=hugo go test ./... +go vet ./... +hugo --source site --config hugo.toml,hackyfeed.generated.toml --minify ``` -├── cmd/hackyfeed/ # CLI entry point -├── internal/ -│ ├── config/ # TOML config loader -│ ├── db/ # SQLite schema & queries -│ ├── fetch/ # GitHub API + awesome list parser -│ ├── summarize/ # LLM-powered README summarization -│ └── generate/ # Hugo markdown generator -├── site/ # Hugo site -│ ├── content/ # Generated tool pages -│ └── themes/ # Terminal hacker theme (dark/light) -├── hackyfeed.toml # ← Edit this to customize everything -├── .github/workflows/ # Daily automation -└── .env.example # Environment variable template + +CI also imports the checked-in seed, generates all tool pages, and performs a production Hugo build. + +## Project structure + +```text +cmd/hackyfeed/ CLI and recovery orchestration +internal/config/ TOML configuration +internal/db/ SQLite and public catalog import/export +internal/fetch/ GitHub topics and awesome-list discovery +internal/summarize/ README-to-summary pipeline +internal/generate/ Safe Hugo page generation and RSS integration tests +data/ Checked-in recovery seed +site/ Hugo site and custom RSS template +docs/ Recovery journal and template notes +.github/workflows/ CI and Pages deployment ``` ## Disclaimer -HackyFeed is an aggregator — inclusion is not endorsement. All tools must be used ethically and legally. Nothing on this site represents the views of the maintainer's employer. See the [full disclaimer](https://rainmana.github.io/hackyfeed/pages/disclaimer/). +HackyFeed is an automated aggregator; inclusion is not endorsement. Use listed tools only with authorization and in accordance with applicable law. See the [full disclaimer](https://rainmana.github.io/hackyfeed/pages/disclaimer/). ## License diff --git a/cmd/hackyfeed/main.go b/cmd/hackyfeed/main.go index 90cba57..b986c36 100644 --- a/cmd/hackyfeed/main.go +++ b/cmd/hackyfeed/main.go @@ -1,9 +1,18 @@ package main import ( + "bytes" + "database/sql" + "encoding/json" + "errors" "fmt" + "io" "log" + "net/http" "os" + "path/filepath" + "strings" + "time" "github.com/rainmana/hackyfeed/internal/config" "github.com/rainmana/hackyfeed/internal/db" @@ -12,10 +21,12 @@ import ( "github.com/rainmana/hackyfeed/internal/summarize" ) +var errPublishedCatalogNotFound = errors.New("published catalog manifest not found") + func main() { if len(os.Args) < 2 { fmt.Println("Usage: hackyfeed ") - fmt.Println("Commands: fetch, summarize, generate, all") + fmt.Println("Commands: fetch, summarize, generate, all, restore, catalog-import, catalog-export, doctor, reset, purge-readmes") os.Exit(1) } @@ -27,6 +38,7 @@ func main() { dbPath := envOr("HACKYFEED_DB", "hackyfeed.db") siteDir := envOr("HACKYFEED_SITE", "site") + catalogPath := envOr("HACKYFEED_CATALOG", filepath.Join("data", "catalog.jsonl")) database, err := db.Open(dbPath) if err != nil { @@ -36,6 +48,9 @@ func main() { switch os.Args[1] { case "fetch": + if err := restoreCatalogIfEmpty(database, cfg.Site.BaseURL, catalogPath); err != nil { + log.Fatalf("restore: %v", err) + } token := os.Getenv("GITHUB_TOKEN") if token == "" { log.Println("[warn] GITHUB_TOKEN not set, API rate limits will be low") @@ -45,6 +60,9 @@ func main() { } case "summarize": + if err := restoreCatalogIfEmpty(database, cfg.Site.BaseURL, catalogPath); err != nil { + log.Fatalf("restore: %v", err) + } llm := summarize.LLMConfig{ APIBase: envOr("LLM_API_BASE", "http://localhost:4000/v1"), APIKey: os.Getenv("LLM_API_KEY"), @@ -55,11 +73,20 @@ func main() { } case "generate": - if err := generate.Run(database, siteDir, &cfg.Categories); err != nil { + if err := restoreCatalogIfEmpty(database, cfg.Site.BaseURL, catalogPath); err != nil { + log.Fatalf("restore: %v", err) + } + if err := generate.Run(database, siteDir, cfg); err != nil { log.Fatalf("generate: %v", err) } + if err := exportCatalog(database, filepath.Join(siteDir, "static", "catalog.jsonl")); err != nil { + log.Fatalf("catalog export: %v", err) + } case "all": + if err := restoreCatalogIfEmpty(database, cfg.Site.BaseURL, catalogPath); err != nil { + log.Fatalf("restore: %v", err) + } token := os.Getenv("GITHUB_TOKEN") log.Println("=== fetch ===") if err := fetch.Run(database, token, &cfg.Fetch); err != nil { @@ -75,11 +102,60 @@ func main() { log.Fatalf("summarize: %v", err) } log.Println("=== generate ===") - if err := generate.Run(database, siteDir, &cfg.Categories); err != nil { + if err := generate.Run(database, siteDir, cfg); err != nil { log.Fatalf("generate: %v", err) } + if err := exportCatalog(database, filepath.Join(siteDir, "static", "catalog.jsonl")); err != nil { + log.Fatalf("catalog export: %v", err) + } log.Println("=== done ===") + case "restore": + allowEmpty, err := parseRestoreArgs(os.Args[2:]) + if err != nil { + log.Fatalf("restore: %v", err) + } + if err := restoreCatalogState(database, cfg.Site.BaseURL, catalogPath, true); err != nil { + log.Fatalf("restore: %v", err) + } + count, err := db.SummarizedCount(database) + if err != nil { + log.Fatalf("restore: %v", err) + } + if count == 0 && !allowEmpty { + log.Fatalf("restore: no catalog state was available; use --allow-empty only when bootstrapping a new feed") + } + + case "catalog-import": + path := catalogPath + if len(os.Args) > 2 { + path = os.Args[2] + } + count, err := importCatalogFile(database, path) + if err != nil { + log.Fatalf("catalog import: %v", err) + } + log.Printf("Imported %d catalog records from %s", count, path) + + case "catalog-export": + path := catalogPath + if len(os.Args) > 2 { + path = os.Args[2] + } + if err := exportCatalog(database, path); err != nil { + log.Fatalf("catalog export: %v", err) + } + + case "doctor": + if err := db.IntegrityCheck(database); err != nil { + log.Fatalf("database integrity: %v", err) + } + count, err := db.Count(database) + if err != nil { + log.Fatalf("database count: %v", err) + } + log.Printf("Database OK (%d repositories)", count) + case "reset": count, err := db.ResetSummaries(database) if err != nil { @@ -87,15 +163,263 @@ func main() { } log.Printf("Reset %d repos — they will be re-summarized on next run", count) + case "purge-readmes": + count, err := db.PurgeReadmes(database) + if err != nil { + log.Fatalf("purge readmes: %v", err) + } + log.Printf("Purged legacy README bodies from %d repositories", count) + default: fmt.Printf("Unknown command: %s\n", os.Args[1]) os.Exit(1) } } +func parseRestoreArgs(arguments []string) (bool, error) { + if len(arguments) == 0 { + return false, nil + } + if len(arguments) == 1 && arguments[0] == "--allow-empty" { + return true, nil + } + return false, fmt.Errorf("unknown restore options %q", arguments) +} + func envOr(key, fallback string) string { if v := os.Getenv(key); v != "" { return v } return fallback } + +func restoreCatalogIfEmpty(database *sql.DB, baseURL, localPath string) error { + count, err := db.Count(database) + if err != nil { + return err + } + if count > 0 { + log.Printf("[restore] database already contains %d repositories; use the restore command to merge recovery state", count) + return nil + } + return restoreCatalogState(database, baseURL, localPath, false) +} + +func restoreCatalogState(database *sql.DB, baseURL, localPath string, strictRemote bool) error { + before, err := db.SummarizedCount(database) + if err != nil { + return err + } + + // A clean or explicitly refreshed database also merges the last catalog + // published with the site. Import it before the fallback seed so the newest + // published summaries win on a clean restore; existing DB state wins both. + if before == 0 || strictRemote { + remoteURL := strings.TrimRight(baseURL, "/") + "/catalog.jsonl" + remoteCount, remoteErr := importCatalogURL(database, remoteURL) + if remoteErr != nil { + if strictRemote && !errors.Is(remoteErr, errPublishedCatalogNotFound) { + return fmt.Errorf("published catalog: %w", remoteErr) + } + log.Printf("[restore] published catalog unavailable: %v", remoteErr) + } else { + log.Printf("[restore] merged %d records from %s", remoteCount, remoteURL) + } + } + + localCount, err := importCatalogFile(database, localPath) + if err != nil && !os.IsNotExist(err) { + return fmt.Errorf("local catalog: %w", err) + } + if err == nil { + log.Printf("[restore] merged %d records from %s", localCount, localPath) + } + + after, err := db.SummarizedCount(database) + if err != nil { + return err + } + if after == 0 { + log.Printf("[restore] no prior catalog found; starting with an empty database") + } else { + log.Printf("[restore] %d summarized repositories available", after) + } + return nil +} + +func importCatalogFile(database *sql.DB, path string) (int, error) { + body, err := os.ReadFile(path) + if err != nil { + return 0, err + } + manifestBody, manifestErr := os.ReadFile(catalogManifestPath(path)) + if manifestErr == nil { + manifest, err := decodeCatalogManifest(manifestBody) + if err != nil { + return 0, err + } + if err := db.VerifyCatalogManifest(body, manifest); err != nil { + return 0, err + } + } else if !os.IsNotExist(manifestErr) { + return 0, manifestErr + } + return db.ImportCatalog(database, bytes.NewReader(body)) +} + +func importCatalogURL(database *sql.DB, catalogURL string) (int, error) { + const maxCatalogBytes = 50 * 1024 * 1024 + const maxManifestBytes = 1024 * 1024 + client := &http.Client{Timeout: 30 * time.Second} + manifestBody, err := downloadCatalogFile(client, catalogManifestPath(catalogURL), maxManifestBytes) + if err != nil { + return 0, err + } + manifest, err := decodeCatalogManifest(manifestBody) + if err != nil { + return 0, err + } + body, err := downloadCatalogFile(client, catalogURL, maxCatalogBytes) + if err != nil { + if errors.Is(err, errPublishedCatalogNotFound) { + return 0, fmt.Errorf("catalog file is missing despite a published manifest") + } + return 0, err + } + if err := db.VerifyCatalogManifest(body, manifest); err != nil { + return 0, err + } + return db.ImportCatalog(database, bytes.NewReader(body)) +} + +func downloadCatalogFile(client *http.Client, location string, maxBytes int64) ([]byte, error) { + response, err := client.Get(location) + if err != nil { + return nil, err + } + defer response.Body.Close() + if response.StatusCode == http.StatusNotFound { + return nil, fmt.Errorf("%w: %s", errPublishedCatalogNotFound, location) + } + if response.StatusCode != http.StatusOK { + return nil, fmt.Errorf("%s returned HTTP %d", location, response.StatusCode) + } + body, err := io.ReadAll(io.LimitReader(response.Body, maxBytes+1)) + if err != nil { + return nil, err + } + if int64(len(body)) > maxBytes { + return nil, fmt.Errorf("%s exceeds %d bytes", location, maxBytes) + } + return body, nil +} + +func decodeCatalogManifest(data []byte) (db.CatalogManifest, error) { + var manifest db.CatalogManifest + if err := json.Unmarshal(data, &manifest); err != nil { + return manifest, fmt.Errorf("decode catalog manifest: %w", err) + } + return manifest, nil +} + +func catalogManifestPath(catalogPath string) string { + extension := filepath.Ext(catalogPath) + if extension == "" { + return catalogPath + ".manifest.json" + } + return strings.TrimSuffix(catalogPath, extension) + ".manifest.json" +} + +func exportCatalog(database *sql.DB, path string) error { + var output bytes.Buffer + count, err := db.ExportCatalog(database, &output) + if err != nil { + return err + } + if err := os.MkdirAll(filepath.Dir(path), 0755); err != nil { + return err + } + if err := writeFileAtomic(path, output.Bytes(), 0644); err != nil { + return err + } + manifest := db.NewCatalogManifest(output.Bytes(), count) + manifestBytes, err := json.MarshalIndent(manifest, "", " ") + if err != nil { + return err + } + manifestBytes = append(manifestBytes, '\n') + if err := writeFileAtomic(catalogManifestPath(path), manifestBytes, 0644); err != nil { + return err + } + log.Printf("[catalog] exported %d records to %s", count, path) + return nil +} + +func writeFileAtomic(path string, data []byte, mode os.FileMode) (returnErr error) { + directory := filepath.Dir(path) + temporary, err := os.CreateTemp(directory, "."+filepath.Base(path)+"-*") + if err != nil { + return err + } + temporaryPath := temporary.Name() + defer func() { + temporary.Close() + if removeErr := os.Remove(temporaryPath); removeErr != nil && !os.IsNotExist(removeErr) && returnErr == nil { + returnErr = removeErr + } + }() + + if _, err := temporary.Write(data); err != nil { + return err + } + if err := temporary.Chmod(mode); err != nil { + return err + } + if err := temporary.Sync(); err != nil { + return err + } + if err := temporary.Close(); err != nil { + return err + } + if err := replaceFile(temporaryPath, path); err != nil { + return err + } + return nil +} + +func replaceFile(temporaryPath, targetPath string) error { + if err := os.Rename(temporaryPath, targetPath); err == nil { + return nil + } else if _, statErr := os.Stat(targetPath); os.IsNotExist(statErr) { + return err + } else if statErr != nil { + return statErr + } + + directory := filepath.Dir(targetPath) + backup, err := os.CreateTemp(directory, "."+filepath.Base(targetPath)+"-backup-*") + if err != nil { + return err + } + backupPath := backup.Name() + if err := backup.Close(); err != nil { + os.Remove(backupPath) + return err + } + if err := os.Remove(backupPath); err != nil { + return err + } + if err := os.Rename(targetPath, backupPath); err != nil { + return err + } + if err := os.Rename(temporaryPath, targetPath); err != nil { + if rollbackErr := os.Rename(backupPath, targetPath); rollbackErr != nil { + return fmt.Errorf("replace target: %v; rollback failed: %w", err, rollbackErr) + } + return err + } + if err := os.Remove(backupPath); err != nil { + return fmt.Errorf("remove replaced file backup: %w", err) + } + return nil +} diff --git a/cmd/hackyfeed/main_test.go b/cmd/hackyfeed/main_test.go new file mode 100644 index 0000000..175642b --- /dev/null +++ b/cmd/hackyfeed/main_test.go @@ -0,0 +1,186 @@ +package main + +import ( + "encoding/json" + "net/http" + "net/http/httptest" + "os" + "path/filepath" + "testing" + + "github.com/rainmana/hackyfeed/internal/db" +) + +func TestWriteFileAtomicReplacesExistingFile(t *testing.T) { + path := filepath.Join(t.TempDir(), "catalog.jsonl") + if err := writeFileAtomic(path, []byte("first\n"), 0644); err != nil { + t.Fatal(err) + } + if err := writeFileAtomic(path, []byte("second\n"), 0644); err != nil { + t.Fatal(err) + } + contents, err := os.ReadFile(path) + if err != nil { + t.Fatal(err) + } + if string(contents) != "second\n" { + t.Fatalf("unexpected contents %q", contents) + } +} + +func TestParseRestoreArgsRejectsTyposBeforeRestore(t *testing.T) { + if allowEmpty, err := parseRestoreArgs(nil); err != nil || allowEmpty { + t.Fatalf("unexpected default parse result: allow=%v err=%v", allowEmpty, err) + } + if allowEmpty, err := parseRestoreArgs([]string{"--allow-empty"}); err != nil || !allowEmpty { + t.Fatalf("expected --allow-empty to be accepted: allow=%v err=%v", allowEmpty, err) + } + for _, arguments := range [][]string{{"--typo"}, {"--allow-empty", "extra"}} { + if _, err := parseRestoreArgs(arguments); err == nil { + t.Fatalf("expected %q to be rejected", arguments) + } + } +} + +func TestRestoreCatalogStateRepairsPartiallyPopulatedDatabase(t *testing.T) { + database, err := db.Open(filepath.Join(t.TempDir(), "state.db")) + if err != nil { + t.Fatal(err) + } + defer database.Close() + + if err := db.UpsertRepo(database, &db.Repo{ + FullName: "owner/unsummarized", Owner: "owner", Name: "unsummarized", + HTMLURL: "https://github.com/owner/unsummarized", Source: "github-topic", + }); err != nil { + t.Fatal(err) + } + + catalogPath := filepath.Join(t.TempDir(), "catalog.jsonl") + catalog := []byte("{\"full_name\":\"owner/restored\",\"first_seen\":\"2026-03-21T12:34:56Z\",\"ai_summary\":\"restored summary\"}\n") + if err := os.WriteFile(catalogPath, catalog, 0644); err != nil { + t.Fatal(err) + } + + server := httptest.NewServer(http.NotFoundHandler()) + defer server.Close() + if err := restoreCatalogState(database, server.URL, catalogPath, false); err != nil { + t.Fatal(err) + } + + total, err := db.Count(database) + if err != nil { + t.Fatal(err) + } + summarized, err := db.SummarizedCount(database) + if err != nil { + t.Fatal(err) + } + if total != 2 || summarized != 1 { + t.Fatalf("expected partial state plus restored summary, got total=%d summarized=%d", total, summarized) + } +} + +func TestAutomaticRestoreDoesNotUndoReset(t *testing.T) { + database, err := db.Open(filepath.Join(t.TempDir(), "state.db")) + if err != nil { + t.Fatal(err) + } + defer database.Close() + if err := db.UpsertRepo(database, &db.Repo{ + FullName: "owner/tool", Owner: "owner", Name: "tool", HTMLURL: "https://github.com/owner/tool", + }); err != nil { + t.Fatal(err) + } + rows, err := db.Unsummarized(database) + if err != nil { + t.Fatal(err) + } + if err := db.SetSummary(database, rows[0].ID, "summary to reset"); err != nil { + t.Fatal(err) + } + if _, err := db.ResetSummaries(database); err != nil { + t.Fatal(err) + } + + catalogPath := filepath.Join(t.TempDir(), "catalog.jsonl") + if err := os.WriteFile(catalogPath, []byte("{\"full_name\":\"owner/tool\",\"first_seen\":\"2026-03-21T12:34:56Z\",\"ai_summary\":\"old summary\"}\n"), 0644); err != nil { + t.Fatal(err) + } + if err := restoreCatalogIfEmpty(database, "https://example.invalid/", catalogPath); err != nil { + t.Fatal(err) + } + summarized, err := db.SummarizedCount(database) + if err != nil { + t.Fatal(err) + } + if summarized != 0 { + t.Fatalf("automatic restore undid reset for %d records", summarized) + } +} + +func TestStrictRemoteRestoreRejectsCorruptPublishedCatalog(t *testing.T) { + server := httptest.NewServer(http.HandlerFunc(func(response http.ResponseWriter, request *http.Request) { + response.Header().Set("Content-Type", "application/json") + response.Write([]byte(`{"schema_version":1,"records":1,"sha256":"not-the-catalog-hash"}`)) + })) + defer server.Close() + database, err := db.Open(filepath.Join(t.TempDir(), "state.db")) + if err != nil { + t.Fatal(err) + } + defer database.Close() + + if err := restoreCatalogState(database, server.URL, filepath.Join(t.TempDir(), "missing.jsonl"), true); err == nil { + t.Fatal("expected strict restore to reject corrupt published state") + } +} + +func TestStrictRemoteRestoreMergesHistoryBeyondSeed(t *testing.T) { + remoteCatalog := []byte("{\"full_name\":\"remote/new-tool\",\"first_seen\":\"2026-04-01T12:34:56Z\",\"ai_summary\":\"remote summary\"}\n") + manifest := db.NewCatalogManifest(remoteCatalog, 1) + manifestBytes, err := json.Marshal(manifest) + if err != nil { + t.Fatal(err) + } + server := httptest.NewServer(http.HandlerFunc(func(response http.ResponseWriter, request *http.Request) { + if request.URL.Path == "/catalog.manifest.json" { + response.Write(manifestBytes) + return + } + if request.URL.Path == "/catalog.jsonl" { + response.Write(remoteCatalog) + return + } + http.NotFound(response, request) + })) + defer server.Close() + database, err := db.Open(filepath.Join(t.TempDir(), "state.db")) + if err != nil { + t.Fatal(err) + } + defer database.Close() + if err := db.UpsertRepo(database, &db.Repo{ + FullName: "local/survivor", Owner: "local", Name: "survivor", HTMLURL: "https://github.com/local/survivor", + }); err != nil { + t.Fatal(err) + } + rows, err := db.Unsummarized(database) + if err != nil { + t.Fatal(err) + } + if err := db.SetSummary(database, rows[0].ID, "local summary"); err != nil { + t.Fatal(err) + } + + if err := restoreCatalogState(database, server.URL, filepath.Join(t.TempDir(), "missing.jsonl"), true); err != nil { + t.Fatal(err) + } + count, err := db.SummarizedCount(database) + if err != nil { + t.Fatal(err) + } + if count != 2 { + t.Fatalf("expected local and remote history, got %d summaries", count) + } +} diff --git a/data/catalog.jsonl b/data/catalog.jsonl new file mode 100644 index 0000000..ee17cc0 --- /dev/null +++ b/data/catalog.jsonl @@ -0,0 +1,1070 @@ +{"full_name":"003random/getJS","owner":"003random","name":"getJS","description":"A tool to fastly get all javascript sources/files","html_url":"https://github.com/003random/getJS","stars":860,"language":"Go","topics":"pentesting,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A tool to fastly get all javascript sources/files"} +{"full_name":"0Chencc/CTFCrackTools","owner":"0Chencc","name":"CTFCrackTools","description":"The next-generation CTF Swiss Army Knife powered by Rust \u0026 Tauri. Features a visual node-based workflow and local AI intelligence for extreme performance and automation.China's first CTFTools framework.","html_url":"https://github.com/0Chencc/CTFCrackTools","stars":2091,"language":"Rust","topics":"osint,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"The next-generation CTF Swiss Army Knife powered by Rust \u0026 Tauri. Features a visual node-based workflow and local AI intelligence for extreme performance and automation.China's first CTFTools framework."} +{"full_name":"0x0be/yesitsme","owner":"0x0be","name":"yesitsme","description":"Simple OSINT script to find Instagram profiles by name and e-mail/phone","html_url":"https://github.com/0x0be/yesitsme","stars":2624,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Simple OSINT script to find Instagram profiles by name and e-mail/phone"} +{"full_name":"0x4D31/awesome-oscp","owner":"0x4D31","name":"awesome-oscp","description":"A curated list of awesome OSCP resources","html_url":"https://github.com/0x4D31/awesome-oscp","stars":3384,"topics":"malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A curated list of awesome OSCP resources"} +{"full_name":"0x4m4/hexstrike-ai","owner":"0x4m4","name":"hexstrike-ai","description":"HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.","html_url":"https://github.com/0x4m4/hexstrike-ai","stars":7612,"language":"Python","topics":"malware,pentesting,osint,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities."} +{"full_name":"0x6rss/matkap","owner":"0x6rss","name":"matkap","description":"Matkap - hunt down malicious Telegram bots","html_url":"https://github.com/0x6rss/matkap","stars":928,"language":"Python","topics":"malware,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Matkap - hunt down malicious Telegram bots"} +{"full_name":"0xHJK/dumpall","owner":"0xHJK","name":"dumpall","description":"一款信息泄漏利用工具，适用于.git/.svn/.DS_Store泄漏和目录列出","html_url":"https://github.com/0xHJK/dumpall","stars":1562,"language":"Python","topics":"pentesting,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"一款信息泄漏利用工具，适用于.git/.svn/.DS_Store泄漏和目录列出"} +{"full_name":"0xInfection/TIDoS-Framework","owner":"0xInfection","name":"TIDoS-Framework","description":"The Offensive Manual Web Application Penetration Testing Framework.","html_url":"https://github.com/0xInfection/TIDoS-Framework","stars":1847,"language":"Python","topics":"pentesting,osint,scanner,exploit,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"The Offensive Manual Web Application Penetration Testing Framework."} +{"full_name":"0xPugal/One-Liners","owner":"0xPugal","name":"One-Liners","description":"A collection of one-liners for bug bounty hunting.","html_url":"https://github.com/0xPugal/One-Liners","stars":1431,"topics":"malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A collection of one-liners for bug bounty hunting."} +{"full_name":"0xRadi/OWASP-Web-Checklist","owner":"0xRadi","name":"OWASP-Web-Checklist","description":"OWASP Web Application Security Testing Checklist","html_url":"https://github.com/0xRadi/OWASP-Web-Checklist","stars":2106,"topics":"exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"OWASP Web Application Security Testing Checklist"} +{"full_name":"0xSobky/HackVault","owner":"0xSobky","name":"HackVault","description":"A container repository for my public web hacks!","html_url":"https://github.com/0xSobky/HackVault","stars":2020,"language":"JavaScript","topics":"pentesting,osint,exploit,web-security","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A container repository for my public web hacks!"} +{"full_name":"0xZDH/o365spray","owner":"0xZDH","name":"o365spray","description":"Username enumeration and password spraying tool aimed at Microsoft O365.","html_url":"https://github.com/0xZDH/o365spray","stars":985,"language":"Python","topics":"malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Username enumeration and password spraying tool aimed at Microsoft O365."} +{"full_name":"0xdea/frida-scripts","owner":"0xdea","name":"frida-scripts","description":"A collection of my Frida instrumentation scripts to reverse engineer mobile apps and more.","html_url":"https://github.com/0xdea/frida-scripts","stars":1575,"language":"JavaScript","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A collection of my Frida instrumentation scripts to reverse engineer mobile apps and more."} +{"full_name":"0xmaximus/Galaxy-Bugbounty-Checklist","owner":"0xmaximus","name":"Galaxy-Bugbounty-Checklist","description":"Tips and Tutorials for Bug Bounty and also Penetration Tests.","html_url":"https://github.com/0xmaximus/Galaxy-Bugbounty-Checklist","stars":1775,"topics":"pentesting,exploit,red-team,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Tips and Tutorials for Bug Bounty and also Penetration Tests."} +{"full_name":"0xor0ne/awesome-list","owner":"0xor0ne","name":"awesome-list","description":"Cybersecurity oriented awesome list","html_url":"https://github.com/0xor0ne/awesome-list","stars":3344,"topics":"exploit,reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Cybersecurity oriented awesome list"} +{"full_name":"0xricksanchez/like-dbg","owner":"0xricksanchez","name":"like-dbg","description":"Fully dockerized Linux kernel debugging environment","html_url":"https://github.com/0xricksanchez/like-dbg","stars":772,"language":"Python","topics":"exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Fully dockerized Linux kernel debugging environment"} +{"full_name":"0xsha/CloudBrute","owner":"0xsha","name":"CloudBrute","description":"Awesome cloud enumerator","html_url":"https://github.com/0xsha/CloudBrute","stars":1107,"language":"Go","topics":"red-team,malware,pentesting,cloud-security","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Awesome cloud enumerator"} +{"full_name":"0xsyr0/Awesome-Cybersecurity-Handbooks","owner":"0xsyr0","name":"Awesome-Cybersecurity-Handbooks","description":"A huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.","html_url":"https://github.com/0xsyr0/Awesome-Cybersecurity-Handbooks","stars":3294,"topics":"malware,pentesting,red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer."} +{"full_name":"0xsyr0/OSCP","owner":"0xsyr0","name":"OSCP","description":"OSCP Cheat Sheet","html_url":"https://github.com/0xsyr0/OSCP","stars":3670,"language":"PowerShell","topics":"pentesting,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"OSCP Cheat Sheet"} +{"full_name":"1N3/BlackWidow","owner":"1N3","name":"BlackWidow","description":"A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.","html_url":"https://github.com/1N3/BlackWidow","stars":1782,"language":"Python","topics":"exploit,web-security,osint,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website."} +{"full_name":"1N3/Goohak","owner":"1N3","name":"Goohak","description":"GooHak is an automated tool designed for launching Google hacking queries against specified target domains to uncover vulnerabilities and facilitate enumeration. Its primary use case is to streamline the process of gathering information through tailored search queries, leveraging Google’s search capabilities. Notable features include straightforward command-line usage and dependencies tailored for Linux environments.","html_url":"https://github.com/1N3/Goohak","stars":740,"language":"Shell","topics":"osint,pentesting","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"GooHak is an automated tool designed for launching Google hacking queries against specified target domains to uncover vulnerabilities and facilitate enumeration. Its primary use case is to streamline the process of gathering information through tailored search queries, leveraging Google’s search capabilities. Notable features include straightforward command-line usage and dependencies tailored for Linux environments."} +{"full_name":"1N3/PrivEsc","owner":"1N3","name":"PrivEsc","description":"A collection of Windows, Linux and MySQL privilege escalation scripts and exploits.","html_url":"https://github.com/1N3/PrivEsc","stars":985,"language":"C","topics":"pentesting,privilege-escalation,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A collection of Windows, Linux and MySQL privilege escalation scripts and exploits."} +{"full_name":"1N3/ReverseAPK","owner":"1N3","name":"ReverseAPK","description":"Quickly analyze and reverse engineer Android packages","html_url":"https://github.com/1N3/ReverseAPK","stars":843,"language":"Shell","topics":"pentesting,reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Quickly analyze and reverse engineer Android packages"} +{"full_name":"1N3/Sn1per","owner":"1N3","name":"Sn1per","description":"Attack Surface Management Platform","html_url":"https://github.com/1N3/Sn1per","stars":9614,"language":"Shell","topics":"malware,pentesting,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Attack Surface Management Platform"} +{"full_name":"1egoman/debundle","owner":"1egoman","name":"debundle","description":"Debundle is a tool designed to unpack JavaScript bundles generated by Webpack and Browserify, facilitating reverse engineering and analysis by converting minified code back into a more readable file structure. Notably, it allows users to specify configuration options for various bundling types and outputs organized directories containing the original modules, though it does not guarantee a lossless recovery of the original source code. The project is no longer maintained, and users are advised to exercise caution as it may not perform reliably on all real-world bundles.","html_url":"https://github.com/1egoman/debundle","stars":739,"language":"JavaScript","topics":"reverse-engineering","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"Debundle is a tool designed to unpack JavaScript bundles generated by Webpack and Browserify, facilitating reverse engineering and analysis by converting minified code back into a more readable file structure. Notably, it allows users to specify configuration options for various bundling types and outputs organized directories containing the original modules, though it does not guarantee a lossless recovery of the original source code. The project is no longer maintained, and users are advised to exercise caution as it may not perform reliably on all real-world bundles."} +{"full_name":"1n7erface/Template","owner":"1n7erface","name":"Template","description":"Next generation RedTeam heuristic intranet scanning | 下一代RedTeam启发式内网扫描","html_url":"https://github.com/1n7erface/Template","stars":1115,"topics":"scanner,red-team,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Next generation RedTeam heuristic intranet scanning | 下一代RedTeam启发式内网扫描"} +{"full_name":"4lbH4cker/ALHacking","owner":"4lbH4cker","name":"ALHacking","description":"Albanian Hacking Tool!! Tools to help you with ethical hacking, Social media hack, phone info, Gmail attack, phone number attack, user discovery, Anonymous-sms, Webcam Hack • Powerful DDOS attack tool!! Operating System Requirements works on any of the following operating systems: • Android • Linux • Unix","html_url":"https://github.com/4lbH4cker/ALHacking","stars":1408,"language":"Shell","topics":"malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Albanian Hacking Tool!! Tools to help you with ethical hacking, Social media hack, phone info, Gmail attack, phone number attack, user discovery, Anonymous-sms, Webcam Hack • Powerful DDOS attack tool!! Operating System Requirements works on any of the following operating systems: • Android • Linux • Unix"} +{"full_name":"8051Enthusiast/biodiff","owner":"8051Enthusiast","name":"biodiff","description":"Hex diff viewer using alignment algorithms from biology","html_url":"https://github.com/8051Enthusiast/biodiff","stars":884,"language":"Rust","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Hex diff viewer using alignment algorithms from biology"} +{"full_name":"A-poc/BlueTeam-Tools","owner":"A-poc","name":"BlueTeam-Tools","description":"Tools and Techniques for Blue Team / Incident Response","html_url":"https://github.com/A-poc/BlueTeam-Tools","stars":3976,"topics":"exploit,malware,forensics","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Tools and Techniques for Blue Team / Incident Response"} +{"full_name":"A-poc/RedTeam-Tools","owner":"A-poc","name":"RedTeam-Tools","description":"Tools and Techniques for Red Team / Penetration Testing","html_url":"https://github.com/A-poc/RedTeam-Tools","stars":8593,"topics":"red-team,malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Tools and Techniques for Red Team / Penetration Testing"} +{"full_name":"ANG13T/SatIntel","owner":"ANG13T","name":"SatIntel","description":"SatIntel is an OSINT tool for Satellites 🛰. Extract satellite telemetry, receive orbital predictions, and parse TLEs 🔭","html_url":"https://github.com/ANG13T/SatIntel","stars":867,"language":"Go","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"SatIntel is an OSINT tool for Satellites 🛰. Extract satellite telemetry, receive orbital predictions, and parse TLEs 🔭"} +{"full_name":"APTRS/APTRS","owner":"APTRS","name":"APTRS","description":"Automated pentest reporting with custom templates, project tracking, customer dashboard and client management tools. Streamline your security workflows effortlessly!","html_url":"https://github.com/APTRS/APTRS","stars":1067,"language":"TypeScript","topics":"pentesting,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Automated pentest reporting with custom templates, project tracking, customer dashboard and client management tools. Streamline your security workflows effortlessly!"} +{"full_name":"ASHWIN990/ADB-Toolkit","owner":"ASHWIN990","name":"ADB-Toolkit","description":"ADB-Toolkit V2 for easy ADB tricks with many perks in all one. ENJOY!","html_url":"https://github.com/ASHWIN990/ADB-Toolkit","stars":1950,"language":"Shell","topics":"malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"ADB-Toolkit V2 for easy ADB tricks with many perks in all one. ENJOY!"} +{"full_name":"Aabyss-Team/ARL","owner":"Aabyss-Team","name":"ARL","description":"ARL官方仓库备份项目：ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。","html_url":"https://github.com/Aabyss-Team/ARL","stars":1907,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"ARL官方仓库备份项目：ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。"} +{"full_name":"AabyssZG/SpringBoot-Scan","owner":"AabyssZG","name":"SpringBoot-Scan","description":"针对SpringBoot的开源渗透框架，以及Spring相关高危漏洞利用工具","html_url":"https://github.com/AabyssZG/SpringBoot-Scan","stars":2247,"language":"Python","topics":"exploit,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"针对SpringBoot的开源渗透框架，以及Spring相关高危漏洞利用工具"} +{"full_name":"Adamkadaban/CTFs","owner":"Adamkadaban","name":"CTFs","description":"CTF Cheat Sheet + Writeups / Files for some of the Cyber CTFs that I've done","html_url":"https://github.com/Adamkadaban/CTFs","stars":810,"language":"C","topics":"pentesting,exploit,reverse-engineering,cryptography","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"CTF Cheat Sheet + Writeups / Files for some of the Cyber CTFs that I've done"} +{"full_name":"Adminisme/ServerScan","owner":"Adminisme","name":"ServerScan","description":"ServerScan一款使用Golang开发的高并发网络扫描、服务探测工具。","html_url":"https://github.com/Adminisme/ServerScan","stars":1634,"language":"Go","topics":"pentesting,scanner,red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"ServerScan一款使用Golang开发的高并发网络扫描、服务探测工具。"} +{"full_name":"AdrianVollmer/PowerHub","owner":"AdrianVollmer","name":"PowerHub","description":"A post exploitation tool based on a web application, focusing on bypassing endpoint protection and application whitelisting","html_url":"https://github.com/AdrianVollmer/PowerHub","stars":825,"language":"PowerShell","topics":"pentesting,post-exploitation,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A post exploitation tool based on a web application, focusing on bypassing endpoint protection and application whitelisting"} +{"full_name":"AlephNullSK/dnsgen","owner":"AlephNullSK","name":"dnsgen","description":"DNSGen is a powerful and flexible DNS name permutation tool designed for security researchers and penetration testers. It generates intelligent domain name variations to assist in subdomain discovery and security assessments.","html_url":"https://github.com/AlephNullSK/dnsgen","stars":1052,"language":"Python","topics":"malware,pentesting,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"DNSGen is a powerful and flexible DNS name permutation tool designed for security researchers and penetration testers. It generates intelligent domain name variations to assist in subdomain discovery and security assessments."} +{"full_name":"Alfredredbird/tookie-osint","owner":"Alfredredbird","name":"tookie-osint","description":"Tookie is a advanced OSINT information gathering tool that finds social media accounts based on inputs.","html_url":"https://github.com/Alfredredbird/tookie-osint","stars":1963,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Tookie is a advanced OSINT information gathering tool that finds social media accounts based on inputs."} +{"full_name":"AloneMonkey/MonkeyDev","owner":"AloneMonkey","name":"MonkeyDev","description":"CaptainHook Tweak、Logos Tweak and Command-line Tool、Patch iOS Apps, Without Jailbreak.","html_url":"https://github.com/AloneMonkey/MonkeyDev","stars":6780,"language":"Objective-C","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"CaptainHook Tweak、Logos Tweak and Command-line Tool、Patch iOS Apps, Without Jailbreak."} +{"full_name":"AloneMonkey/frida-ios-dump","owner":"AloneMonkey","name":"frida-ios-dump","description":"pull decrypted ipa from jailbreak device","html_url":"https://github.com/AloneMonkey/frida-ios-dump","stars":3818,"language":"JavaScript","topics":"reverse-engineering,cryptography","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"pull decrypted ipa from jailbreak device"} +{"full_name":"Artikash/Textractor","owner":"Artikash","name":"Textractor","description":"Extracts text from video games and visual novels. Highly extensible.","html_url":"https://github.com/Artikash/Textractor","stars":2575,"language":"C++","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Extracts text from video games and visual novels. Highly extensible."} +{"full_name":"Arvanaghi/SessionGopher","owner":"Arvanaghi","name":"SessionGopher","description":"SessionGopher is a PowerShell tool that uses WMI to extract saved session information for remote access tools such as WinSCP, PuTTY, SuperPuTTY, FileZilla, and Microsoft Remote Desktop. It can be run remotely or locally.","html_url":"https://github.com/Arvanaghi/SessionGopher","stars":1314,"language":"PowerShell","topics":"red-team,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"SessionGopher is a PowerShell tool that uses WMI to extract saved session information for remote access tools such as WinSCP, PuTTY, SuperPuTTY, FileZilla, and Microsoft Remote Desktop. It can be run remotely or locally."} +{"full_name":"AsjadOooO/Zero-attacker","owner":"AsjadOooO","name":"Zero-attacker","description":"Zero-attacker is an multipurpose hacking tool with over 15+ multifunction tools","html_url":"https://github.com/AsjadOooO/Zero-attacker","stars":942,"language":"Python","topics":"scanner,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Zero-attacker is an multipurpose hacking tool with over 15+ multifunction tools"} +{"full_name":"AssetRipper/AssetRipper","owner":"AssetRipper","name":"AssetRipper","description":"GUI Application to work with engine assets, asset bundles, and serialized files","html_url":"https://github.com/AssetRipper/AssetRipper","stars":7107,"language":"C#","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"GUI Application to work with engine assets, asset bundles, and serialized files"} +{"full_name":"Astrosp/Awesome-OSINT-For-Everything","owner":"Astrosp","name":"Awesome-OSINT-For-Everything","description":"OSINT tools for Information gathering, Cybersecurity, Reverse searching, bugbounty, trust and safety, red team oprations and more.","html_url":"https://github.com/Astrosp/Awesome-OSINT-For-Everything","stars":2269,"language":"Shell","topics":"red-team,malware,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"OSINT tools for Information gathering, Cybersecurity, Reverse searching, bugbounty, trust and safety, red team oprations and more."} +{"full_name":"AsuharietYgvar/AppleNeuralHash2ONNX","owner":"AsuharietYgvar","name":"AppleNeuralHash2ONNX","description":"Convert Apple NeuralHash model for CSAM Detection to ONNX.","html_url":"https://github.com/AsuharietYgvar/AppleNeuralHash2ONNX","stars":1536,"language":"Python","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Convert Apple NeuralHash model for CSAM Detection to ONNX."} +{"full_name":"Athena-OS/athena","owner":"Athena-OS","name":"athena","description":"Athena OS is a Arch/Nix-based distro focused on Cybersecurity. Learn, practice and enjoy with any hacking tool!","html_url":"https://github.com/Athena-OS/athena","stars":1198,"language":"Vim Script","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Athena OS is a Arch/Nix-based distro focused on Cybersecurity. Learn, practice and enjoy with any hacking tool!"} +{"full_name":"Autumn-27/ScopeSentry","owner":"Autumn-27","name":"ScopeSentry","description":"ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes","html_url":"https://github.com/Autumn-27/ScopeSentry","stars":1472,"language":"Go","topics":"malware,osint,scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes"} +{"full_name":"AzeemIdrisi/PhoneSploit-Pro","owner":"AzeemIdrisi","name":"PhoneSploit-Pro","description":"An all-in-one hacking tool to remotely exploit Android devices using ADB and Metasploit-Framework to get a Meterpreter session.","html_url":"https://github.com/AzeemIdrisi/PhoneSploit-Pro","stars":5676,"language":"Python","topics":"exploit,malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An all-in-one hacking tool to remotely exploit Android devices using ADB and Metasploit-Framework to get a Meterpreter session."} +{"full_name":"BLE-Research-Group/MetaRadar","owner":"BLE-Research-Group","name":"MetaRadar","description":"A tool for BLE environment monitoring. Find and track Bluetooth devices around, and get notified when the target device is detected.","html_url":"https://github.com/BLE-Research-Group/MetaRadar","stars":1319,"language":"Kotlin","topics":"scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A tool for BLE environment monitoring. Find and track Bluetooth devices around, and get notified when the target device is detected."} +{"full_name":"Bashfuscator/Bashfuscator","owner":"Bashfuscator","name":"Bashfuscator","description":"A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.","html_url":"https://github.com/Bashfuscator/Bashfuscator","stars":1936,"language":"Python","topics":"forensics,red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team."} +{"full_name":"BeichenDream/BadPotato","owner":"BeichenDream","name":"BadPotato","description":"Windows 权限提升 BadPotato","html_url":"https://github.com/BeichenDream/BadPotato","stars":889,"language":"C#","topics":"privilege-escalation","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Windows 权限提升 BadPotato"} +{"full_name":"Berkanktk/CyberSecurity","owner":"Berkanktk","name":"CyberSecurity","description":"A collection of essential and foundational cybersecurity knowledge, thoughtfully organized for easy comprehension.","html_url":"https://github.com/Berkanktk/CyberSecurity","stars":1474,"language":"Python","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A collection of essential and foundational cybersecurity knowledge, thoughtfully organized for easy comprehension."} +{"full_name":"BigBodyCobain/Shadowbroker","owner":"BigBodyCobain","name":"Shadowbroker","description":"Open-source intelligence for the global theater. Track everything from the corporate/private jets of the wealthy, and spy satellites, to seismic events in one unified interface. The knowledge is available to all but rarely aggregated in the open, until now.","html_url":"https://github.com/BigBodyCobain/Shadowbroker","stars":4586,"language":"TypeScript","topics":"malware,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Open-source intelligence for the global theater. Track everything from the corporate/private jets of the wealthy, and spy satellites, to seismic events in one unified interface. The knowledge is available to all but rarely aggregated in the open, until now."} +{"full_name":"BishopFox/GitGot","owner":"BishopFox","name":"GitGot","description":"Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.","html_url":"https://github.com/BishopFox/GitGot","stars":1551,"language":"Python","topics":"scanner,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets."} +{"full_name":"BishopFox/eyeballer","owner":"BishopFox","name":"eyeballer","description":"Convolutional neural network for analyzing pentest screenshots","html_url":"https://github.com/BishopFox/eyeballer","stars":1279,"language":"Python","topics":"network,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Convolutional neural network for analyzing pentest screenshots"} +{"full_name":"BishopFox/h2csmuggler","owner":"BishopFox","name":"h2csmuggler","description":"HTTP Request Smuggling over HTTP/2 Cleartext (h2c)","html_url":"https://github.com/BishopFox/h2csmuggler","stars":785,"language":"Python","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"HTTP Request Smuggling over HTTP/2 Cleartext (h2c)"} +{"full_name":"BlackArch/blackarch","owner":"BlackArch","name":"blackarch","description":"An ArchLinux based distribution for penetration testers and security researchers.","html_url":"https://github.com/BlackArch/blackarch","stars":3283,"language":"Shell","topics":"red-team,malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An ArchLinux based distribution for penetration testers and security researchers."} +{"full_name":"BlackSnufkin/LitterBox","owner":"BlackSnufkin","name":"LitterBox","description":"A secure sandbox environment for malware developers and red teamers to test payloads against detection mechanisms before deployment. Integrates with LLM agents via MCP for enhanced analysis capabilities.","html_url":"https://github.com/BlackSnufkin/LitterBox","stars":1332,"language":"YARA","topics":"red-team,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A secure sandbox environment for malware developers and red teamers to test payloads against detection mechanisms before deployment. Integrates with LLM agents via MCP for enhanced analysis capabilities."} +{"full_name":"BushidoUK/Ransomware-Tool-Matrix","owner":"BushidoUK","name":"Ransomware-Tool-Matrix","description":"A resource containing all the tools each ransomware gangs uses","html_url":"https://github.com/BushidoUK/Ransomware-Tool-Matrix","stars":1332,"topics":"malware,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A resource containing all the tools each ransomware gangs uses"} +{"full_name":"C0nw0nk/Nginx-Lua-Anti-DDoS","owner":"C0nw0nk","name":"Nginx-Lua-Anti-DDoS","description":"A Anti-DDoS script to protect Nginx web servers using Lua with a HTML Javascript based authentication puzzle inspired by Cloudflare I am under attack mode an Anti-DDoS authentication page protect yourself from every attack type All Layer 7 Attacks Mitigating Historic Attacks DoS DoS Implications DDoS All Brute Force Attacks Zero day exploits Social Engineering Rainbow Tables Password Cracking Tools Password Lists Dictionary Attacks Time Delay Any Hosting Provider Any CMS or Custom Website Unlimited Attempt Frequency Search Attacks HTTP Basic Authentication HTTP Digest Authentication HTML Form Based Authentication Mask Attacks Rule-Based Search Attacks Combinator Attacks Botnet Attacks Unauthorized IPs IP Whitelisting Bruter THC Hydra John the Ripper Brutus Ophcrack unauthorized logins Injection Broken Authentication and Session Management Sensitive Data Exposure XML External Entities (XXE) Broken Access Control Security Misconfiguration Cross-Site Scripting (XSS) Insecure Deserializ...","html_url":"https://github.com/C0nw0nk/Nginx-Lua-Anti-DDoS","stars":1560,"language":"Lua","topics":"cryptography,exploit,malware,web-security,network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A Anti-DDoS script to protect Nginx web servers using Lua with a HTML Javascript based authentication puzzle inspired by Cloudflare I am under attack mode an Anti-DDoS authentication page protect yourself from every attack type All Layer 7 Attacks Mitigating Historic Attacks DoS DoS Implications DDoS All Brute Force Attacks Zero day exploits Social Engineering Rainbow Tables Password Cracking Tools Password Lists Dictionary Attacks Time Delay Any Hosting Provider Any CMS or Custom Website Unlimited Attempt Frequency Search Attacks HTTP Basic Authentication HTTP Digest Authentication HTML Form Based Authentication Mask Attacks Rule-Based Search Attacks Combinator Attacks Botnet Attacks Unauthorized IPs IP Whitelisting Bruter THC Hydra John the Ripper Brutus Ophcrack unauthorized logins Injection Broken Authentication and Session Management Sensitive Data Exposure XML External Entities (XXE) Broken Access Control Security Misconfiguration Cross-Site Scripting (XSS) Insecure Deserialization Using Components with Known Vulnerabilities Insufficient Logging \u0026 Monitoring Drupal WordPress Joomla Flash Magento PHP Plone WHMCS Atlassian Products malicious traffic Adult video script avs KV..."} +{"full_name":"CERT-Polska/Artemis","owner":"CERT-Polska","name":"Artemis","description":"A modular vulnerability scanner with automatic report generation capabilities.","html_url":"https://github.com/CERT-Polska/Artemis","stars":1146,"language":"Python","topics":"malware,pentesting,scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A modular vulnerability scanner with automatic report generation capabilities."} +{"full_name":"CISOfy/lynis","owner":"CISOfy","name":"lynis","description":"Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.","html_url":"https://github.com/CISOfy/lynis","stars":15422,"language":"Shell","topics":"scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional."} +{"full_name":"CYB3RMX/Qu1cksc0pe","owner":"CYB3RMX","name":"Qu1cksc0pe","description":"All-in-One malware analysis tool.","html_url":"https://github.com/CYB3RMX/Qu1cksc0pe","stars":1968,"language":"YARA","topics":"malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"All-in-One malware analysis tool."} +{"full_name":"CalebFenton/simplify","owner":"CalebFenton","name":"simplify","description":"Android virtual machine and deobfuscator","html_url":"https://github.com/CalebFenton/simplify","stars":4638,"language":"Java","topics":"reverse-engineering,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Android virtual machine and deobfuscator"} +{"full_name":"Captainarash/The_Holy_Book_of_X86","owner":"Captainarash","name":"The_Holy_Book_of_X86","description":"A simple guide to x86 architecture, assembly, memory management, paging, segmentation, SMM, BIOS....","html_url":"https://github.com/Captainarash/The_Holy_Book_of_X86","stars":972,"topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A simple guide to x86 architecture, assembly, memory management, paging, segmentation, SMM, BIOS...."} +{"full_name":"CarterPerez-dev/Cybersecurity-Projects","owner":"CarterPerez-dev","name":"Cybersecurity-Projects","description":"60 Cybersecurity Projects | Certification Roadmaps |Everything you need to build your cybersecurity portfolio","html_url":"https://github.com/CarterPerez-dev/Cybersecurity-Projects","stars":1261,"language":"Python","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"60 Cybersecurity Projects | Certification Roadmaps |Everything you need to build your cybersecurity portfolio"} +{"full_name":"Checkmarx/kics","owner":"Checkmarx","name":"kics","description":"Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.","html_url":"https://github.com/Checkmarx/kics","stars":2592,"language":"Open Policy Agent","topics":"exploit,malware,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx."} +{"full_name":"ChiChou/grapefruit","owner":"ChiChou","name":"grapefruit","description":"(WIP) Runtime Mobile Application Pentest Tool for iOS and Android. Previously Passionfruit","html_url":"https://github.com/ChiChou/grapefruit","stars":1121,"language":"TypeScript","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"(WIP) Runtime Mobile Application Pentest Tool for iOS and Android. Previously Passionfruit"} +{"full_name":"Chocapikk/wpprobe","owner":"Chocapikk","name":"wpprobe","description":"A fast WordPress plugin enumeration tool","html_url":"https://github.com/Chocapikk/wpprobe","stars":798,"language":"Go","topics":"osint,exploit,malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A fast WordPress plugin enumeration tool"} +{"full_name":"Clats97/ClatScope","owner":"Clats97","name":"ClatScope","description":"ClatScope Info Tool – The best and most versatile OSINT utility for retrieving geolocation, DNS, WHOIS, phone, email, data breach information and much more (70+ features). Perfect for investigators, pentesters, or anyone looking for an effective reconnaissance / OSINT tool.","html_url":"https://github.com/Clats97/ClatScope","stars":1414,"language":"Python","topics":"pentesting,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"ClatScope Info Tool – The best and most versatile OSINT utility for retrieving geolocation, DNS, WHOIS, phone, email, data breach information and much more (70+ features). Perfect for investigators, pentesters, or anyone looking for an effective reconnaissance / OSINT tool."} +{"full_name":"Coalfire-Research/Red-Baron","owner":"Coalfire-Research","name":"Red-Baron","description":"Automate creating resilient, disposable, secure and agile infrastructure for Red Teams.","html_url":"https://github.com/Coalfire-Research/Red-Baron","stars":923,"language":"HCL","topics":"red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Automate creating resilient, disposable, secure and agile infrastructure for Red Teams."} +{"full_name":"Col-E/Recaf","owner":"Col-E","name":"Recaf","description":"The modern Java bytecode editor","html_url":"https://github.com/Col-E/Recaf","stars":7058,"language":"Java","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"The modern Java bytecode editor"} +{"full_name":"ComplianceAsCode/content","owner":"ComplianceAsCode","name":"content","description":"Security automation content in SCAP, Bash, Ansible, and other formats","html_url":"https://github.com/ComplianceAsCode/content","stars":2677,"language":"Shell","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Security automation content in SCAP, Bash, Ansible, and other formats"} +{"full_name":"ContainerSSH/ContainerSSH","owner":"ContainerSSH","name":"ContainerSSH","description":"ContainerSSH: Launch containers on demand","html_url":"https://github.com/ContainerSSH/ContainerSSH","stars":2983,"language":"Go","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"ContainerSSH: Launch containers on demand"} +{"full_name":"Cryakl/Ultimate-RAT-Collection","owner":"Cryakl","name":"Ultimate-RAT-Collection","description":"For educational purposes only, exhaustive samples of 500+ classic/modern trojan builders including screenshots.","html_url":"https://github.com/Cryakl/Ultimate-RAT-Collection","stars":3671,"topics":"malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"For educational purposes only, exhaustive samples of 500+ classic/modern trojan builders including screenshots."} +{"full_name":"Crypto-Cat/CTF","owner":"Crypto-Cat","name":"CTF","description":"CTF challenge (mostly pwn) files, scripts etc","html_url":"https://github.com/Crypto-Cat/CTF","stars":2439,"language":"Python","topics":"exploit,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"CTF challenge (mostly pwn) files, scripts etc"} +{"full_name":"Cur10s1tyByt3/GenP","owner":"Cur10s1tyByt3","name":"GenP","description":"This repository preserves source materials and related documentation about GenP tool. For archival and research purposes only.","html_url":"https://github.com/Cur10s1tyByt3/GenP","stars":1178,"language":"AutoIt","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"This repository preserves source materials and related documentation about GenP tool. For archival and research purposes only."} +{"full_name":"Cyber-Buddy/APKHunt","owner":"Cyber-Buddy","name":"APKHunt","description":"APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential security vulnerabilities in their code.","html_url":"https://github.com/Cyber-Buddy/APKHunt","stars":959,"language":"Go","topics":"malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential security vulnerabilities in their code."} +{"full_name":"Cyber-Guy1/API-SecurityEmpire","owner":"Cyber-Guy1","name":"API-SecurityEmpire","description":"API Security Project aims to present unique attack \u0026 defense methods in API Security field","html_url":"https://github.com/Cyber-Guy1/API-SecurityEmpire","stars":1435,"topics":"malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"API Security Project aims to present unique attack \u0026 defense methods in API Security field"} +{"full_name":"CycodeLabs/raven","owner":"CycodeLabs","name":"raven","description":"Raven is a developer security tool designed to enhance the security of software projects by providing capabilities for managing and monitoring secrets, vulnerabilities, and compliance across development environments. Its primary use case is to integrate seamlessly into CI/CD pipelines, ensuring that code remains secure throughout the software development lifecycle. Notable features include real-time detection of security risks, a user-friendly interface, and integration with various popular development tools and platforms.","html_url":"https://github.com/CycodeLabs/raven","stars":736,"language":"Python","topics":"security-tools","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"Raven is a developer security tool designed to enhance the security of software projects by providing capabilities for managing and monitoring secrets, vulnerabilities, and compliance across development environments. Its primary use case is to integrate seamlessly into CI/CD pipelines, ensuring that code remains secure throughout the software development lifecycle. Notable features include real-time detection of security risks, a user-friendly interface, and integration with various popular development tools and platforms."} +{"full_name":"D00Movenok/BounceBack","owner":"D00Movenok","name":"BounceBack","description":"↕️🤫 Stealth redirector for your red team operation security","html_url":"https://github.com/D00Movenok/BounceBack","stars":1067,"language":"Go","topics":"pentesting,red-team,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"↕️🤫 Stealth redirector for your red team operation security"} +{"full_name":"D4Vinci/Cr3dOv3r","owner":"D4Vinci","name":"Cr3dOv3r","description":"Know the dangers of credential reuse attacks.","html_url":"https://github.com/D4Vinci/Cr3dOv3r","stars":2102,"language":"Python","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Know the dangers of credential reuse attacks."} +{"full_name":"D4Vinci/elpscrk","owner":"D4Vinci","name":"elpscrk","description":"An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)","html_url":"https://github.com/D4Vinci/elpscrk","stars":925,"language":"Python","topics":"malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)"} +{"full_name":"DERE-ad2001/Frida-Labs","owner":"DERE-ad2001","name":"Frida-Labs","description":"The repo contains a series of challenges for learning Frida for Android Exploitation.","html_url":"https://github.com/DERE-ad2001/Frida-Labs","stars":1235,"topics":"exploit,reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"The repo contains a series of challenges for learning Frida for Android Exploitation."} +{"full_name":"DataDog/KubeHound","owner":"DataDog","name":"KubeHound","description":"Tool for building Kubernetes attack paths","html_url":"https://github.com/DataDog/KubeHound","stars":952,"language":"Go","topics":"exploit,red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Tool for building Kubernetes attack paths"} +{"full_name":"Datalux/Osintgram","owner":"Datalux","name":"Osintgram","description":"Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname","html_url":"https://github.com/Datalux/Osintgram","stars":12474,"language":"Python","topics":"malware,pentesting,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname"} +{"full_name":"DavidBuchanan314/ambiguous-png-packer","owner":"DavidBuchanan314","name":"ambiguous-png-packer","description":"Craft PNG files that appear completely different in Apple software [NOW PATCHED]","html_url":"https://github.com/DavidBuchanan314/ambiguous-png-packer","stars":1061,"language":"Python","topics":"exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Craft PNG files that appear completely different in Apple software [NOW PATCHED]"} +{"full_name":"DedSecInside/TorBot","owner":"DedSecInside","name":"TorBot","description":"Dark Web OSINT Tool","html_url":"https://github.com/DedSecInside/TorBot","stars":3897,"language":"Python","topics":"network,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Dark Web OSINT Tool"} +{"full_name":"DeimosC2/DeimosC2","owner":"DeimosC2","name":"DeimosC2","description":"DeimosC2 is a Golang command and control framework for post-exploitation.","html_url":"https://github.com/DeimosC2/DeimosC2","stars":1152,"language":"Vue","topics":"post-exploitation,exploit,red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"DeimosC2 is a Golang command and control framework for post-exploitation."} +{"full_name":"Dheerajmadhukar/karma_v2","owner":"Dheerajmadhukar","name":"karma_v2","description":"⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Reconnaissance (framework)","html_url":"https://github.com/Dheerajmadhukar/karma_v2","stars":954,"language":"Shell","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Reconnaissance (framework)"} +{"full_name":"Dliv3/Venom","owner":"Dliv3","name":"Venom","description":"Venom - A Multi-hop Proxy for Penetration Testers","html_url":"https://github.com/Dliv3/Venom","stars":2152,"language":"Go","topics":"malware,pentesting,red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Venom - A Multi-hop Proxy for Penetration Testers"} +{"full_name":"DominicBreuker/pspy","owner":"DominicBreuker","name":"pspy","description":"Monitor linux processes without root permissions","html_url":"https://github.com/DominicBreuker/pspy","stars":5934,"language":"Go","topics":"malware,pentesting,privilege-escalation","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Monitor linux processes without root permissions"} +{"full_name":"DominicBreuker/stego-toolkit","owner":"DominicBreuker","name":"stego-toolkit","description":"Collection of steganography tools - helps with CTF challenges","html_url":"https://github.com/DominicBreuker/stego-toolkit","stars":2645,"language":"Shell","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Collection of steganography tools - helps with CTF challenges"} +{"full_name":"Drew-Alleman/DataSurgeon","owner":"Drew-Alleman","name":"DataSurgeon","description":"Quickly Extracts IP's, Email Addresses, Hashes, Files, Credit Cards, Social Security Numbers and a lot More From Text","html_url":"https://github.com/Drew-Alleman/DataSurgeon","stars":883,"language":"Rust","topics":"forensics,pentesting,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Quickly Extracts IP's, Email Addresses, Hashes, Files, Credit Cards, Social Security Numbers and a lot More From Text"} +{"full_name":"Ed1s0nZ/CyberStrikeAI","owner":"Ed1s0nZ","name":"CyberStrikeAI","description":"CyberStrikeAI is an AI-native security testing platform built in Go. It integrates 100+ security tools, an intelligent orchestration engine, role-based testing with predefined security roles, a skills system with specialized testing skills, and comprehensive lifecycle management capabilities.","html_url":"https://github.com/Ed1s0nZ/CyberStrikeAI","stars":3027,"language":"Go","topics":"malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"CyberStrikeAI is an AI-native security testing platform built in Go. It integrates 100+ security tools, an intelligent orchestration engine, role-based testing with predefined security roles, a skills system with specialized testing skills, and comprehensive lifecycle management capabilities."} +{"full_name":"Ekultek/WhatBreach","owner":"Ekultek","name":"WhatBreach","description":"OSINT tool to find breached emails, databases, pastes, and relevant information","html_url":"https://github.com/Ekultek/WhatBreach","stars":1527,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"OSINT tool to find breached emails, databases, pastes, and relevant information"} +{"full_name":"ElectronicCats/CatSniffer","owner":"ElectronicCats","name":"CatSniffer","description":"CatSniffer is an original multiprotocol and multiband board for sniffing, communicating, and attacking IoT (Internet of Things) devices using the latest radio IoT protocols. It is a highly portable USB stick that integrates TI CC1352, Semtech SX1262, and an RP2040 for V3 or a Microchip SAMD21E17 for V2","html_url":"https://github.com/ElectronicCats/CatSniffer","stars":827,"language":"Python","topics":"malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"CatSniffer is an original multiprotocol and multiband board for sniffing, communicating, and attacking IoT (Internet of Things) devices using the latest radio IoT protocols. It is a highly portable USB stick that integrates TI CC1352, Semtech SX1262, and an RP2040 for V3 or a Microchip SAMD21E17 for V2"} +{"full_name":"EnableSecurity/sipvicious","owner":"EnableSecurity","name":"sipvicious","description":"SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.","html_url":"https://github.com/EnableSecurity/sipvicious","stars":1063,"language":"Python","topics":"malware,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking."} +{"full_name":"EntySec/Ghost","owner":"EntySec","name":"Ghost","description":"Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device.","html_url":"https://github.com/EntySec/Ghost","stars":3301,"language":"Python","topics":"post-exploitation,exploit,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device."} +{"full_name":"EquiFox/KsDumper","owner":"EquiFox","name":"KsDumper","description":"Dumping processes using the power of kernel space !","html_url":"https://github.com/EquiFox/KsDumper","stars":1045,"language":"C#","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Dumping processes using the power of kernel space !"} +{"full_name":"Err0r-ICA/Ransomware","owner":"Err0r-ICA","name":"Ransomware","description":"Ransomwares Collection. Don't Run Them on Your Device.","html_url":"https://github.com/Err0r-ICA/Ransomware","stars":780,"language":"Shell","topics":"malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Ransomwares Collection. Don't Run Them on Your Device."} +{"full_name":"Err0r-ICA/TermuxCyberArmy","owner":"Err0r-ICA","name":"TermuxCyberArmy","description":"TermuxCyberArmy is a cybersecurity toolkit designed for Termux, primarily facilitating various hacking and scripting tasks. Notable features include compatibility with multiple Linux distributions such as Kali Linux and Parrot OS, as well as ease of installation using basic command-line operations. The tool is particularly suited for security practitioners seeking to enhance their skills in penetration testing and ethical hacking.","html_url":"https://github.com/Err0r-ICA/TermuxCyberArmy","stars":1531,"language":"Shell","topics":"security-tools","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"TermuxCyberArmy is a cybersecurity toolkit designed for Termux, primarily facilitating various hacking and scripting tasks. Notable features include compatibility with multiple Linux distributions such as Kali Linux and Parrot OS, as well as ease of installation using basic command-line operations. The tool is particularly suited for security practitioners seeking to enhance their skills in penetration testing and ethical hacking."} +{"full_name":"Esc4iCEscEsc/skanuvaty","owner":"Esc4iCEscEsc","name":"skanuvaty","description":"Dangerously fast DNS/network/port scanner","html_url":"https://github.com/Esc4iCEscEsc/skanuvaty","stars":923,"language":"Rust","topics":"malware,network,pentesting,osint,scanner,red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Dangerously fast DNS/network/port scanner"} +{"full_name":"Eugnis/spectre-attack","owner":"Eugnis","name":"spectre-attack","description":"Example of using revealed \"Spectre\" exploit (CVE-2017-5753 and CVE-2017-5715)","html_url":"https://github.com/Eugnis/spectre-attack","stars":772,"language":"C","topics":"exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Example of using revealed \"Spectre\" exploit (CVE-2017-5753 and CVE-2017-5715)"} +{"full_name":"Fadi002/de4py","owner":"Fadi002","name":"de4py","description":"The ultimate AI-powered toolkit for python reverse engineering","html_url":"https://github.com/Fadi002/de4py","stars":966,"language":"Python","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"The ultimate AI-powered toolkit for python reverse engineering"} +{"full_name":"Fahrj/reverse-ssh","owner":"Fahrj","name":"reverse-ssh","description":"Statically-linked ssh server with reverse shell functionality for CTFs and such","html_url":"https://github.com/Fahrj/reverse-ssh","stars":1036,"language":"Go","topics":"malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Statically-linked ssh server with reverse shell functionality for CTFs and such"} +{"full_name":"Findomain/Findomain","owner":"Findomain","name":"Findomain","description":"The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, multiple API Keys for sources and much more.","html_url":"https://github.com/Findomain/Findomain","stars":3704,"language":"Rust","topics":"scanner,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, multiple API Keys for sources and much more."} +{"full_name":"ForbiddenProgrammer/conti-pentester-guide-leak","owner":"ForbiddenProgrammer","name":"conti-pentester-guide-leak","description":"Leaked pentesting manuals given to Conti ransomware crooks","html_url":"https://github.com/ForbiddenProgrammer/conti-pentester-guide-leak","stars":1076,"language":"Batchfile","topics":"red-team,malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Leaked pentesting manuals given to Conti ransomware crooks"} +{"full_name":"ForceGT/Tata-Sky-IPTV","owner":"ForceGT","name":"Tata-Sky-IPTV","description":"The Tata Sky/Play IPTV Script generator is a tool that creates an m3u playlist containing direct streamable files, specifically designed for users with a Tata Sky subscription. It offers both an easy-to-use app and a command-line script for generating the playlist, with features like automatic login credential storage and expiration notifications for the generated playlist. This tool is primarily aimed at facilitating seamless access to subscribed channels through compatible IPTV applications.","html_url":"https://github.com/ForceGT/Tata-Sky-IPTV","stars":712,"language":"Python","topics":"malware,reverse-engineering","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"The Tata Sky/Play IPTV Script generator is a tool that creates an m3u playlist containing direct streamable files, specifically designed for users with a Tata Sky subscription. It offers both an easy-to-use app and a command-line script for generating the playlist, with features like automatic login credential storage and expiration notifications for the generated playlist. This tool is primarily aimed at facilitating seamless access to subscribed channels through compatible IPTV applications."} +{"full_name":"FrenchYeti/dexcalibur","owner":"FrenchYeti","name":"dexcalibur","description":"[Official] Android reverse engineering tool focused on dynamic instrumentation automation leveraging Frida. It disassembles dex, analyzes it statically, generates hooks, discovers reflected methods, stores intercepted data and does new things from it. Its aim is to be an all-in-one Android reverse engineering platform.","html_url":"https://github.com/FrenchYeti/dexcalibur","stars":1123,"language":"JavaScript","topics":"reverse-engineering,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"[Official] Android reverse engineering tool focused on dynamic instrumentation automation leveraging Frida. It disassembles dex, analyzes it statically, generates hooks, discovers reflected methods, stores intercepted data and does new things from it. Its aim is to be an all-in-one Android reverse engineering platform."} +{"full_name":"FunnyWolf/Viper","owner":"FunnyWolf","name":"Viper","description":"Adversary simulation and Red teaming platform with AI","html_url":"https://github.com/FunnyWolf/Viper","stars":5003,"topics":"red-team,post-exploitation,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Adversary simulation and Red teaming platform with AI"} +{"full_name":"FuzzingLabs/fuzzforge_ai","owner":"FuzzingLabs","name":"fuzzforge_ai","description":"AI-powered workflow automation and AI Agents platform for AppSec, Fuzzing \u0026 Offensive Security. Automate vulnerability discovery with intelligent fuzzing, AI-driven analysis, and a marketplace of security tools.","html_url":"https://github.com/FuzzingLabs/fuzzforge_ai","stars":770,"language":"Python","topics":"exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"AI-powered workflow automation and AI Agents platform for AppSec, Fuzzing \u0026 Offensive Security. Automate vulnerability discovery with intelligent fuzzing, AI-driven analysis, and a marketplace of security tools."} +{"full_name":"GH05T-HUNTER5/GH05T-INSTA","owner":"GH05T-HUNTER5","name":"GH05T-INSTA","description":"Insta BruteForce { GH05T-INSTA 7.01 } Fork it...","html_url":"https://github.com/GH05T-HUNTER5/GH05T-INSTA","stars":800,"language":"Shell","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Insta BruteForce { GH05T-INSTA 7.01 } Fork it..."} +{"full_name":"GH05TCREW/pentestagent","owner":"GH05TCREW","name":"pentestagent","description":"PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.","html_url":"https://github.com/GH05TCREW/pentestagent","stars":1776,"language":"Python","topics":"red-team,malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows."} +{"full_name":"GJDuck/e9patch","owner":"GJDuck","name":"e9patch","description":"A powerful static binary rewriting tool","html_url":"https://github.com/GJDuck/e9patch","stars":1097,"language":"C","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A powerful static binary rewriting tool"} +{"full_name":"GONZOsint/geowifi","owner":"GONZOsint","name":"geowifi","description":"Search WiFi geolocation data by BSSID and SSID on different public databases.","html_url":"https://github.com/GONZOsint/geowifi","stars":1215,"language":"Python","topics":"osint,network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Search WiFi geolocation data by BSSID and SSID on different public databases."} +{"full_name":"GTFOBins/GTFOBins.github.io","owner":"GTFOBins","name":"GTFOBins.github.io","description":"GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems.","html_url":"https://github.com/GTFOBins/GTFOBins.github.io","stars":12826,"language":"YAML","topics":"post-exploitation,exploit,red-team,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems."} +{"full_name":"GamehunterKaan/AutoPWN-Suite","owner":"GamehunterKaan","name":"AutoPWN-Suite","description":"AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.","html_url":"https://github.com/GamehunterKaan/AutoPWN-Suite","stars":1049,"language":"Python","topics":"scanner,exploit,malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically."} +{"full_name":"Ge0rg3/requests-ip-rotator","owner":"Ge0rg3","name":"requests-ip-rotator","description":"A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing.","html_url":"https://github.com/Ge0rg3/requests-ip-rotator","stars":1647,"language":"Python","topics":"malware,web-security,network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing."} +{"full_name":"Getshell/LinuxTQ","owner":"Getshell","name":"LinuxTQ","description":"《Linux提权方法论》","html_url":"https://github.com/Getshell/LinuxTQ","stars":805,"topics":"privilege-escalation","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"《Linux提权方法论》"} +{"full_name":"Gh0u1L5/WechatMagician","owner":"Gh0u1L5","name":"WechatMagician","description":"WechatMagician is a Xposed module written in Kotlin, that allows you to completely control your Wechat.","html_url":"https://github.com/Gh0u1L5/WechatMagician","stars":1893,"language":"Kotlin","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"WechatMagician is a Xposed module written in Kotlin, that allows you to completely control your Wechat."} +{"full_name":"Gh0u1L5/WechatSpellbook","owner":"Gh0u1L5","name":"WechatSpellbook","description":"Wechat Spellbook 是一个使用Kotlin编写的开源微信插件框架，底层需要 Xposed 或 VirtualXposed 等Hooking框架的支持，而顶层可以轻松对接Java、Kotlin、Scala等JVM系语言。让程序员能够在几分钟内编写出简单的微信插件，随意揉捏微信的内部逻辑。","html_url":"https://github.com/Gh0u1L5/WechatSpellbook","stars":1736,"language":"Kotlin","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Wechat Spellbook 是一个使用Kotlin编写的开源微信插件框架，底层需要 Xposed 或 VirtualXposed 等Hooking框架的支持，而顶层可以轻松对接Java、Kotlin、Scala等JVM系语言。让程序员能够在几分钟内编写出简单的微信插件，随意揉捏微信的内部逻辑。"} +{"full_name":"GhostManager/Ghostwriter","owner":"GhostManager","name":"Ghostwriter","description":"The SpecterOps project management and reporting engine","html_url":"https://github.com/GhostManager/Ghostwriter","stars":1774,"language":"Python","topics":"pentesting,red-team,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"The SpecterOps project management and reporting engine"} +{"full_name":"GhostTroops/TOP","owner":"GhostTroops","name":"TOP","description":"TOP is a vulnerability cataloging tool designed for bug bounty hunters and penetration testers, focusing on proof-of-concept (PoC) exploits for various Common Vulnerabilities and Exposures (CVEs) from recent years. It compiles a list of notable CVEs along with their respective exploits and corresponding GitHub repositories, thereby facilitating ease of access and research for security professionals. Key features include organized yearly summaries of significant vulnerabilities, making it an essential resource for monitoring and exploiting security weaknesses.","html_url":"https://github.com/GhostTroops/TOP","stars":721,"language":"Shell","topics":"exploit,pentesting","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"TOP is a vulnerability cataloging tool designed for bug bounty hunters and penetration testers, focusing on proof-of-concept (PoC) exploits for various Common Vulnerabilities and Exposures (CVEs) from recent years. It compiles a list of notable CVEs along with their respective exploits and corresponding GitHub repositories, thereby facilitating ease of access and research for security professionals. Key features include organized yearly summaries of significant vulnerabilities, making it an essential resource for monitoring and exploiting security weaknesses."} +{"full_name":"GhostTroops/scan4all","owner":"GhostTroops","name":"scan4all","description":"Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...","html_url":"https://github.com/GhostTroops/scan4all","stars":5974,"language":"Go","topics":"pentesting,osint,scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)..."} +{"full_name":"GiacomoLaw/Keylogger","owner":"GiacomoLaw","name":"Keylogger","description":"A simple keylogger for Windows, Linux and Mac","html_url":"https://github.com/GiacomoLaw/Keylogger","stars":2363,"language":"C++","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A simple keylogger for Windows, Linux and Mac"} +{"full_name":"GitGuardian/APISecurityBestPractices","owner":"GitGuardian","name":"APISecurityBestPractices","description":"Resources to help you keep secrets (API keys, database credentials, certificates, ...) out of source code and remediate the issue in case of a leaked API key. Made available by GitGuardian.","html_url":"https://github.com/GitGuardian/APISecurityBestPractices","stars":1969,"topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Resources to help you keep secrets (API keys, database credentials, certificates, ...) out of source code and remediate the issue in case of a leaked API key. Made available by GitGuardian."} +{"full_name":"GoSecure/malboxes","owner":"GoSecure","name":"malboxes","description":"Builds malware analysis Windows VMs so that you don't have to.","html_url":"https://github.com/GoSecure/malboxes","stars":1043,"language":"Python","topics":"malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Builds malware analysis Windows VMs so that you don't have to."} +{"full_name":"Gowtham-Darkseid/AutoPentestX","owner":"Gowtham-Darkseid","name":"AutoPentestX","description":"AutoPentestX – Automated Pentesting \u0026 Vulnerability Reporting Tool","html_url":"https://github.com/Gowtham-Darkseid/AutoPentestX","stars":1033,"language":"Python","topics":"malware,pentesting,scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"AutoPentestX – Automated Pentesting \u0026 Vulnerability Reporting Tool"} +{"full_name":"GrammaTech/ddisasm","owner":"GrammaTech","name":"ddisasm","description":"DDisasm is a high-performance disassembler that accurately translates binaries from ELF and PE formats into a reassemblable assembly code representation using the GTIRB intermediate format. Utilizing the Datalog declarative logic programming language, it derives code locations, symbolization, and function boundaries, supporting multiple instruction set architectures including x86, ARM, and MIPS. Notable features include Docker support for easy setup and integration with GTIRB for further binary analysis and manipulation.","html_url":"https://github.com/GrammaTech/ddisasm","stars":741,"language":"C++","topics":"malware,reverse-engineering","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"DDisasm is a high-performance disassembler that accurately translates binaries from ELF and PE formats into a reassemblable assembly code representation using the GTIRB intermediate format. Utilizing the Datalog declarative logic programming language, it derives code locations, symbolization, and function boundaries, supporting multiple instruction set architectures including x86, ARM, and MIPS. Notable features include Docker support for easy setup and integration with GTIRB for further binary analysis and manipulation."} +{"full_name":"GreenmaskIO/greenmask","owner":"GreenmaskIO","name":"greenmask","description":"Database anonymization and synthetic data generation tool","html_url":"https://github.com/GreenmaskIO/greenmask","stars":1635,"language":"Go","topics":"malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Database anonymization and synthetic data generation tool"} +{"full_name":"GrrrDog/Java-Deserialization-Cheat-Sheet","owner":"GrrrDog","name":"Java-Deserialization-Cheat-Sheet","description":"The cheat sheet about Java Deserialization vulnerabilities","html_url":"https://github.com/GrrrDog/Java-Deserialization-Cheat-Sheet","stars":3173,"topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"The cheat sheet about Java Deserialization vulnerabilities"} +{"full_name":"GrrrDog/weird_proxies","owner":"GrrrDog","name":"weird_proxies","description":"Reverse proxies cheatsheet","html_url":"https://github.com/GrrrDog/weird_proxies","stars":1854,"language":"Python","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Reverse proxies cheatsheet"} +{"full_name":"H4ckForJob/dirmap","owner":"H4ckForJob","name":"dirmap","description":"An advanced web directory \u0026 file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具，功能将会强于DirBuster、Dirsearch、cansina、御剑。","html_url":"https://github.com/H4ckForJob/dirmap","stars":3358,"language":"Python","topics":"pentesting,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An advanced web directory \u0026 file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具，功能将会强于DirBuster、Dirsearch、cansina、御剑。"} +{"full_name":"HIllya51/LunaTranslator","owner":"HIllya51","name":"LunaTranslator","description":"视觉小说翻译器 / Visual Novel Translator","html_url":"https://github.com/HIllya51/LunaTranslator","stars":10950,"language":"C++","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"视觉小说翻译器 / Visual Novel Translator"} +{"full_name":"Hack-with-Github/Powerful-Plugins","owner":"Hack-with-Github","name":"Powerful-Plugins","description":"Powerful plugins and add-ons for hackers","html_url":"https://github.com/Hack-with-Github/Powerful-Plugins","stars":891,"topics":"osint,web-security","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Powerful plugins and add-ons for hackers"} +{"full_name":"HackOvert/AntiDBG","owner":"HackOvert","name":"AntiDBG","description":"A bunch of Windows anti-debugging tricks for x86 and x64.","html_url":"https://github.com/HackOvert/AntiDBG","stars":812,"language":"C++","topics":"reverse-engineering,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A bunch of Windows anti-debugging tricks for x86 and x64."} +{"full_name":"Hackertrackersj/Instabruteforce","owner":"Hackertrackersj","name":"Instabruteforce","description":"hacking-tool termux-tools termux noob-friendly instagram-bot bruteforce-password-cracker wordlist-technique","html_url":"https://github.com/Hackertrackersj/Instabruteforce","stars":1666,"language":"Python","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"hacking-tool termux-tools termux noob-friendly instagram-bot bruteforce-password-cracker wordlist-technique"} +{"full_name":"Hacking-Notes/Hacker-Roadmap","owner":"Hacking-Notes","name":"Hacker-Roadmap","description":"A detailed plan to achieve proficiency in hacking and penetration testing, with pathways including obtaining a degree in cybersecurity or earning relevant certifications.","html_url":"https://github.com/Hacking-Notes/Hacker-Roadmap","stars":1237,"topics":"pentesting,red-team,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A detailed plan to achieve proficiency in hacking and penetration testing, with pathways including obtaining a degree in cybersecurity or earning relevant certifications."} +{"full_name":"Hackmanit/Web-Cache-Vulnerability-Scanner","owner":"Hackmanit","name":"Web-Cache-Vulnerability-Scanner","description":"Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).","html_url":"https://github.com/Hackmanit/Web-Cache-Vulnerability-Scanner","stars":1160,"language":"Go","topics":"malware,pentesting,scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/)."} +{"full_name":"Hackplayers/evil-winrm","owner":"Hackplayers","name":"evil-winrm","description":"The ultimate WinRM shell for hacking/pentesting","html_url":"https://github.com/Hackplayers/evil-winrm","stars":5298,"language":"Ruby","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"The ultimate WinRM shell for hacking/pentesting"} +{"full_name":"HanaokaYuzu/Gemini-API","owner":"HanaokaYuzu","name":"Gemini-API","description":"✨ Reverse-engineered Python API for Google Gemini web app","html_url":"https://github.com/HanaokaYuzu/Gemini-API","stars":2442,"language":"Python","topics":"reverse-engineering,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"✨ Reverse-engineered Python API for Google Gemini web app"} +{"full_name":"Hari-prasaanth/Web-App-Pentest-Checklist","owner":"Hari-prasaanth","name":"Web-App-Pentest-Checklist","description":"A OWASP Based Checklist With 500+ Test Cases","html_url":"https://github.com/Hari-prasaanth/Web-App-Pentest-Checklist","stars":862,"topics":"malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A OWASP Based Checklist With 500+ Test Cases"} +{"full_name":"HexHive/retrowrite","owner":"HexHive","name":"retrowrite","description":"Retrowrite is a static binary rewriter designed for x64 and aarch64 architectures, enabling the insertion of instrumentation into binaries without the need for source code, thereby supporting use cases in fuzzing and sanitization. The tool employs the symbolization technique to ensure zero overhead during binary rewriting and includes features such as AFL-coverage and ASan instrumentation, along with a variant (KRetrowrite) specifically for rewriting Linux kernel modules. Different algorithms and supported features are available for the x64 and arm64 versions, accommodating various binary types and compiler specifications.","html_url":"https://github.com/HexHive/retrowrite","stars":742,"language":"Python","topics":"reverse-engineering","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"Retrowrite is a static binary rewriter designed for x64 and aarch64 architectures, enabling the insertion of instrumentation into binaries without the need for source code, thereby supporting use cases in fuzzing and sanitization. The tool employs the symbolization technique to ensure zero overhead during binary rewriting and includes features such as AFL-coverage and ASan instrumentation, along with a variant (KRetrowrite) specifically for rewriting Linux kernel modules. Different algorithms and supported features are available for the x64 and arm64 versions, accommodating various binary types and compiler specifications."} +{"full_name":"HolyBugx/HolyTips","owner":"HolyBugx","name":"HolyTips","description":"A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.","html_url":"https://github.com/HolyBugx/HolyTips","stars":1985,"topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security."} +{"full_name":"HowToFind-bot/osint-tools","owner":"HowToFind-bot","name":"osint-tools","description":"OSINT open-source tools catalog","html_url":"https://github.com/HowToFind-bot/osint-tools","stars":1171,"topics":"cryptography,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"OSINT open-source tools catalog"} +{"full_name":"HunxByts/GhostTrack","owner":"HunxByts","name":"GhostTrack","description":"Useful tool to track location or mobile number","html_url":"https://github.com/HunxByts/GhostTrack","stars":8228,"language":"Python","topics":"osint,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Useful tool to track location or mobile number"} +{"full_name":"HyperDbg/HyperDbg","owner":"HyperDbg","name":"HyperDbg","description":"State-of-the-art native debugging tools","html_url":"https://github.com/HyperDbg/HyperDbg","stars":3685,"language":"C","topics":"reverse-engineering,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"State-of-the-art native debugging tools"} +{"full_name":"I-Am-Jakoby/PowerShell-for-Hackers","owner":"I-Am-Jakoby","name":"PowerShell-for-Hackers","description":"This repository is a collection of powershell functions every hacker should know","html_url":"https://github.com/I-Am-Jakoby/PowerShell-for-Hackers","stars":1447,"language":"PowerShell","topics":"malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"This repository is a collection of powershell functions every hacker should know"} +{"full_name":"INotGreen/XiebroC2","owner":"INotGreen","name":"XiebroC2","description":"渗透测试C2、支持Lua插件扩展、域前置/CDN上线、自定义profile、前置sRDI、文件管理、进程管理、内存加载、截图、反向代理、分组管理","html_url":"https://github.com/INotGreen/XiebroC2","stars":1390,"language":"Go","topics":"pentesting,red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"渗透测试C2、支持Lua插件扩展、域前置/CDN上线、自定义profile、前置sRDI、文件管理、进程管理、内存加载、截图、反向代理、分组管理"} +{"full_name":"ION28/BLUESPAWN","owner":"ION28","name":"BLUESPAWN","description":"An Active Defense and EDR software to empower Blue Teams","html_url":"https://github.com/ION28/BLUESPAWN","stars":1316,"language":"C++","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An Active Defense and EDR software to empower Blue Teams"} +{"full_name":"Ice3man543/SubOver","owner":"Ice3man543","name":"SubOver","description":"A Powerful Subdomain Takeover Tool","html_url":"https://github.com/Ice3man543/SubOver","stars":962,"language":"Go","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A Powerful Subdomain Takeover Tool"} +{"full_name":"Idov31/Nidhogg","owner":"Idov31","name":"Nidhogg","description":"Windows rootkit for Intel x64 with 25+ features, demonstrating rootkit techniques compatible with all Windows 10 and Windows 11 versions.","html_url":"https://github.com/Idov31/Nidhogg","stars":2279,"language":"C++","topics":"red-team,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Windows rootkit for Intel x64 with 25+ features, demonstrating rootkit techniques compatible with all Windows 10 and Windows 11 versions."} +{"full_name":"Idov31/Sandman","owner":"Idov31","name":"Sandman","description":"Sandman is a NTP based backdoor for hardened networks.","html_url":"https://github.com/Idov31/Sandman","stars":817,"language":"C#","topics":"red-team,network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Sandman is a NTP based backdoor for hardened networks."} +{"full_name":"Ignitetechnologies/Privilege-Escalation","owner":"Ignitetechnologies","name":"Privilege-Escalation","description":"This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.","html_url":"https://github.com/Ignitetechnologies/Privilege-Escalation","stars":3570,"topics":"privilege-escalation","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples."} +{"full_name":"Impact-I/reFlutter","owner":"Impact-I","name":"reFlutter","description":"Flutter Reverse Engineering Framework","html_url":"https://github.com/Impact-I/reFlutter","stars":2528,"language":"Python","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Flutter Reverse Engineering Framework"} +{"full_name":"InQuest/awesome-yara","owner":"InQuest","name":"awesome-yara","description":"A curated list of awesome YARA rules, tools, and people.","html_url":"https://github.com/InQuest/awesome-yara","stars":4165,"topics":"malware,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A curated list of awesome YARA rules, tools, and people."} +{"full_name":"InQuest/malware-samples","owner":"InQuest","name":"malware-samples","description":"A collection of malware samples and relevant dissection information, most probably referenced from http://blog.inquest.net","html_url":"https://github.com/InQuest/malware-samples","stars":933,"language":"ActionScript","topics":"malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A collection of malware samples and relevant dissection information, most probably referenced from http://blog.inquest.net"} +{"full_name":"IncredibleHacker/insta-hack","owner":"IncredibleHacker","name":"insta-hack","description":"All in one Instagram hacking tool available (Insta information gathering, Insta brute force, Insta account auto repoter)","html_url":"https://github.com/IncredibleHacker/insta-hack","stars":1059,"language":"Shell","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"All in one Instagram hacking tool available (Insta information gathering, Insta brute force, Insta account auto repoter)"} +{"full_name":"Integration-IT/Active-Directory-Exploitation-Cheat-Sheet","owner":"Integration-IT","name":"Active-Directory-Exploitation-Cheat-Sheet","description":"A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.","html_url":"https://github.com/Integration-IT/Active-Directory-Exploitation-Cheat-Sheet","stars":2699,"language":"PowerShell","topics":"malware,pentesting,privilege-escalation,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A cheat sheet that contains common enumeration and attack methods for Windows Active Directory."} +{"full_name":"IntelligenzaArtificiale/Free-Auto-GPT","owner":"IntelligenzaArtificiale","name":"Free-Auto-GPT","description":"Free Auto GPT with NO paids API is a repository that offers a simple version of Auto GPT, an autonomous AI agent capable of performing tasks independently. Unlike other versions, our implementation does not rely on any paid OpenAI API, making it accessible to anyone.","html_url":"https://github.com/IntelligenzaArtificiale/Free-Auto-GPT","stars":2540,"language":"Python","topics":"reverse-engineering,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Free Auto GPT with NO paids API is a repository that offers a simple version of Auto GPT, an autonomous AI agent capable of performing tasks independently. Unlike other versions, our implementation does not rely on any paid OpenAI API, making it accessible to anyone."} +{"full_name":"ItIsMeCall911/Awesome-Telegram-OSINT","owner":"ItIsMeCall911","name":"Awesome-Telegram-OSINT","description":"📚 A Curated List of Awesome Telegram OSINT Tools, Sites \u0026 Resources","html_url":"https://github.com/ItIsMeCall911/Awesome-Telegram-OSINT","stars":2612,"topics":"osint,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"📚 A Curated List of Awesome Telegram OSINT Tools, Sites \u0026 Resources"} +{"full_name":"JCodesMore/ai-website-cloner-template","owner":"JCodesMore","name":"ai-website-cloner-template","description":"The AI Website Cloner Template is a sophisticated tool designed to reverse-engineer any website into a modern Next.js codebase using AI coding agents. By pointing the tool at a target URL, it performs a comprehensive analysis to extract design tokens and assets, generate component specifications, and facilitate parallelized reconstruction of the site’s sections. Key features include support for multiple AI agents, a detailed multi-phase cloning pipeline, and compatibility with modern web technologies like Next.js and Tailwind CSS.","html_url":"https://github.com/JCodesMore/ai-website-cloner-template","stars":5451,"language":"TypeScript","topics":"reverse-engineering","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"The AI Website Cloner Template is a sophisticated tool designed to reverse-engineer any website into a modern Next.js codebase using AI coding agents. By pointing the tool at a target URL, it performs a comprehensive analysis to extract design tokens and assets, generate component specifications, and facilitate parallelized reconstruction of the site’s sections. Key features include support for multiple AI agents, a detailed multi-phase cloning pipeline, and compatibility with modern web technologies like Next.js and Tailwind CSS."} +{"full_name":"JJTech0130/pypush","owner":"JJTech0130","name":"pypush","description":"Python APNs and iMessage client","html_url":"https://github.com/JJTech0130/pypush","stars":3714,"language":"Python","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Python APNs and iMessage client"} +{"full_name":"JKornev/hidden","owner":"JKornev","name":"hidden","description":"🇺🇦 Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc","html_url":"https://github.com/JKornev/hidden","stars":2007,"language":"C","topics":"malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"🇺🇦 Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc"} +{"full_name":"JSREI/js-cookie-monitor-debugger-hook","owner":"JSREI","name":"js-cookie-monitor-debugger-hook","description":"js cookie逆向利器：js cookie变动监控可视化工具 \u0026 js cookie hook打条件断点","html_url":"https://github.com/JSREI/js-cookie-monitor-debugger-hook","stars":772,"language":"TypeScript","topics":"red-team,reverse-engineering,web-security","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"js cookie逆向利器：js cookie变动监控可视化工具 \u0026 js cookie hook打条件断点"} +{"full_name":"JackJuly/linkook","owner":"JackJuly","name":"linkook","description":"🔍 An OSINT tool for discovering linked social accounts and associated emails across multiple platforms using a single username.","html_url":"https://github.com/JackJuly/linkook","stars":922,"language":"Python","topics":"pentesting,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"🔍 An OSINT tool for discovering linked social accounts and associated emails across multiple platforms using a single username."} +{"full_name":"Jayy001/Search-That-Hash","owner":"Jayy001","name":"Search-That-Hash","description":"🔎Searches Hash APIs to crack your hash quickly🔎 If hash is not found, automatically pipes into HashCat⚡","html_url":"https://github.com/Jayy001/Search-That-Hash","stars":1401,"language":"Python","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"🔎Searches Hash APIs to crack your hash quickly🔎 If hash is not found, automatically pipes into HashCat⚡"} +{"full_name":"JetBrains/fernflower","owner":"JetBrains","name":"fernflower","description":"Decompiler from Java bytecode to Java, used in IntelliJ IDEA.","html_url":"https://github.com/JetBrains/fernflower","stars":4209,"language":"Java","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Decompiler from Java bytecode to Java, used in IntelliJ IDEA."} +{"full_name":"Jieyab89/OSINT-Cheat-sheet","owner":"Jieyab89","name":"OSINT-Cheat-sheet","description":"OSINT cheat sheet, list OSINT tools, wiki, dataset, article, book , red team OSINT for hackers and OSINT tips and OSINT branch. This repository will grow every time will research, there is a research, science and technology, tutorial. Please use it wisely.","html_url":"https://github.com/Jieyab89/OSINT-Cheat-sheet","stars":1814,"language":"HTML","topics":"red-team,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"OSINT cheat sheet, list OSINT tools, wiki, dataset, article, book , red team OSINT for hackers and OSINT tips and OSINT branch. This repository will grow every time will research, there is a research, science and technology, tutorial. Please use it wisely."} +{"full_name":"JoasASantos/NeuroSploit","owner":"JoasASantos","name":"NeuroSploit","description":"NeuroSploit is an advanced, AI-powered penetration testing framework designed to automate and augment various aspects of offensive security operations. Leveraging the capabilities of large language models (LLMs).","html_url":"https://github.com/JoasASantos/NeuroSploit","stars":964,"language":"Python","topics":"malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"NeuroSploit is an advanced, AI-powered penetration testing framework designed to automate and augment various aspects of offensive security operations. Leveraging the capabilities of large language models (LLMs)."} +{"full_name":"JoasASantos/OSCE3-Complete-Guide","owner":"JoasASantos","name":"OSCE3-Complete-Guide","description":"OSWE, OSEP, OSED, OSEE","html_url":"https://github.com/JoasASantos/OSCE3-Complete-Guide","stars":3791,"topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"OSWE, OSEP, OSED, OSEE"} +{"full_name":"JonathanSalwan/ROPgadget","owner":"JonathanSalwan","name":"ROPgadget","description":"This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.","html_url":"https://github.com/JonathanSalwan/ROPgadget","stars":4392,"language":"Python","topics":"exploit,reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures."} +{"full_name":"JonathanSalwan/Tigress_protection","owner":"JonathanSalwan","name":"Tigress_protection","description":"Playing with the Tigress software protection. Break some of its protections and solve their reverse engineering challenges. Automatic deobfuscation using symbolic execution, taint analysis and LLVM.","html_url":"https://github.com/JonathanSalwan/Tigress_protection","stars":888,"language":"LLVM","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Playing with the Tigress software protection. Break some of its protections and solve their reverse engineering challenges. Automatic deobfuscation using symbolic execution, taint analysis and LLVM."} +{"full_name":"JonathanSalwan/Triton","owner":"JonathanSalwan","name":"Triton","description":"Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.","html_url":"https://github.com/JonathanSalwan/Triton","stars":4103,"language":"C++","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code."} +{"full_name":"JustasMasiulis/lazy_importer","owner":"JustasMasiulis","name":"lazy_importer","description":"library for importing functions from dlls in a hidden, reverse engineer unfriendly way","html_url":"https://github.com/JustasMasiulis/lazy_importer","stars":1907,"language":"C++","topics":"reverse-engineering,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"library for importing functions from dlls in a hidden, reverse engineer unfriendly way"} +{"full_name":"JusticeRage/Gepetto","owner":"JusticeRage","name":"Gepetto","description":"IDA plugin which queries language models to speed up reverse-engineering","html_url":"https://github.com/JusticeRage/Gepetto","stars":3388,"language":"Python","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"IDA plugin which queries language models to speed up reverse-engineering"} +{"full_name":"Juude/droidReverse","owner":"Juude","name":"droidReverse","description":"reverse engineering tools for android（android 逆向工程工具集）","html_url":"https://github.com/Juude/droidReverse","stars":2012,"language":"Shell","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"reverse engineering tools for android（android 逆向工程工具集）"} +{"full_name":"K2SOsint/Legendary_OSINT","owner":"K2SOsint","name":"Legendary_OSINT","description":"Legendary OSINT is a comprehensive curated repository of open-source intelligence (OSINT) tools and resources designed to aid users in various investigative scenarios. It encompasses a diverse range of categories, including social media searches, geospatial analysis, malware investigation, and dark web monitoring, facilitating enhanced data collection and analysis for cybersecurity professionals and researchers. Notable features include categorized documentation, contributions from multiple sources, and a focus on responsible usage of third-party tools.","html_url":"https://github.com/K2SOsint/Legendary_OSINT","stars":719,"topics":"osint","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"Legendary OSINT is a comprehensive curated repository of open-source intelligence (OSINT) tools and resources designed to aid users in various investigative scenarios. It encompasses a diverse range of categories, including social media searches, geospatial analysis, malware investigation, and dark web monitoring, facilitating enhanced data collection and analysis for cybersecurity professionals and researchers. Notable features include categorized documentation, contributions from multiple sources, and a focus on responsible usage of third-party tools."} +{"full_name":"KasperskyLab/hrtng","owner":"KasperskyLab","name":"hrtng","description":"IDA Pro plugin with a rich set of features: decryption, deobfuscation, patching, lib code recognition and various pseudocode transformations","html_url":"https://github.com/KasperskyLab/hrtng","stars":1774,"language":"C++","topics":"reverse-engineering,malware,cryptography","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"IDA Pro plugin with a rich set of features: decryption, deobfuscation, patching, lib code recognition and various pseudocode transformations"} +{"full_name":"KeenSecurityLab/BinAbsInspector","owner":"KeenSecurityLab","name":"BinAbsInspector","description":"BinAbsInspector: Vulnerability Scanner for Binaries","html_url":"https://github.com/KeenSecurityLab/BinAbsInspector","stars":1670,"language":"Java","topics":"exploit,reverse-engineering,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"BinAbsInspector: Vulnerability Scanner for Binaries"} +{"full_name":"KeygraphHQ/shannon","owner":"KeygraphHQ","name":"shannon","description":"Shannon Lite is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.","html_url":"https://github.com/KeygraphHQ/shannon","stars":34222,"language":"TypeScript","topics":"exploit,malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Shannon Lite is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production."} +{"full_name":"KuroLabs/stegcloak","owner":"KuroLabs","name":"stegcloak","description":"Hide secrets with invisible characters in plain text securely using passwords 🧙🏻‍♂️⭐","html_url":"https://github.com/KuroLabs/stegcloak","stars":3772,"language":"JavaScript","topics":"malware,cryptography","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Hide secrets with invisible characters in plain text securely using passwords 🧙🏻‍♂️⭐"} +{"full_name":"LasCC/HackTools","owner":"LasCC","name":"HackTools","description":"The all-in-one browser extension for offensive security professionals 🛠","html_url":"https://github.com/LasCC/HackTools","stars":6663,"language":"TypeScript","topics":"red-team,web-security,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"The all-in-one browser extension for offensive security professionals 🛠"} +{"full_name":"Leon406/ToolsFx","owner":"Leon406","name":"ToolsFx","description":"跨平台密码学工具箱。包含编解码，编码转换，加解密， 哈希，MAC，签名，大数运算，压缩，二维码功能，CTF等功能。","html_url":"https://github.com/Leon406/ToolsFx","stars":2004,"language":"Kotlin","topics":"cryptography","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"跨平台密码学工具箱。包含编解码，编码转换，加解密， 哈希，MAC，签名，大数运算，压缩，二维码功能，CTF等功能。"} +{"full_name":"Lifka/hacking-resources","owner":"Lifka","name":"hacking-resources","description":"Hacking resources and cheat sheets. References, tools, scripts, tutorials, and other resources that help offensive and defensive security professionals.","html_url":"https://github.com/Lifka/hacking-resources","stars":2411,"topics":"malware,network,osint,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Hacking resources and cheat sheets. References, tools, scripts, tutorials, and other resources that help offensive and defensive security professionals."} +{"full_name":"LimerBoy/Impulse","owner":"LimerBoy","name":"Impulse","description":":bomb: Impulse Denial-of-service ToolKit","html_url":"https://github.com/LimerBoy/Impulse","stars":2751,"language":"Python","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":":bomb: Impulse Denial-of-service ToolKit"} +{"full_name":"Lissy93/personal-security-checklist","owner":"Lissy93","name":"personal-security-checklist","description":"🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026","html_url":"https://github.com/Lissy93/personal-security-checklist","stars":20993,"language":"TypeScript","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026"} +{"full_name":"Lissy93/web-check","owner":"Lissy93","name":"web-check","description":"🕵️‍♂️ All-in-one OSINT tool for analysing any website","html_url":"https://github.com/Lissy93/web-check","stars":32390,"language":"TypeScript","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"🕵️‍♂️ All-in-one OSINT tool for analysing any website"} +{"full_name":"LostArtefacts/TRX","owner":"LostArtefacts","name":"TRX","description":"Open source re-implementation of Tomb Raider I and Tomb Raider II, along with additional enhancements and bugfixes","html_url":"https://github.com/LostArtefacts/TRX","stars":861,"language":"C","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Open source re-implementation of Tomb Raider I and Tomb Raider II, along with additional enhancements and bugfixes"} +{"full_name":"Lucifer1993/SatanSword","owner":"Lucifer1993","name":"SatanSword","description":"红队综合渗透框架","html_url":"https://github.com/Lucifer1993/SatanSword","stars":1178,"language":"Python","topics":"exploit,pentesting,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"红队综合渗透框架"} +{"full_name":"Lucksi/Mr.Holmes","owner":"Lucksi","name":"Mr.Holmes","description":"A Complete Osint Tool :mag:","html_url":"https://github.com/Lucksi/Mr.Holmes","stars":3149,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A Complete Osint Tool :mag:"} +{"full_name":"LyleMi/Learn-Web-Hacking","owner":"LyleMi","name":"Learn-Web-Hacking","description":"Study Notes For Web Hacking / Web安全学习笔记","html_url":"https://github.com/LyleMi/Learn-Web-Hacking","stars":5185,"language":"Python","topics":"malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Study Notes For Web Hacking / Web安全学习笔记"} +{"full_name":"M4cs/BabySploit","owner":"M4cs","name":"BabySploit","description":":baby: BabySploit Beginner Pentesting Toolkit/Framework Written in Python :snake:","html_url":"https://github.com/M4cs/BabySploit","stars":1045,"language":"HTML","topics":"malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":":baby: BabySploit Beginner Pentesting Toolkit/Framework Written in Python :snake:"} +{"full_name":"M507/RamiGPT","owner":"M507","name":"RamiGPT","description":"Autonomous Privilege Escalation using AI","html_url":"https://github.com/M507/RamiGPT","stars":853,"language":"Shell","topics":"privilege-escalation,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Autonomous Privilege Escalation using AI"} +{"full_name":"MISP/MISP","owner":"MISP","name":"MISP","description":"MISP (core software) - Open Source Threat Intelligence and Sharing Platform","html_url":"https://github.com/MISP/MISP","stars":6195,"language":"PHP","topics":"osint,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"MISP (core software) - Open Source Threat Intelligence and Sharing Platform"} +{"full_name":"MTK911/Attiny85","owner":"MTK911","name":"Attiny85","description":"RubberDucky like payloads for DigiSpark Attiny85","html_url":"https://github.com/MTK911/Attiny85","stars":1609,"language":"C++","topics":"web-security,network,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"RubberDucky like payloads for DigiSpark Attiny85"} +{"full_name":"Maktm/FLIRTDB","owner":"Maktm","name":"FLIRTDB","description":"A community driven collection of IDA FLIRT signature files","html_url":"https://github.com/Maktm/FLIRTDB","stars":1339,"language":"Max","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A community driven collection of IDA FLIRT signature files"} +{"full_name":"Malfrats/xeuledoc","owner":"Malfrats","name":"xeuledoc","description":"Fetch information about a public Google document.","html_url":"https://github.com/Malfrats/xeuledoc","stars":993,"language":"Python","topics":"malware,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Fetch information about a public Google document."} +{"full_name":"Manisso/fsociety","owner":"Manisso","name":"fsociety","description":"fsociety Hacking Tools Pack – A Penetration Testing Framework","html_url":"https://github.com/Manisso/fsociety","stars":11939,"language":"Python","topics":"malware,network,pentesting,scanner,post-exploitation,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"fsociety Hacking Tools Pack – A Penetration Testing Framework"} +{"full_name":"MarCmcbri1982/KawaiiGPT","owner":"MarCmcbri1982","name":"KawaiiGPT","description":"KawaiiGPT — Open-source LLM gateway accessing DeepSeek, Gemini, and Kimi-K2 through reverse-engineered Pollinations API with no API keys required, built-in prompt injection capabilities for security research, Termux/Linux native support, and Rich console interface","html_url":"https://github.com/MarCmcbri1982/KawaiiGPT","stars":817,"language":"Python","topics":"red-team,web-security,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"KawaiiGPT — Open-source LLM gateway accessing DeepSeek, Gemini, and Kimi-K2 through reverse-engineered Pollinations API with no API keys required, built-in prompt injection capabilities for security research, Termux/Linux native support, and Rich console interface"} +{"full_name":"Marten4n6/EvilOSX","owner":"Marten4n6","name":"EvilOSX","description":"An evil RAT (Remote Administration Tool) for macOS / OS X.","html_url":"https://github.com/Marten4n6/EvilOSX","stars":2399,"language":"Python","topics":"pentesting,post-exploitation,exploit,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An evil RAT (Remote Administration Tool) for macOS / OS X."} +{"full_name":"MatrixTM/MHDDoS","owner":"MatrixTM","name":"MHDDoS","description":"Best DDoS Attack Script Python3, (Cyber / DDos) Attack With 56 Methods","html_url":"https://github.com/MatrixTM/MHDDoS","stars":15676,"language":"Python","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Best DDoS Attack Script Python3, (Cyber / DDos) Attack With 56 Methods"} +{"full_name":"MattKeeley/Spoofy","owner":"MattKeeley","name":"Spoofy","description":"Spoofy is a Python-based tool designed to evaluate the spoofability of domains by analyzing their SPF and DMARC records. It features authoritative lookups with a known DNS fallback, accurate bulk processing, and a customizable spoof logic derived from real-world testing, enabling users to conduct comprehensive assessments of domain security configurations. Additionally, Spoofy offers DKIM selector enumeration via API as an optional feature, making it a valuable resource for cybersecurity assessments.","html_url":"https://github.com/MattKeeley/Spoofy","stars":750,"language":"Python","topics":"red-team,pentesting,malware","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"Spoofy is a Python-based tool designed to evaluate the spoofability of domains by analyzing their SPF and DMARC records. It features authoritative lookups with a known DNS fallback, accurate bulk processing, and a customizable spoof logic derived from real-world testing, enabling users to conduct comprehensive assessments of domain security configurations. Additionally, Spoofy offers DKIM selector enumeration via API as an optional feature, making it a valuable resource for cybersecurity assessments."} +{"full_name":"Mehdi0x90/Web_Hacking","owner":"Mehdi0x90","name":"Web_Hacking","description":"Web Hacking is a comprehensive repository of notes focused on bug bounty hunting and penetration testing, collating various techniques for vulnerability discovery and exploitation. The tool features extensive reconnaissance and OSINT methods, a detailed list of common vulnerabilities, and bypass techniques, making it a valuable resource for security professionals seeking to enhance their skills and methodologies in web application security. Additionally, it encourages community contributions, fostering continuous improvement and updates of its content.","html_url":"https://github.com/Mehdi0x90/Web_Hacking","stars":760,"topics":"exploit,osint,red-team,pentesting,malware","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"Web Hacking is a comprehensive repository of notes focused on bug bounty hunting and penetration testing, collating various techniques for vulnerability discovery and exploitation. The tool features extensive reconnaissance and OSINT methods, a detailed list of common vulnerabilities, and bypass techniques, making it a valuable resource for security professionals seeking to enhance their skills and methodologies in web application security. Additionally, it encourages community contributions, fostering continuous improvement and updates of its content."} +{"full_name":"MetaOSINT/MetaOSINT.github.io","owner":"MetaOSINT","name":"MetaOSINT.github.io","description":"A tool to quickly identify relevant, publicly-available open source intelligence (\"OSINT\") tools and resources, saving valuable time during investigations, research, and analysis.","html_url":"https://github.com/MetaOSINT/MetaOSINT.github.io","stars":794,"language":"HTML","topics":"cryptography,osint,network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A tool to quickly identify relevant, publicly-available open source intelligence (\"OSINT\") tools and resources, saving valuable time during investigations, research, and analysis."} +{"full_name":"Metarget/metarget","owner":"Metarget","name":"metarget","description":"Metarget is a framework providing automatic constructions of vulnerable infrastructures.","html_url":"https://github.com/Metarget/metarget","stars":1372,"language":"Python","topics":"privilege-escalation,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Metarget is a framework providing automatic constructions of vulnerable infrastructures."} +{"full_name":"Moham3dRiahi/XAttacker","owner":"Moham3dRiahi","name":"XAttacker","description":"X Attacker Tool ☣ Website Vulnerability Scanner \u0026 Auto Exploiter","html_url":"https://github.com/Moham3dRiahi/XAttacker","stars":1722,"language":"Perl","topics":"pentesting,scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"X Attacker Tool ☣ Website Vulnerability Scanner \u0026 Auto Exploiter"} +{"full_name":"Mr-xn/BurpSuite-collections","owner":"Mr-xn","name":"BurpSuite-collections","description":"有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file","html_url":"https://github.com/Mr-xn/BurpSuite-collections","stars":3853,"language":"HTML","topics":"pentesting,scanner,web-security","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file"} +{"full_name":"Mr-xn/Penetration_Testing_POC","owner":"Mr-xn","name":"Penetration_Testing_POC","description":"渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms","html_url":"https://github.com/Mr-xn/Penetration_Testing_POC","stars":7275,"language":"HTML","topics":"pentesting,exploit,red-team,malware,web-security","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms"} +{"full_name":"Mr-xn/RedTeam_BlueTeam_HW","owner":"Mr-xn","name":"RedTeam_BlueTeam_HW","description":"红蓝对抗以及护网相关工具和资料，内存shellcode（cs+msf）和内存马查杀工具","html_url":"https://github.com/Mr-xn/RedTeam_BlueTeam_HW","stars":2569,"language":"Java","topics":"red-team,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"红蓝对抗以及护网相关工具和资料，内存shellcode（cs+msf）和内存马查杀工具"} +{"full_name":"Mr-xn/hackbar2.1.3","owner":"Mr-xn","name":"hackbar2.1.3","description":"the free firefox extions of hackbar v2.1.3 v2.2.9 v2.3.1,hackbar 插件未收费的免费版本。适用于chrome浏览器的HackBar-v2.2.6.zip,HackBar-v2.3.1.zip","html_url":"https://github.com/Mr-xn/hackbar2.1.3","stars":901,"topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"the free firefox extions of hackbar v2.1.3 v2.2.9 v2.3.1,hackbar 插件未收费的免费版本。适用于chrome浏览器的HackBar-v2.2.6.zip,HackBar-v2.3.1.zip"} +{"full_name":"MyEtherWallet/ethereum-lists","owner":"MyEtherWallet","name":"ethereum-lists","description":"Ethereum-lists is a collaborative repository that maintains and updates lists of malicious URLs, fake token addresses, Ethereum addresses, and contract details, facilitating community contributions through pull requests. Its primary use case is to serve as a resource for users to identify and avoid phishing attempts and fraudulent tokens within the Ethereum ecosystem. Notable features include an easily accessible structure for submitting changes and clear guidelines for contributions, promoting community involvement in enhancing security awareness.","html_url":"https://github.com/MyEtherWallet/ethereum-lists","stars":713,"language":"JavaScript","topics":"security-tools","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"Ethereum-lists is a collaborative repository that maintains and updates lists of malicious URLs, fake token addresses, Ethereum addresses, and contract details, facilitating community contributions through pull requests. Its primary use case is to serve as a resource for users to identify and avoid phishing attempts and fraudulent tokens within the Ethereum ecosystem. Notable features include an easily accessible structure for submitting changes and clear guidelines for contributions, promoting community involvement in enhancing security awareness."} +{"full_name":"N0rz3/Phunter","owner":"N0rz3","name":"Phunter","description":"Phunter is an osint tool allowing you to find various information via a phone number 🔎📞","html_url":"https://github.com/N0rz3/Phunter","stars":993,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Phunter is an osint tool allowing you to find various information via a phone number 🔎📞"} +{"full_name":"N0rz3/Zehef","owner":"N0rz3","name":"Zehef","description":"Zehef is an osint tool to track emails","html_url":"https://github.com/N0rz3/Zehef","stars":992,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Zehef is an osint tool to track emails"} +{"full_name":"NH-RED-TEAM/RustHound","owner":"NH-RED-TEAM","name":"RustHound","description":"Active Directory data ingestor for BloodHound Legacy written in Rust. 🦀","html_url":"https://github.com/NH-RED-TEAM/RustHound","stars":1134,"language":"Rust","topics":"red-team,network,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Active Directory data ingestor for BloodHound Legacy written in Rust. 🦀"} +{"full_name":"NHAS/reverse_ssh","owner":"NHAS","name":"reverse_ssh","description":"SSH based reverse shell","html_url":"https://github.com/NHAS/reverse_ssh","stars":1336,"language":"Go","topics":"malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"SSH based reverse shell"} +{"full_name":"Naituw/IPAPatch","owner":"Naituw","name":"IPAPatch","description":"Patch iOS Apps, The Easy Way, Without Jailbreak.","html_url":"https://github.com/Naituw/IPAPatch","stars":5082,"language":"Objective-C","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Patch iOS Apps, The Easy Way, Without Jailbreak."} +{"full_name":"Nekmo/dirhunt","owner":"Nekmo","name":"dirhunt","description":"Find web directories without bruteforce","html_url":"https://github.com/Nekmo/dirhunt","stars":1983,"language":"Python","topics":"pentesting,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Find web directories without bruteforce"} +{"full_name":"Neo23x0/yarGen","owner":"Neo23x0","name":"yarGen","description":"yarGen is a generator for YARA rules","html_url":"https://github.com/Neo23x0/yarGen","stars":1782,"language":"Python","topics":"malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"yarGen is a generator for YARA rules"} +{"full_name":"NodePassProject/nodepass","owner":"NodePassProject","name":"nodepass","description":"A secure, efficient TCP/UDP tunneling solution that delivers fast, reliable access across network restrictions using pre-established TCP/QUIC/WebSocket or HTTP/2 connections.","html_url":"https://github.com/NodePassProject/nodepass","stars":2087,"language":"Go","topics":"red-team,malware,network,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A secure, efficient TCP/UDP tunneling solution that delivers fast, reliable access across network restrictions using pre-established TCP/QUIC/WebSocket or HTTP/2 connections."} +{"full_name":"NoiseByNorthwest/php-spx","owner":"NoiseByNorthwest","name":"php-spx","description":"A simple \u0026 straight-to-the-point PHP profiling extension with its built-in web UI","html_url":"https://github.com/NoiseByNorthwest/php-spx","stars":2568,"language":"C","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A simple \u0026 straight-to-the-point PHP profiling extension with its built-in web UI"} +{"full_name":"NotPrab/.NET-Deobfuscator","owner":"NotPrab","name":".NET-Deobfuscator","description":"Lists of .NET Deobfuscator and Unpacker (Open Source)","html_url":"https://github.com/NotPrab/.NET-Deobfuscator","stars":1483,"topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Lists of .NET Deobfuscator and Unpacker (Open Source)"} +{"full_name":"NotPrab/.NET-Obfuscator","owner":"NotPrab","name":".NET-Obfuscator","description":"Lists of .NET Obfuscator (Free, Freemium, Paid and Open Source )","html_url":"https://github.com/NotPrab/.NET-Obfuscator","stars":1464,"language":"Python","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Lists of .NET Obfuscator (Free, Freemium, Paid and Open Source )"} +{"full_name":"Notselwyn/CVE-2024-1086","owner":"Notselwyn","name":"CVE-2024-1086","description":"Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.","html_url":"https://github.com/Notselwyn/CVE-2024-1086","stars":2439,"language":"C","topics":"malware,privilege-escalation,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images."} +{"full_name":"NullArray/AutoSploit","owner":"NullArray","name":"AutoSploit","description":"Automated Mass Exploiter","html_url":"https://github.com/NullArray/AutoSploit","stars":5221,"language":"Python","topics":"exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Automated Mass Exploiter"} +{"full_name":"OWASP/Nettacker","owner":"OWASP","name":"Nettacker","description":"Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management","html_url":"https://github.com/OWASP/Nettacker","stars":4907,"language":"Python","topics":"exploit,malware,network,pentesting,osint,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management"} +{"full_name":"OWASP/joomscan","owner":"OWASP","name":"joomscan","description":"OWASP Joomla Vulnerability Scanner Project https://www.secologist.com/","html_url":"https://github.com/OWASP/joomscan","stars":1176,"language":"Raku","topics":"scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"OWASP Joomla Vulnerability Scanner Project https://www.secologist.com/"} +{"full_name":"OffcierCia/On-Chain-Investigations-Tools-List","owner":"OffcierCia","name":"On-Chain-Investigations-Tools-List","description":"Here we discuss how one can investigate crypto hacks and security incidents, and collect all the possible tools and manuals! PRs are welcome! If any tool is missing - please open PR!","html_url":"https://github.com/OffcierCia/On-Chain-Investigations-Tools-List","stars":1864,"topics":"cryptography,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Here we discuss how one can investigate crypto hacks and security incidents, and collect all the possible tools and manuals! PRs are welcome! If any tool is missing - please open PR!"} +{"full_name":"OhShINT/ohshint.gitbook.io","owner":"OhShINT","name":"ohshint.gitbook.io","description":"So what is this all about? Yep, its an OSINT blog and a collection of OSINT resources and tools. Suggestions for new OSINT resources is always welcomed.","html_url":"https://github.com/OhShINT/ohshint.gitbook.io","stars":909,"language":"HTML","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"So what is this all about? Yep, its an OSINT blog and a collection of OSINT resources and tools. Suggestions for new OSINT resources is always welcomed."} +{"full_name":"OpenDriver2/REDRIVER2","owner":"OpenDriver2","name":"REDRIVER2","description":"Driver 2 Playstation game reverse engineering effort","html_url":"https://github.com/OpenDriver2/REDRIVER2","stars":1238,"language":"C","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Driver 2 Playstation game reverse engineering effort"} +{"full_name":"Owez/yark","owner":"Owez","name":"yark","description":"OSINT for YouTube made simple.","html_url":"https://github.com/Owez/yark","stars":2174,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"OSINT for YouTube made simple."} +{"full_name":"P1-Team/AlliN","owner":"P1-Team","name":"AlliN","description":"A flexible scanner","html_url":"https://github.com/P1-Team/AlliN","stars":1275,"language":"Python","topics":"scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A flexible scanner"} +{"full_name":"P1sec/hermes-dec","owner":"P1sec","name":"hermes-dec","description":"A reverse engineering tool for decompiling and disassembling the React Native Hermes bytecode","html_url":"https://github.com/P1sec/hermes-dec","stars":955,"language":"Python","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A reverse engineering tool for decompiling and disassembling the React Native Hermes bytecode"} +{"full_name":"P3GLEG/Whaler","owner":"P3GLEG","name":"Whaler","description":"Program to reverse Docker images into Dockerfiles","html_url":"https://github.com/P3GLEG/Whaler","stars":1185,"language":"Go","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Program to reverse Docker images into Dockerfiles"} +{"full_name":"PabloLec/RecoverPy","owner":"PabloLec","name":"RecoverPy","description":"Interactively find and recover deleted or :point_right: overwritten :point_left: files from your terminal","html_url":"https://github.com/PabloLec/RecoverPy","stars":1746,"language":"Python","topics":"forensics,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Interactively find and recover deleted or :point_right: overwritten :point_left: files from your terminal"} +{"full_name":"Paper-Pen/GatherInfo","owner":"Paper-Pen","name":"GatherInfo","description":"信息收集 OR 信息搜集","html_url":"https://github.com/Paper-Pen/GatherInfo","stars":927,"topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"信息收集 OR 信息搜集"} +{"full_name":"PaulNorman01/Forensia","owner":"PaulNorman01","name":"Forensia","description":"Anti Forensics Tool For Red Teamers, Used For Erasing Footprints In The Post Exploitation Phase.","html_url":"https://github.com/PaulNorman01/Forensia","stars":785,"language":"C++","topics":"forensics,post-exploitation,exploit,red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Anti Forensics Tool For Red Teamers, Used For Erasing Footprints In The Post Exploitation Phase."} +{"full_name":"Pennyw0rth/NetExec","owner":"Pennyw0rth","name":"NetExec","description":"The Network Execution Tool","html_url":"https://github.com/Pennyw0rth/NetExec","stars":5357,"language":"Python","topics":"pentesting,red-team,network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"The Network Execution Tool"} +{"full_name":"Perfare/Il2CppDumper","owner":"Perfare","name":"Il2CppDumper","description":"Unity il2cpp reverse engineer","html_url":"https://github.com/Perfare/Il2CppDumper","stars":8764,"language":"C#","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Unity il2cpp reverse engineer"} +{"full_name":"Perfare/Zygisk-Il2CppDumper","owner":"Perfare","name":"Zygisk-Il2CppDumper","description":"Using Zygisk to dump il2cpp data at runtime","html_url":"https://github.com/Perfare/Zygisk-Il2CppDumper","stars":3082,"language":"C","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Using Zygisk to dump il2cpp data at runtime"} +{"full_name":"PhonePe/mantis","owner":"PhonePe","name":"mantis","description":"Mantis is a security framework that automates the workflow of discovery, reconnaissance, and vulnerability scanning.","html_url":"https://github.com/PhonePe/mantis","stars":1021,"language":"Python","topics":"osint,scanner,exploit,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Mantis is a security framework that automates the workflow of discovery, reconnaissance, and vulnerability scanning."} +{"full_name":"PretendoNetwork/.github","owner":"PretendoNetwork","name":".github","description":"Information on the WIP Custom Nintendo WiiU/3DS/2DS server and service replacements","html_url":"https://github.com/PretendoNetwork/.github","stars":908,"topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Information on the WIP Custom Nintendo WiiU/3DS/2DS server and service replacements"} +{"full_name":"Print3M/DllShimmer","owner":"Print3M","name":"DllShimmer","description":"DllShimmer is a tool designed to facilitate DLL hijacking by allowing users to backdoor any function in a DLL without disrupting the normal operation of the host program. It generates proxy DLLs through a boilerplate C++ file and a corresponding .def file, ensuring that all exported functions maintain their original names and ordinal numbers, thus avoiding detection. Key features include support for both dynamic and static linking, the option to prevent multiple executions of the backdoor, and comprehensive debug logging capabilities.","html_url":"https://github.com/Print3M/DllShimmer","stars":728,"language":"Go","topics":"red-team,pentesting,malware,post-exploitation","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"DllShimmer is a tool designed to facilitate DLL hijacking by allowing users to backdoor any function in a DLL without disrupting the normal operation of the host program. It generates proxy DLLs through a boilerplate C++ file and a corresponding .def file, ensuring that all exported functions maintain their original names and ordinal numbers, thus avoiding detection. Key features include support for both dynamic and static linking, the option to prevent multiple executions of the backdoor, and comprehensive debug logging capabilities."} +{"full_name":"ProbiusOfficial/SecToolKit","owner":"ProbiusOfficial","name":"SecToolKit","description":"Cybersecurity tool repository / Wiki 收录常用 / 前沿 的CTF和渗透工具以及其 官方/使用 文档，致力于让每个工具都能发挥作用ww，不管你是萌新还是领域从业者希望你都能在这里找到适合你的工具或者获得一定的启发。","html_url":"https://github.com/ProbiusOfficial/SecToolKit","stars":928,"topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Cybersecurity tool repository / Wiki 收录常用 / 前沿 的CTF和渗透工具以及其 官方/使用 文档，致力于让每个工具都能发挥作用ww，不管你是萌新还是领域从业者希望你都能在这里找到适合你的工具或者获得一定的启发。"} +{"full_name":"Puliczek/CVE-2021-44228-PoC-log4j-bypass-words","owner":"Puliczek","name":"CVE-2021-44228-PoC-log4j-bypass-words","description":"🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks","html_url":"https://github.com/Puliczek/CVE-2021-44228-PoC-log4j-bypass-words","stars":950,"language":"Java","topics":"exploit,red-team,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks"} +{"full_name":"Puliczek/awesome-list-of-secrets-in-environment-variables","owner":"Puliczek","name":"awesome-list-of-secrets-in-environment-variables","description":"🦄🔒 Awesome list of secrets in environment variables 🖥️","html_url":"https://github.com/Puliczek/awesome-list-of-secrets-in-environment-variables","stars":902,"topics":"red-team,pentesting,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"🦄🔒 Awesome list of secrets in environment variables 🖥️"} +{"full_name":"PurpleAILAB/Decepticon","owner":"PurpleAILAB","name":"Decepticon","description":"Autonomous Multi-Agent Based Red Team Testing Service / AI hacker","html_url":"https://github.com/PurpleAILAB/Decepticon","stars":927,"language":"Python","topics":"malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Autonomous Multi-Agent Based Red Team Testing Service / AI hacker"} +{"full_name":"PyCQA/bandit","owner":"PyCQA","name":"bandit","description":"Bandit is a tool designed to find common security issues in Python code.","html_url":"https://github.com/PyCQA/bandit","stars":7878,"language":"Python","topics":"scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Bandit is a tool designed to find common security issues in Python code."} +{"full_name":"QBDI/QBDI","owner":"QBDI","name":"QBDI","description":"A Dynamic Binary Instrumentation framework based on LLVM.","html_url":"https://github.com/QBDI/QBDI","stars":1751,"language":"C++","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A Dynamic Binary Instrumentation framework based on LLVM."} +{"full_name":"QQBackup/qq-win-db-key","owner":"QQBackup","name":"qq-win-db-key","description":"全平台 QQ 聊天数据库解密","html_url":"https://github.com/QQBackup/qq-win-db-key","stars":967,"language":"PowerShell","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"全平台 QQ 聊天数据库解密"} +{"full_name":"Qftm/Information_Collection_Handbook","owner":"Qftm","name":"Information_Collection_Handbook","description":"Handbook of information collection for penetration testing and src","html_url":"https://github.com/Qftm/Information_Collection_Handbook","stars":830,"topics":"exploit,malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Handbook of information collection for penetration testing and src"} +{"full_name":"Qianlitp/crawlergo","owner":"Qianlitp","name":"crawlergo","description":"A powerful browser crawler for web vulnerability scanners","html_url":"https://github.com/Qianlitp/crawlergo","stars":3021,"language":"Go","topics":"scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A powerful browser crawler for web vulnerability scanners"} +{"full_name":"R00tS3c/DDOS-RootSec","owner":"R00tS3c","name":"DDOS-RootSec","description":"Explore RootSec's DDOS Archive, featuring top-tier scanners, powerful botnets (Mirai \u0026 QBot) and other variants, high-impact exploits, advanced methods, and efficient sniffers. Ideal for cybersecurity professionals and researchers.","html_url":"https://github.com/R00tS3c/DDOS-RootSec","stars":1005,"language":"C","topics":"scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Explore RootSec's DDOS Archive, featuring top-tier scanners, powerful botnets (Mirai \u0026 QBot) and other variants, high-impact exploits, advanced methods, and efficient sniffers. Ideal for cybersecurity professionals and researchers."} +{"full_name":"R0X4R/Garud","owner":"R0X4R","name":"Garud","description":"An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically.","html_url":"https://github.com/R0X4R/Garud","stars":804,"language":"Shell","topics":"exploit,malware,web-security,pentesting,osint,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically."} +{"full_name":"R3dy/capsulecorp-pentest","owner":"R3dy","name":"capsulecorp-pentest","description":"Vagrant VirtualBox environment for conducting an internal network penetration test","html_url":"https://github.com/R3dy/capsulecorp-pentest","stars":966,"language":"Ruby","topics":"network,pentesting,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Vagrant VirtualBox environment for conducting an internal network penetration test"} +{"full_name":"REDasmOrg/REDasm","owner":"REDasmOrg","name":"REDasm","description":"The OpenSource Disassembler","html_url":"https://github.com/REDasmOrg/REDasm","stars":1706,"language":"C++","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"The OpenSource Disassembler"} +{"full_name":"REhints/efiXplorer","owner":"REhints","name":"efiXplorer","description":"IDA plugin and loader for UEFI firmware analysis and reverse engineering automation","html_url":"https://github.com/REhints/efiXplorer","stars":1084,"language":"C++","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"IDA plugin and loader for UEFI firmware analysis and reverse engineering automation"} +{"full_name":"RUB-NDS/Terrapin-Scanner","owner":"RUB-NDS","name":"Terrapin-Scanner","description":"This repository contains a simple vulnerability scanner for the Terrapin attack present in the paper \"Terrapin Attack: Breaking SSH Channel Integrity By Sequence Number Manipulation\".","html_url":"https://github.com/RUB-NDS/Terrapin-Scanner","stars":992,"language":"Go","topics":"scanner,exploit,cryptography","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"This repository contains a simple vulnerability scanner for the Terrapin attack present in the paper \"Terrapin Attack: Breaking SSH Channel Integrity By Sequence Number Manipulation\"."} +{"full_name":"Ragnt/AngryOxide","owner":"Ragnt","name":"AngryOxide","description":"802.11 Attack Tool","html_url":"https://github.com/Ragnt/AngryOxide","stars":1806,"language":"Rust","topics":"malware,network,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"802.11 Attack Tool"} +{"full_name":"Ranginang67/Firecrack","owner":"Ranginang67","name":"Firecrack","description":":fire: Firecrack pentest tools: Facebook hacking random attack, deface, admin finder, bing dorking:","html_url":"https://github.com/Ranginang67/Firecrack","stars":770,"topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":":fire: Firecrack pentest tools: Facebook hacking random attack, deface, admin finder, bing dorking:"} +{"full_name":"ReVanced/revanced-patcher","owner":"ReVanced","name":"revanced-patcher","description":"💉 ReVanced Patcher used to patch Android applications","html_url":"https://github.com/ReVanced/revanced-patcher","stars":3264,"language":"Kotlin","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"💉 ReVanced Patcher used to patch Android applications"} +{"full_name":"ReVanced/revanced-patches","owner":"ReVanced","name":"revanced-patches","description":"🧩 Patches for ReVanced","html_url":"https://github.com/ReVanced/revanced-patches","stars":5576,"language":"Java","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"🧩 Patches for ReVanced"} +{"full_name":"ReVanced/revanced-patches-template","owner":"ReVanced","name":"revanced-patches-template","description":"👋🧩Template repository for ReVanced Patches","html_url":"https://github.com/ReVanced/revanced-patches-template","stars":4644,"language":"Kotlin","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"👋🧩Template repository for ReVanced Patches"} +{"full_name":"ReagentX/imessage-exporter","owner":"ReagentX","name":"imessage-exporter","description":"Export iMessage data + run iMessage Diagnostics","html_url":"https://github.com/ReagentX/imessage-exporter","stars":4991,"language":"Rust","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Export iMessage data + run iMessage Diagnostics"} +{"full_name":"RedTeamPentesting/pretender","owner":"RedTeamPentesting","name":"pretender","description":"Your MitM sidekick for relaying attacks featuring DHCPv6 DNS takeover as well as mDNS, LLMNR and NetBIOS-NS spoofing.","html_url":"https://github.com/RedTeamPentesting/pretender","stars":1273,"language":"Go","topics":"pentesting,network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Your MitM sidekick for relaying attacks featuring DHCPv6 DNS takeover as well as mDNS, LLMNR and NetBIOS-NS spoofing."} +{"full_name":"Redherring32/OpenTendo","owner":"Redherring32","name":"OpenTendo","description":"An Open-Source HardWare (OSHW) recreation of the original 1985 front-loading NES Motherboard","html_url":"https://github.com/Redherring32/OpenTendo","stars":814,"language":"KiCad Layout","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An Open-Source HardWare (OSHW) recreation of the original 1985 front-loading NES Motherboard"} +{"full_name":"Reloaded-Project/Reloaded-II","owner":"Reloaded-Project","name":"Reloaded-II","description":"Universal .NET Core Powered Modding Framework for any Native Game X86, X64.","html_url":"https://github.com/Reloaded-Project/Reloaded-II","stars":876,"language":"C#","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Universal .NET Core Powered Modding Framework for any Native Game X86, X64."} +{"full_name":"Rhymen/go-whatsapp","owner":"Rhymen","name":"go-whatsapp","description":"WhatsApp Web API","html_url":"https://github.com/Rhymen/go-whatsapp","stars":2226,"language":"Go","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"WhatsApp Web API"} +{"full_name":"RickdeJager/stegseek","owner":"RickdeJager","name":"stegseek","description":":zap: Worlds fastest steghide cracker, chewing through millions of passwords per second :zap:","html_url":"https://github.com/RickdeJager/stegseek","stars":1247,"language":"C++","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":":zap: Worlds fastest steghide cracker, chewing through millions of passwords per second :zap:"} +{"full_name":"RistBS/Awesome-RedTeam-Cheatsheet","owner":"RistBS","name":"Awesome-RedTeam-Cheatsheet","description":"Red Team Cheatsheet in constant expansion.","html_url":"https://github.com/RistBS/Awesome-RedTeam-Cheatsheet","stars":1268,"topics":"red-team,malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Red Team Cheatsheet in constant expansion."} +{"full_name":"RockChinQ/free-one-api","owner":"RockChinQ","name":"free-one-api","description":"LLM 逆向工程接口管理 | 通过标准 OpenAI API 访问 ChatGPT / gpt4free / Bard / Claude / HuggingChat / 通义千问 等 AI 的破解版 || ChatGPT reverse engineering API management | Access all reverse engineered LLM libs by standard OpenAI API format || 免费 ChatGPT Free GPT LLM API | 逆向工程 转 OpenAI API | converts all llm libs to OpenAI API","html_url":"https://github.com/RockChinQ/free-one-api","stars":786,"language":"Python","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"LLM 逆向工程接口管理 | 通过标准 OpenAI API 访问 ChatGPT / gpt4free / Bard / Claude / HuggingChat / 通义千问 等 AI 的破解版 || ChatGPT reverse engineering API management | Access all reverse engineered LLM libs by standard OpenAI API format || 免费 ChatGPT Free GPT LLM API | 逆向工程 转 OpenAI API | converts all llm libs to OpenAI API"} +{"full_name":"RogueMaster/awesome-flipperzero-withModules","owner":"RogueMaster","name":"awesome-flipperzero-withModules","description":"A collection of awesome resources \u0026 modules for the Flipper Zero device. Best used with Rogue Master Flipper Zero Custom Firmware.","html_url":"https://github.com/RogueMaster/awesome-flipperzero-withModules","stars":1916,"language":"C","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A collection of awesome resources \u0026 modules for the Flipper Zero device. Best used with Rogue Master Flipper Zero Custom Firmware."} +{"full_name":"RootMyTV/RootMyTV.github.io","owner":"RootMyTV","name":"RootMyTV.github.io","description":"RootMyTV is a user-friendly exploit for rooting/jailbreaking LG webOS smart TVs.","html_url":"https://github.com/RootMyTV/RootMyTV.github.io","stars":2409,"language":"HTML","topics":"exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"RootMyTV is a user-friendly exploit for rooting/jailbreaking LG webOS smart TVs."} +{"full_name":"S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet","owner":"S1ckB0y1337","name":"Active-Directory-Exploitation-Cheat-Sheet","description":"A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.","html_url":"https://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet","stars":6545,"topics":"privilege-escalation,exploit,malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A cheat sheet that contains common enumeration and attack methods for Windows Active Directory."} +{"full_name":"S3cur3Th1sSh1t/WinPwn","owner":"S3cur3Th1sSh1t","name":"WinPwn","description":"Automation for internal Windows Penetrationtest / AD-Security","html_url":"https://github.com/S3cur3Th1sSh1t/WinPwn","stars":3651,"language":"PowerShell","topics":"malware,pentesting,osint,privilege-escalation,exploit,red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Automation for internal Windows Penetrationtest / AD-Security"} +{"full_name":"SaadAhla/FilelessPELoader","owner":"SaadAhla","name":"FilelessPELoader","description":"Loading Remote AES Encrypted PE in memory , Decrypted it and run it","html_url":"https://github.com/SaadAhla/FilelessPELoader","stars":1024,"language":"C++","topics":"cryptography,pentesting,red-team,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Loading Remote AES Encrypted PE in memory , Decrypted it and run it"} +{"full_name":"SamboyCoding/Cpp2IL","owner":"SamboyCoding","name":"Cpp2IL","description":"Work-in-progress tool to reverse unity's IL2CPP toolchain.","html_url":"https://github.com/SamboyCoding/Cpp2IL","stars":2306,"language":"C#","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Work-in-progress tool to reverse unity's IL2CPP toolchain."} +{"full_name":"Samsar4/Ethical-Hacking-Labs","owner":"Samsar4","name":"Ethical-Hacking-Labs","description":"Practical Ethical Hacking Labs 🗡🛡","html_url":"https://github.com/Samsar4/Ethical-Hacking-Labs","stars":3429,"topics":"pentesting,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Practical Ethical Hacking Labs 🗡🛡"} +{"full_name":"SecShiv/OneDorkForAll","owner":"SecShiv","name":"OneDorkForAll","description":"An insane list of all dorks taken from everywhere from various different sources.","html_url":"https://github.com/SecShiv/OneDorkForAll","stars":785,"topics":"osint,red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An insane list of all dorks taken from everywhere from various different sources."} +{"full_name":"SecWiki/linux-kernel-exploits","owner":"SecWiki","name":"linux-kernel-exploits","description":"linux-kernel-exploits Linux平台提权漏洞集合","html_url":"https://github.com/SecWiki/linux-kernel-exploits","stars":5588,"language":"C","topics":"pentesting,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"linux-kernel-exploits Linux平台提权漏洞集合"} +{"full_name":"SecWiki/windows-kernel-exploits","owner":"SecWiki","name":"windows-kernel-exploits","description":"windows-kernel-exploits Windows平台提权漏洞集合","html_url":"https://github.com/SecWiki/windows-kernel-exploits","stars":8618,"language":"C","topics":"pentesting,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"windows-kernel-exploits Windows平台提权漏洞集合"} +{"full_name":"Security-Onion-Solutions/securityonion","owner":"Security-Onion-Solutions","name":"securityonion","description":"Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.","html_url":"https://github.com/Security-Onion-Solutions/securityonion","stars":4489,"language":"Shell","topics":"network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek."} +{"full_name":"SecurityFTW/cs-suite","owner":"SecurityFTW","name":"cs-suite","description":"Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.","html_url":"https://github.com/SecurityFTW/cs-suite","stars":1167,"language":"Shell","topics":"cloud-security","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure."} +{"full_name":"ShinoLeah/eDBG","owner":"ShinoLeah","name":"eDBG","description":"eBPF-based lightweight debugger for Android","html_url":"https://github.com/ShinoLeah/eDBG","stars":764,"language":"C","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"eBPF-based lightweight debugger for Android"} +{"full_name":"Shiva108/CTF-notes","owner":"Shiva108","name":"CTF-notes","description":"Everything needed for doing CTFs","html_url":"https://github.com/Shiva108/CTF-notes","stars":784,"language":"HTML","topics":"pentesting,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Everything needed for doing CTFs"} +{"full_name":"SkrewEverything/Swift-Keylogger","owner":"SkrewEverything","name":"Swift-Keylogger","description":"Keylogger for mac written in Swift using HID","html_url":"https://github.com/SkrewEverything/Swift-Keylogger","stars":1157,"language":"Swift","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Keylogger for mac written in Swift using HID"} +{"full_name":"SofianeHamlaoui/Lockdoor-Framework","owner":"SofianeHamlaoui","name":"Lockdoor-Framework","description":"🔐 Lockdoor Framework : A Penetration Testing framework with Cyber Security Resources","html_url":"https://github.com/SofianeHamlaoui/Lockdoor-Framework","stars":1533,"language":"Python","topics":"malware,pentesting,red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"🔐 Lockdoor Framework : A Penetration Testing framework with Cyber Security Resources"} +{"full_name":"SpacehuhnTech/DeauthDetector","owner":"SpacehuhnTech","name":"DeauthDetector","description":"Detect deauthentication frames using an ESP8266","html_url":"https://github.com/SpacehuhnTech/DeauthDetector","stars":928,"language":"C++","topics":"network,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Detect deauthentication frames using an ESP8266"} +{"full_name":"SpecialKO/SpecialK","owner":"SpecialKO","name":"SpecialK","description":"Lovingly referred to as the Swiss Army Knife of PC gaming, Special K does a bit of everything.","html_url":"https://github.com/SpecialKO/SpecialK","stars":1806,"language":"C++","topics":"reverse-engineering,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Lovingly referred to as the Swiss Army Knife of PC gaming, Special K does a bit of everything."} +{"full_name":"SpenserCai/DRat","owner":"SpenserCai","name":"DRat","description":"去中心化远程控制工具（Decentralized Remote Administration Tool），通过ENS实现了配置文件分发的去中心化，通过Telegram实现了服务端的去中心化","html_url":"https://github.com/SpenserCai/DRat","stars":797,"language":"Go","topics":"red-team,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"去中心化远程控制工具（Decentralized Remote Administration Tool），通过ENS实现了配置文件分发的去中心化，通过Telegram实现了服务端的去中心化"} +{"full_name":"SpiderLabs/HostHunter","owner":"SpiderLabs","name":"HostHunter","description":"HostHunter a recon tool for discovering hostnames using OSINT techniques.","html_url":"https://github.com/SpiderLabs/HostHunter","stars":1156,"language":"Python","topics":"malware,network,pentesting,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"HostHunter a recon tool for discovering hostnames using OSINT techniques."} +{"full_name":"SteamClientHomebrew/Millennium","owner":"SteamClientHomebrew","name":"Millennium","description":"An open-source low-code modding framework to create, manage and use themes/plugins for the desktop Steam Client without any low-level internal interaction or overhead.","html_url":"https://github.com/SteamClientHomebrew/Millennium","stars":3176,"language":"C++","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An open-source low-code modding framework to create, manage and use themes/plugins for the desktop Steam Client without any low-level internal interaction or overhead."} +{"full_name":"SteamRE/SteamKit","owner":"SteamRE","name":"SteamKit","description":"SteamKit2 is a .NET library designed to interoperate with Valve's Steam network. It aims to provide a simple, yet extensible, interface to perform various actions on the network.","html_url":"https://github.com/SteamRE/SteamKit","stars":3036,"language":"C#","topics":"network,reverse-engineering,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"SteamKit2 is a .NET library designed to interoperate with Valve's Steam network. It aims to provide a simple, yet extensible, interface to perform various actions on the network."} +{"full_name":"SteamTracking/GameTracking-CS2","owner":"SteamTracking","name":"GameTracking-CS2","description":"📥 Game Tracker: Counter-Strike 2","html_url":"https://github.com/SteamTracking/GameTracking-CS2","stars":857,"language":"C++","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"📥 Game Tracker: Counter-Strike 2"} +{"full_name":"SteamTracking/GameTracking-Dota2","owner":"SteamTracking","name":"GameTracking-Dota2","description":"GameTracking-Dota2 is a tool designed to automate the tracking of in-game statistics and player performance in Dota 2. Its primary use case is to relieve players of the manual effort involved in monitoring game data, providing streamlined insights into gameplay trends. Notable features include integration with a broader GameTracking ecosystem and community support via Discord.","html_url":"https://github.com/SteamTracking/GameTracking-Dota2","stars":742,"language":"C++","topics":"reverse-engineering","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"GameTracking-Dota2 is a tool designed to automate the tracking of in-game statistics and player performance in Dota 2. Its primary use case is to relieve players of the manual effort involved in monitoring game data, providing streamlined insights into gameplay trends. Notable features include integration with a broader GameTracking ecosystem and community support via Discord."} +{"full_name":"SteamTracking/SteamTracking","owner":"SteamTracking","name":"SteamTracking","description":"🕵 Tracking things, so you don't have to","html_url":"https://github.com/SteamTracking/SteamTracking","stars":1035,"language":"JavaScript","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"🕵 Tracking things, so you don't have to"} +{"full_name":"Svenskithesource/PyArmor-Unpacker","owner":"Svenskithesource","name":"PyArmor-Unpacker","description":"PyArmor-Unpacker is a tool designed to unpack Python applications protected by PyArmor, specifically targeting versions prior to v8. The tool offers three methods for unpacking, with the preferred method being suitable for Python 3.9, allowing users to retrieve the original code from obfuscated .pyc files. Notable features include a detailed usage guide, support for multiple unpacking methods, and an emphasis on community contributions to address known issues and enhance functionality.","html_url":"https://github.com/Svenskithesource/PyArmor-Unpacker","stars":748,"language":"Python","topics":"reverse-engineering","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"PyArmor-Unpacker is a tool designed to unpack Python applications protected by PyArmor, specifically targeting versions prior to v8. The tool offers three methods for unpacking, with the preferred method being suitable for Python 3.9, allowing users to retrieve the original code from obfuscated .pyc files. Notable features include a detailed usage guide, support for multiple unpacking methods, and an emphasis on community contributions to address known issues and enhance functionality."} +{"full_name":"SychicBoy/NETReactorSlayer","owner":"SychicBoy","name":"NETReactorSlayer","description":"An open source (GPLv3) deobfuscator and unpacker for Eziriz .NET Reactor","html_url":"https://github.com/SychicBoy/NETReactorSlayer","stars":1213,"language":"C#","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An open source (GPLv3) deobfuscator and unpacker for Eziriz .NET Reactor"} +{"full_name":"Syslifters/OffSec-Reporting","owner":"Syslifters","name":"OffSec-Reporting","description":"Offensive Security OSCP+, OSEP, OSWP, OSWA, OSWE, OSED, OSMR, OSEE, OSDA, OSIR, OSTH Exam and Lab Reporting / Note-Taking Tool","html_url":"https://github.com/Syslifters/OffSec-Reporting","stars":907,"topics":"red-team,malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Offensive Security OSCP+, OSEP, OSWP, OSWA, OSWE, OSED, OSMR, OSEE, OSDA, OSIR, OSTH Exam and Lab Reporting / Note-Taking Tool"} +{"full_name":"TH3xACE/SUDO_KILLER","owner":"TH3xACE","name":"SUDO_KILLER","description":"A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.","html_url":"https://github.com/TH3xACE/SUDO_KILLER","stars":2446,"language":"Shell","topics":"privilege-escalation,exploit,malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user."} +{"full_name":"Taonn/EmailAll","owner":"Taonn","name":"EmailAll","description":"EmailAll is a powerful email collection tool designed to aggregate email addresses from various online sources, including search engines and datasets. Its primary use case is to support cybersecurity professionals in gathering emails for domain reconnaissance, and it features integration with multiple API services for data retrieval along with modular results storage in JSON format. The tool allows easy configuration for proxies and APIs, enhancing its flexibility for various deployment environments.","html_url":"https://github.com/Taonn/EmailAll","stars":738,"language":"Python","topics":"red-team,osint","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"EmailAll is a powerful email collection tool designed to aggregate email addresses from various online sources, including search engines and datasets. Its primary use case is to support cybersecurity professionals in gathering emails for domain reconnaissance, and it features integration with multiple API services for data retrieval along with modular results storage in JSON format. The tool allows easy configuration for proxies and APIs, enhancing its flexibility for various deployment environments."} +{"full_name":"Te-k/harpoon","owner":"Te-k","name":"harpoon","description":"CLI tool for open source and threat intelligence","html_url":"https://github.com/Te-k/harpoon","stars":1271,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"CLI tool for open source and threat intelligence"} +{"full_name":"Tencent/AI-Infra-Guard","owner":"Tencent","name":"AI-Infra-Guard","description":"A full-stack AI Red Teaming platform securing AI ecosystems via OpenClaw Security Scan, Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.","html_url":"https://github.com/Tencent/AI-Infra-Guard","stars":3280,"language":"Python","topics":"red-team,scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A full-stack AI Red Teaming platform securing AI ecosystems via OpenClaw Security Scan, Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation."} +{"full_name":"Tencent/HaboMalHunter","owner":"Tencent","name":"HaboMalHunter","description":"HaboMalHunter is an automated malware analysis tool specifically designed for Linux ELF files, facilitating both static and dynamic analysis to aid security analysts. It efficiently extracts crucial features such as process behavior, file I/O, and network interactions, generating comprehensive reports on malicious activities. Notable features include detailed static analysis of file dependencies and strings, as well as dynamic tracking of execution timestamps, API calls, and syscall sequences.","html_url":"https://github.com/Tencent/HaboMalHunter","stars":750,"language":"Python","topics":"malware","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"HaboMalHunter is an automated malware analysis tool specifically designed for Linux ELF files, facilitating both static and dynamic analysis to aid security analysts. It efficiently extracts crucial features such as process behavior, file I/O, and network interactions, generating comprehensive reports on malicious activities. Notable features include detailed static analysis of file dependencies and strings, as well as dynamic tracking of execution timestamps, API calls, and syscall sequences."} +{"full_name":"TermuxHackz/X-osint","owner":"TermuxHackz","name":"X-osint","description":"This is an Open source intelligent framework ie an osint tool which gathers valid information about a phone number, user's email address, perform VIN Osint, and reverse, perform subdomain enumeration, able to find email from a name, and so much more. Best osint tool for Termux and linux","html_url":"https://github.com/TermuxHackz/X-osint","stars":2002,"language":"Python","topics":"osint,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"This is an Open source intelligent framework ie an osint tool which gathers valid information about a phone number, user's email address, perform VIN Osint, and reverse, perform subdomain enumeration, able to find email from a name, and so much more. Best osint tool for Termux and linux"} +{"full_name":"The-Osint-Toolbox/Social-Media-OSINT","owner":"The-Osint-Toolbox","name":"Social-Media-OSINT","description":"Social Media OSINT collection containing - tools, techniques \u0026 tradecraft.","html_url":"https://github.com/The-Osint-Toolbox/Social-Media-OSINT","stars":780,"topics":"network,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Social Media OSINT collection containing - tools, techniques \u0026 tradecraft."} +{"full_name":"The-Osint-Toolbox/Telegram-OSINT","owner":"The-Osint-Toolbox","name":"Telegram-OSINT","description":"In-depth repository of Telegram OSINT resources covering, tools, techniques \u0026 tradecraft.","html_url":"https://github.com/The-Osint-Toolbox/Telegram-OSINT","stars":1712,"topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"In-depth repository of Telegram OSINT resources covering, tools, techniques \u0026 tradecraft."} +{"full_name":"The-Viper-One/PsMapExec","owner":"The-Viper-One","name":"PsMapExec","description":"Dominate Active Directory with PowerShell.","html_url":"https://github.com/The-Viper-One/PsMapExec","stars":1171,"language":"PowerShell","topics":"post-exploitation,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Dominate Active Directory with PowerShell."} +{"full_name":"The-Z-Labs/linux-exploit-suggester","owner":"The-Z-Labs","name":"linux-exploit-suggester","description":"Linux privilege escalation auditing tool","html_url":"https://github.com/The-Z-Labs/linux-exploit-suggester","stars":6428,"language":"Shell","topics":"exploit,privilege-escalation","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Linux privilege escalation auditing tool"} +{"full_name":"The404Hacking/AndroRAT","owner":"The404Hacking","name":"AndroRAT","description":"AndroRAT | Remote Administrator Tool for Android OS Hacking","html_url":"https://github.com/The404Hacking/AndroRAT","stars":1583,"language":"Java","topics":"exploit,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"AndroRAT | Remote Administrator Tool for Android OS Hacking"} +{"full_name":"TheKingOfDuck/ApkAnalyser","owner":"TheKingOfDuck","name":"ApkAnalyser","description":"一键提取安卓应用中可能存在的敏感信息。","html_url":"https://github.com/TheKingOfDuck/ApkAnalyser","stars":1010,"language":"Shell","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"一键提取安卓应用中可能存在的敏感信息。"} +{"full_name":"TheKingOfDuck/fuzzDicts","owner":"TheKingOfDuck","name":"fuzzDicts","description":"You Know, For WEB Fuzzing !","html_url":"https://github.com/TheKingOfDuck/fuzzDicts","stars":8275,"language":"Python","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"You Know, For WEB Fuzzing !"} +{"full_name":"TheOfficialFloW/h-encore","owner":"TheOfficialFloW","name":"h-encore","description":"Fully chained kernel exploit for the PS Vita on firmwares 3.65-3.68","html_url":"https://github.com/TheOfficialFloW/h-encore","stars":1104,"language":"C","topics":"exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Fully chained kernel exploit for the PS Vita on firmwares 3.65-3.68"} +{"full_name":"ThePorgs/Exegol","owner":"ThePorgs","name":"Exegol","description":"Fully featured and community-driven hacking environment","html_url":"https://github.com/ThePorgs/Exegol","stars":2955,"language":"Python","topics":"malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Fully featured and community-driven hacking environment"} +{"full_name":"Threekiii/Awesome-Redteam","owner":"Threekiii","name":"Awesome-Redteam","description":"一个攻防知识库。A knowledge base for red teaming and offensive security.","html_url":"https://github.com/Threekiii/Awesome-Redteam","stars":4093,"language":"Python","topics":"privilege-escalation,post-exploitation,exploit,red-team,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"一个攻防知识库。A knowledge base for red teaming and offensive security."} +{"full_name":"ThunderCls/xAnalyzer","owner":"ThunderCls","name":"xAnalyzer","description":"xAnalyzer plugin for x64dbg","html_url":"https://github.com/ThunderCls/xAnalyzer","stars":1193,"language":"C","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"xAnalyzer plugin for x64dbg"} +{"full_name":"Tripwire/tripwire-open-source","owner":"Tripwire","name":"tripwire-open-source","description":"Open Source Tripwire®","html_url":"https://github.com/Tripwire/tripwire-open-source","stars":927,"language":"C++","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Open Source Tripwire®"} +{"full_name":"TryCatchHCF/Cloakify","owner":"TryCatchHCF","name":"Cloakify","description":"CloakifyFactory - Data Exfiltration \u0026 Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection","html_url":"https://github.com/TryCatchHCF/Cloakify","stars":1653,"language":"Python","topics":"pentesting,red-team,malware,cryptography","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"CloakifyFactory - Data Exfiltration \u0026 Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection"} +{"full_name":"TryCatchHCF/DumpsterFire","owner":"TryCatchHCF","name":"DumpsterFire","description":"\"Security Incidents In A Box!\" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- \u0026 Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences (\"narratives\") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.","html_url":"https://github.com/TryCatchHCF/DumpsterFire","stars":1035,"language":"Python","topics":"pentesting,red-team,malware,network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"\"Security Incidents In A Box!\" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- \u0026 Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences (\"narratives\") to simulate realistic scenarios and generate corresponding network and filesystem artifacts."} +{"full_name":"UCYBERS/Awesome-Blackhat-Tools","owner":"UCYBERS","name":"Awesome-Blackhat-Tools","description":"A curated list of tools officially presented at Black Hat events","html_url":"https://github.com/UCYBERS/Awesome-Blackhat-Tools","stars":780,"topics":"pentesting,osint,red-team,reverse-engineering,malware,forensics","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A curated list of tools officially presented at Black Hat events"} +{"full_name":"Ullaakut/cameradar","owner":"Ullaakut","name":"cameradar","description":"Cameradar hacks its way into RTSP videosurveillance cameras","html_url":"https://github.com/Ullaakut/cameradar","stars":4937,"language":"Go","topics":"malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Cameradar hacks its way into RTSP videosurveillance cameras"} +{"full_name":"Ullaakut/nmap","owner":"Ullaakut","name":"nmap","description":"Idiomatic nmap library for go developers","html_url":"https://github.com/Ullaakut/nmap","stars":1039,"language":"Go","topics":"malware,network,pentesting,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Idiomatic nmap library for go developers"} +{"full_name":"UnaPibaGeek/ctfr","owner":"UnaPibaGeek","name":"ctfr","description":"Abusing Certificate Transparency logs for getting HTTPS websites subdomains.","html_url":"https://github.com/UnaPibaGeek/ctfr","stars":2089,"language":"Python","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Abusing Certificate Transparency logs for getting HTTPS websites subdomains."} +{"full_name":"UndeadSec/SocialFish","owner":"UndeadSec","name":"SocialFish","description":"Phishing Tool \u0026 Information Collector","html_url":"https://github.com/UndeadSec/SocialFish","stars":4690,"language":"CSS","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Phishing Tool \u0026 Information Collector"} +{"full_name":"UniiemStudio/CTFever","owner":"UniiemStudio","name":"CTFever","description":"Fantastic toolkit for CTFers and everyone.","html_url":"https://github.com/UniiemStudio/CTFever","stars":918,"language":"Vue","topics":"network,cryptography","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Fantastic toolkit for CTFers and everyone."} +{"full_name":"Uniswap/v3-periphery","owner":"Uniswap","name":"v3-periphery","description":"🦄 🦄 🦄 Peripheral smart contracts for interacting with Uniswap v3","html_url":"https://github.com/Uniswap/v3-periphery","stars":1309,"language":"TypeScript","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"🦄 🦄 🦄 Peripheral smart contracts for interacting with Uniswap v3"} +{"full_name":"Vector35/binaryninja-api","owner":"Vector35","name":"binaryninja-api","description":"Public API, examples, documentation and issues for Binary Ninja","html_url":"https://github.com/Vector35/binaryninja-api","stars":1231,"language":"C++","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Public API, examples, documentation and issues for Binary Ninja"} +{"full_name":"Viralmaniar/I-See-You","owner":"Viralmaniar","name":"I-See-You","description":"ISeeYou is a Bash and Javascript tool to find the exact location of the users during social engineering or phishing engagements. Using exact location coordinates an attacker can perform preliminary reconnaissance which will help them in performing further targeted attacks.","html_url":"https://github.com/Viralmaniar/I-See-You","stars":1114,"language":"Shell","topics":"osint,red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"ISeeYou is a Bash and Javascript tool to find the exact location of the users during social engineering or phishing engagements. Using exact location coordinates an attacker can perform preliminary reconnaissance which will help them in performing further targeted attacks."} +{"full_name":"Viralmaniar/Passhunt","owner":"Viralmaniar","name":"Passhunt","description":"Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords.","html_url":"https://github.com/Viralmaniar/Passhunt","stars":1297,"language":"Python","topics":"malware,network,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords."} +{"full_name":"Viralmaniar/Powershell-RAT","owner":"Viralmaniar","name":"Powershell-RAT","description":"Python based backdoor that uses Gmail to exfiltrate data through attachment. This RAT will help during red team engagements to backdoor any Windows machines. It tracks the user activity using screen capture and sends it to an attacker as an e-mail attachment.","html_url":"https://github.com/Viralmaniar/Powershell-RAT","stars":1179,"language":"Python","topics":"red-team,malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Python based backdoor that uses Gmail to exfiltrate data through attachment. This RAT will help during red team engagements to backdoor any Windows machines. It tracks the user activity using screen capture and sends it to an attacker as an e-mail attachment."} +{"full_name":"VirtualAlllocEx/DEFCON-31-Syscalls-Workshop","owner":"VirtualAlllocEx","name":"DEFCON-31-Syscalls-Workshop","description":"The DEFCON 31 Syscalls Workshop repository provides educational materials focusing on direct and indirect syscalls within Windows operating systems, particularly aimed at enhancing understanding of Win32 and Native APIs for Red Team activities. It includes theoretical content, practical exercises, and proof of concepts (POCs) to facilitate learning about syscall mechanisms and their implications in EDR evasion. Notable features include an emphasis on manual techniques over complex automation, offering foundational insights into call stacks and shellcode execution dynamics.","html_url":"https://github.com/VirtualAlllocEx/DEFCON-31-Syscalls-Workshop","stars":751,"language":"C","topics":"malware","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"The DEFCON 31 Syscalls Workshop repository provides educational materials focusing on direct and indirect syscalls within Windows operating systems, particularly aimed at enhancing understanding of Win32 and Native APIs for Red Team activities. It includes theoretical content, practical exercises, and proof of concepts (POCs) to facilitate learning about syscall mechanisms and their implications in EDR evasion. Notable features include an emphasis on manual techniques over complex automation, offering foundational insights into call stacks and shellcode execution dynamics."} +{"full_name":"Vu1nT0tal/IoT-vulhub","owner":"Vu1nT0tal","name":"IoT-vulhub","description":"IoT固件漏洞复现环境","html_url":"https://github.com/Vu1nT0tal/IoT-vulhub","stars":1271,"language":"Python","topics":"exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"IoT固件漏洞复现环境"} +{"full_name":"WADComs/WADComs.github.io","owner":"WADComs","name":"WADComs.github.io","description":"WADComs is an interactive cheat sheet, containing a curated list of offensive security tools and their respective commands, to be used against Windows/AD environments.","html_url":"https://github.com/WADComs/WADComs.github.io","stars":1643,"language":"HTML","topics":"privilege-escalation,post-exploitation,exploit,red-team,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"WADComs is an interactive cheat sheet, containing a curated list of offensive security tools and their respective commands, to be used against Windows/AD environments."} +{"full_name":"WPeace-HcH/WPeChatGPT","owner":"WPeace-HcH","name":"WPeChatGPT","description":"A plugin for IDA that can help to analyze binary file, it can be based on commonly used AI big models such as OpenAI and DeepSeek.","html_url":"https://github.com/WPeace-HcH/WPeChatGPT","stars":1293,"language":"Python","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A plugin for IDA that can help to analyze binary file, it can be based on commonly used AI big models such as OpenAI and DeepSeek."} +{"full_name":"WSTxda/QP-Gallery-Releases","owner":"WSTxda","name":"QP-Gallery-Releases","description":"A modern, lightweight QuickPic Gallery with a fast, offline-first experience.","html_url":"https://github.com/WSTxda/QP-Gallery-Releases","stars":2540,"topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A modern, lightweight QuickPic Gallery with a fast, offline-first experience."} +{"full_name":"WangYihang/Platypus","owner":"WangYihang","name":"Platypus","description":":hammer: A modern multiple reverse shell sessions manager written in go","html_url":"https://github.com/WangYihang/Platypus","stars":1636,"language":"Go","topics":"red-team,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":":hammer: A modern multiple reverse shell sessions manager written in go"} +{"full_name":"Washi1337/AsmResolver","owner":"Washi1337","name":"AsmResolver","description":"A library for creating, reading and editing PE files and .NET modules.","html_url":"https://github.com/Washi1337/AsmResolver","stars":1056,"language":"C#","topics":"reverse-engineering,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A library for creating, reading and editing PE files and .NET modules."} +{"full_name":"We5ter/Scanners-Box","owner":"We5ter","name":"Scanners-Box","description":"A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑","html_url":"https://github.com/We5ter/Scanners-Box","stars":8863,"topics":"network,pentesting,scanner,exploit,red-team,reverse-engineering,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑"} +{"full_name":"WebBreacher/WhatsMyName","owner":"WebBreacher","name":"WhatsMyName","description":"This repository has the JSON file required to perform user enumeration on various websites.","html_url":"https://github.com/WebBreacher/WhatsMyName","stars":2408,"language":"Python","topics":"malware,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"This repository has the JSON file required to perform user enumeration on various websites."} +{"full_name":"WebBreacher/obsidian-osint-templates","owner":"WebBreacher","name":"obsidian-osint-templates","description":"The Obsidian OSINT Templates provide structures and frameworks for organizing data during Open Source Intelligence (OSINT) investigations using the Obsidian notetaking tool. Notable features include customizable templates designed to enhance data recording and connection-making, which facilitate efficient analysis and documentation of investigative findings. This resource aims to support both new and experienced users in effectively leveraging Obsidian for their OSINT needs.","html_url":"https://github.com/WebBreacher/obsidian-osint-templates","stars":752,"topics":"osint","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"The Obsidian OSINT Templates provide structures and frameworks for organizing data during Open Source Intelligence (OSINT) investigations using the Obsidian notetaking tool. Notable features include customizable templates designed to enhance data recording and connection-making, which facilitate efficient analysis and documentation of investigative findings. This resource aims to support both new and experienced users in effectively leveraging Obsidian for their OSINT needs."} +{"full_name":"WhiskeySockets/Baileys","owner":"WhiskeySockets","name":"Baileys","description":"Socket-based TS/JavaScript API for WhatsApp Web","html_url":"https://github.com/WhiskeySockets/Baileys","stars":8678,"language":"JavaScript","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Socket-based TS/JavaScript API for WhatsApp Web"} +{"full_name":"WhiteWinterWolf/wwwolf-php-webshell","owner":"WhiteWinterWolf","name":"wwwolf-php-webshell","description":"WhiteWinterWolf's PHP web shell","html_url":"https://github.com/WhiteWinterWolf/wwwolf-php-webshell","stars":764,"language":"PHP","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"WhiteWinterWolf's PHP web shell"} +{"full_name":"WithSecureLabs/doublepulsar-detection-script","owner":"WithSecureLabs","name":"doublepulsar-detection-script","description":"A python2 script for sweeping a network to find windows systems compromised with the DOUBLEPULSAR implant.","html_url":"https://github.com/WithSecureLabs/doublepulsar-detection-script","stars":1031,"language":"Python","topics":"scanner,network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A python2 script for sweeping a network to find windows systems compromised with the DOUBLEPULSAR implant."} +{"full_name":"WithSecureOpenSource/see","owner":"WithSecureOpenSource","name":"see","description":"Sandboxed Execution Environment","html_url":"https://github.com/WithSecureOpenSource/see","stars":821,"language":"Python","topics":"malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Sandboxed Execution Environment"} +{"full_name":"WyAtu/Perun","owner":"WyAtu","name":"Perun","description":"Perun是一款主要适用于乙方安服、渗透测试人员和甲方RedTeam红队人员的网络资产漏洞扫描器/扫描框架","html_url":"https://github.com/WyAtu/Perun","stars":1055,"language":"Python","topics":"exploit,red-team,pentesting,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Perun是一款主要适用于乙方安服、渗透测试人员和甲方RedTeam红队人员的网络资产漏洞扫描器/扫描框架"} +{"full_name":"Xyntax/POC-T","owner":"Xyntax","name":"POC-T","description":"渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework","html_url":"https://github.com/Xyntax/POC-T","stars":1952,"language":"Python","topics":"exploit,pentesting,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework"} +{"full_name":"Zarcolio/sitedorks","owner":"Zarcolio","name":"sitedorks","description":"Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom collection.","html_url":"https://github.com/Zarcolio/sitedorks","stars":1023,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom collection."} +{"full_name":"Zard2007/Gmail-Hack","owner":"Zard2007","name":"Gmail-Hack","description":"Gmail-Hack is a Python-based tool designed for unauthorized access to Gmail accounts, primarily focused on users operating in Termux or Linux environments. It features a straightforward installation process and is intended for educational purposes, with caveats regarding its ethical use. Notably, the tool claims to facilitate hacking actions with minimal setup time, emphasizing its ease of use for individuals familiar with command-line interfaces.","html_url":"https://github.com/Zard2007/Gmail-Hack","stars":726,"language":"Python","topics":"security-tools","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"Gmail-Hack is a Python-based tool designed for unauthorized access to Gmail accounts, primarily focused on users operating in Termux or Linux environments. It features a straightforward installation process and is intended for educational purposes, with caveats regarding its ethical use. Notably, the tool claims to facilitate hacking actions with minimal setup time, emphasizing its ease of use for individuals familiar with command-line interfaces."} +{"full_name":"Zeus-Labs/ZeusCloud","owner":"Zeus-Labs","name":"ZeusCloud","description":"ZeusCloud is an open-source cloud security platform designed to discover, prioritize, and remediate security risks across AWS environments. Its notable features include asset inventory creation, attack path discovery, graphical visualization of risks, customizable security controls, and comprehensive remediation guides, all aligned with compliance standards such as PCI DSS and CIS benchmarks. This tool addresses the complexities and challenges of securing expanding cloud workloads with user-friendly and actionable insights.","html_url":"https://github.com/Zeus-Labs/ZeusCloud","stars":729,"language":"TypeScript","topics":"pentesting","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"ZeusCloud is an open-source cloud security platform designed to discover, prioritize, and remediate security risks across AWS environments. Its notable features include asset inventory creation, attack path discovery, graphical visualization of risks, customizable security controls, and comprehensive remediation guides, all aligned with compliance standards such as PCI DSS and CIS benchmarks. This tool addresses the complexities and challenges of securing expanding cloud workloads with user-friendly and actionable insights."} +{"full_name":"Zeyad-Azima/Offensive-Resources","owner":"Zeyad-Azima","name":"Offensive-Resources","description":"A Huge Learning Resources with Labs For Offensive Security Players","html_url":"https://github.com/Zeyad-Azima/Offensive-Resources","stars":1114,"topics":"web-security,cloud-security,red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A Huge Learning Resources with Labs For Offensive Security Players"} +{"full_name":"Zouuup/landrun","owner":"Zouuup","name":"landrun","description":"Run any Linux process in a secure, unprivileged sandbox using Landlock. Think firejail, but lightweight, user-friendly, and baked into the kernel.","html_url":"https://github.com/Zouuup/landrun","stars":2155,"language":"Go","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Run any Linux process in a secure, unprivileged sandbox using Landlock. Think firejail, but lightweight, user-friendly, and baked into the kernel."} +{"full_name":"aaaguirrep/offensive-docker","owner":"aaaguirrep","name":"offensive-docker","description":"Offensive Docker is an image with the more used offensive tools to create an environment easily and quickly to launch assessment to the targets.","html_url":"https://github.com/aaaguirrep/offensive-docker","stars":767,"language":"Dockerfile","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Offensive Docker is an image with the more used offensive tools to create an environment easily and quickly to launch assessment to the targets."} +{"full_name":"aap/librw","owner":"aap","name":"librw","description":"librw is a cross-platform library designed to re-implement parts of RenderWare graphics, facilitating rendering and file format conversion across various platforms. It supports DFF and TXD file formats for PS2, D3D8, D3D9, and Xbox, with rendering capabilities via D3D9 and OpenGL backends, while being particularly useful for rendering within projects like GTA. Notable features include adaptable file format support, backend rendering versatility, and ongoing compatibility for multiple platforms.","html_url":"https://github.com/aap/librw","stars":747,"language":"C++","topics":"reverse-engineering","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"librw is a cross-platform library designed to re-implement parts of RenderWare graphics, facilitating rendering and file format conversion across various platforms. It supports DFF and TXD file formats for PS2, D3D8, D3D9, and Xbox, with rendering capabilities via D3D9 and OpenGL backends, while being particularly useful for rendering within projects like GTA. Notable features include adaptable file format support, backend rendering versatility, and ongoing compatibility for multiple platforms."} +{"full_name":"actuator/Android-Security-Exploits-YouTube-Curriculum","owner":"actuator","name":"Android-Security-Exploits-YouTube-Curriculum","description":"The Android Security \u0026 Reverse Engineering YouTube Curriculum is a comprehensive educational resource focused on various aspects of Android security, including exploits, reverse engineering, and vulnerabilities in mobile applications. It features a curated collection of talks and demonstrations from prominent security conferences, addressing topics like heap exploitation, mobile permissions, and countermeasures against mobile threats. Notably, it educates on advanced concepts such as Bluetooth security, malware analysis, and attack vectors affecting the Android ecosystem, making it essential for cybersecurity practitioners and researchers.","html_url":"https://github.com/actuator/Android-Security-Exploits-YouTube-Curriculum","stars":714,"topics":"malware,exploit,osint,reverse-engineering","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"The Android Security \u0026 Reverse Engineering YouTube Curriculum is a comprehensive educational resource focused on various aspects of Android security, including exploits, reverse engineering, and vulnerabilities in mobile applications. It features a curated collection of talks and demonstrations from prominent security conferences, addressing topics like heap exploitation, mobile permissions, and countermeasures against mobile threats. Notably, it educates on advanced concepts such as Bluetooth security, malware analysis, and attack vectors affecting the Android ecosystem, making it essential for cybersecurity practitioners and researchers."} +{"full_name":"adolfintel/OpenPods","owner":"adolfintel","name":"OpenPods","description":"The Free and Open Source app for monitoring your AirPods on Android","html_url":"https://github.com/adolfintel/OpenPods","stars":1197,"language":"Java","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"The Free and Open Source app for monitoring your AirPods on Android"} +{"full_name":"adysec/ARL","owner":"adysec","name":"ARL","description":"ARL 资产侦察灯塔系统（可运行，添加指纹，提高并发，升级工具及系统，无限制修改版） | ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。","html_url":"https://github.com/adysec/ARL","stars":905,"language":"Python","topics":"scanner,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"ARL 资产侦察灯塔系统（可运行，添加指纹，提高并发，升级工具及系统，无限制修改版） | ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。"} +{"full_name":"adysec/nuclei_poc","owner":"adysec","name":"nuclei_poc","description":"Nuclei POC，每2小时更新 | 自动整合全网Nuclei的漏洞POC，实时同步更新最新POC，保存已被删除的POC。通过批量克隆Github项目，获取Nuclei POC，并将POC按类别分类存放，使用Github Action实现。已有41w+POC，其中3.5w+高质量POC","html_url":"https://github.com/adysec/nuclei_poc","stars":1992,"topics":"scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Nuclei POC，每2小时更新 | 自动整合全网Nuclei的漏洞POC，实时同步更新最新POC，保存已被删除的POC。通过批量克隆Github项目，获取Nuclei POC，并将POC按类别分类存放，使用Github Action实现。已有41w+POC，其中3.5w+高质量POC"} +{"full_name":"ainfosec/FISSURE","owner":"ainfosec","name":"FISSURE","description":"The RF and reverse engineering framework for everyone. Follow and ★ to show your support!","html_url":"https://github.com/ainfosec/FISSURE","stars":1939,"language":"Python","topics":"reverse-engineering,network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"The RF and reverse engineering framework for everyone. Follow and ★ to show your support!"} +{"full_name":"airbus-seclab/bincat","owner":"airbus-seclab","name":"bincat","description":"Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection","html_url":"https://github.com/airbus-seclab/bincat","stars":1854,"language":"OCaml","topics":"reverse-engineering,malware,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection"} +{"full_name":"ajayrandhawa/Keylogger","owner":"ajayrandhawa","name":"Keylogger","description":"Keylogger is 100% invisible keylogger not only for users, but also undetectable by antivirus software. keylogger Monitors all keystokes, Mouse clicks. It has a seperate process which continues capture system screenshot and send to ftp server in given time.","html_url":"https://github.com/ajayrandhawa/Keylogger","stars":974,"language":"C++","topics":"malware,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Keylogger is 100% invisible keylogger not only for users, but also undetectable by antivirus software. keylogger Monitors all keystokes, Mouse clicks. It has a seperate process which continues capture system screenshot and send to ftp server in given time."} +{"full_name":"al0ne/Vxscan","owner":"al0ne","name":"Vxscan","description":"python3写的综合扫描工具，主要用来存活验证，敏感文件探测(目录扫描/js泄露接口/html注释泄露)，WAF/CDN识别，端口扫描，指纹/服务识别，操作系统识别，POC扫描，SQL注入，绕过CDN，查询旁站等功能，主要用来甲方自测或乙方授权测试，请勿用来搞破坏。","html_url":"https://github.com/al0ne/Vxscan","stars":1758,"language":"Python","topics":"pentesting,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"python3写的综合扫描工具，主要用来存活验证，敏感文件探测(目录扫描/js泄露接口/html注释泄露)，WAF/CDN识别，端口扫描，指纹/服务识别，操作系统识别，POC扫描，SQL注入，绕过CDN，查询旁站等功能，主要用来甲方自测或乙方授权测试，请勿用来搞破坏。"} +{"full_name":"alephdata/aleph","owner":"alephdata","name":"aleph","description":"Search and browse documents and data; find the people and companies you look for.","html_url":"https://github.com/alephdata/aleph","stars":2335,"language":"JavaScript","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Search and browse documents and data; find the people and companies you look for."} +{"full_name":"alexandreborges/malwoverview","owner":"alexandreborges","name":"malwoverview","description":"Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.","html_url":"https://github.com/alexandreborges/malwoverview","stars":3681,"language":"Python","topics":"malware,osint,scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis."} +{"full_name":"alexbieber/Bug_Bounty_writeups","owner":"alexbieber","name":"Bug_Bounty_writeups","description":"BUG BOUNTY WRITEUPS - OWASP TOP 10 🔴🔴🔴🔴✔","html_url":"https://github.com/alexbieber/Bug_Bounty_writeups","stars":853,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"BUG BOUNTY WRITEUPS - OWASP TOP 10 🔴🔴🔴🔴✔"} +{"full_name":"aliasrobotics/cai","owner":"aliasrobotics","name":"cai","description":"Cybersecurity AI (CAI), the framework for AI Security","html_url":"https://github.com/aliasrobotics/cai","stars":7512,"language":"Python","topics":"osint,malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Cybersecurity AI (CAI), the framework for AI Security"} +{"full_name":"almandin/fuxploider","owner":"almandin","name":"fuxploider","description":"File upload vulnerability scanner and exploitation tool.","html_url":"https://github.com/almandin/fuxploider","stars":3305,"language":"Python","topics":"exploit,pentesting,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"File upload vulnerability scanner and exploitation tool."} +{"full_name":"alphaSeclab/awesome-rat","owner":"alphaSeclab","name":"awesome-rat","description":"RAT And C\u0026C Resources. 250+ Open Source Projects, 1200+ RAT/C\u0026C blog/video.","html_url":"https://github.com/alphaSeclab/awesome-rat","stars":2184,"topics":"malware,red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"RAT And C\u0026C Resources. 250+ Open Source Projects, 1200+ RAT/C\u0026C blog/video."} +{"full_name":"alpkeskin/mosint","owner":"alpkeskin","name":"mosint","description":"An automated e-mail OSINT tool","html_url":"https://github.com/alpkeskin/mosint","stars":5759,"language":"Go","topics":"osint,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An automated e-mail OSINT tool"} +{"full_name":"alvin-tosh/Malware-Exhibit","owner":"alvin-tosh","name":"Malware-Exhibit","description":"🚀🚀 This is a 🎇🔥 REAL WORLD🔥 🎇 Malware Collection I have Compiled \u0026 analysed by researchers🔥 to understand more about Malware threats😈, analysis and mitigation🧐.","html_url":"https://github.com/alvin-tosh/Malware-Exhibit","stars":1154,"language":"Assembly","topics":"cryptography,osint,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"🚀🚀 This is a 🎇🔥 REAL WORLD🔥 🎇 Malware Collection I have Compiled \u0026 analysed by researchers🔥 to understand more about Malware threats😈, analysis and mitigation🧐."} +{"full_name":"anirudhmalik/xhunter","owner":"anirudhmalik","name":"xhunter","description":"Android Penetration Tool [ RAT for Android ]","html_url":"https://github.com/anirudhmalik/xhunter","stars":799,"language":"Java","topics":"malware,pentesting,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Android Penetration Tool [ RAT for Android ]"} +{"full_name":"ankit0183/Wifi-Hacking","owner":"ankit0183","name":"Wifi-Hacking","description":"Cyber Security Tool For Hacking Wireless Connections Using Built-In Kali Tools. Supports All Securities (WEP, WPS, WPA, WPA2/TKIP/IES)","html_url":"https://github.com/ankit0183/Wifi-Hacking","stars":2462,"language":"Python","topics":"network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Cyber Security Tool For Hacking Wireless Connections Using Built-In Kali Tools. Supports All Securities (WEP, WPS, WPA, WPA2/TKIP/IES)"} +{"full_name":"anouarbensaad/vulnx","owner":"anouarbensaad","name":"vulnx","description":"vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning.","html_url":"https://github.com/anouarbensaad/vulnx","stars":2091,"language":"Python","topics":"scanner,exploit,web-security,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning."} +{"full_name":"ansjdnakjdnajkd/iOS","owner":"ansjdnakjdnajkd","name":"iOS","description":"Most usable tools for iOS penetration testing","html_url":"https://github.com/ansjdnakjdnajkd/iOS","stars":1195,"topics":"malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Most usable tools for iOS penetration testing"} +{"full_name":"ant4g0nist/lisa.py","owner":"ant4g0nist","name":"lisa.py","description":"lisa.py is a Model-Context Protocol (MCP) integration for LLDB, enabling AI assistants like Claude to interact with debugging sessions through a structured interface. It consists of a server component to handle communication and a plugin for LLDB that exposes debugging functionalities via JSON-RPC, allowing users to execute commands verbally and enhance the debugging experience with natural language processing. Notable features include the capability to create targets, manage breakpoints, control process execution, and evaluate expressions directly from the AI assistant.","html_url":"https://github.com/ant4g0nist/lisa.py","stars":743,"language":"Python","topics":"malware,exploit,reverse-engineering","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"lisa.py is a Model-Context Protocol (MCP) integration for LLDB, enabling AI assistants like Claude to interact with debugging sessions through a structured interface. It consists of a server component to handle communication and a plugin for LLDB that exposes debugging functionalities via JSON-RPC, allowing users to execute commands verbally and enhance the debugging experience with natural language processing. Notable features include the capability to create targets, manage breakpoints, control process execution, and evaluate expressions directly from the AI assistant."} +{"full_name":"appsecco/breaking-and-pwning-apps-and-servers-aws-azure-training","owner":"appsecco","name":"breaking-and-pwning-apps-and-servers-aws-azure-training","description":"Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands on training!","html_url":"https://github.com/appsecco/breaking-and-pwning-apps-and-servers-aws-azure-training","stars":950,"language":"CSS","topics":"malware,pentesting,cloud-security","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands on training!"} +{"full_name":"appvia/krane","owner":"appvia","name":"krane","description":"Krane is a Kubernetes RBAC static analysis tool designed to identify security risks within K8s RBAC configurations and provide mitigation suggestions. Key features include a customizable set of built-in and user-defined risk rules, a user-friendly dashboard for visualizing RBAC posture, continuous analysis capabilities within clusters, and integration with Slack for alerting on significant risks. Additionally, Krane offers reporting in machine-readable formats and can be deployed locally, within CI/CD pipelines, or as a standalone service.","html_url":"https://github.com/appvia/krane","stars":738,"language":"Ruby","topics":"scanner,malware","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"Krane is a Kubernetes RBAC static analysis tool designed to identify security risks within K8s RBAC configurations and provide mitigation suggestions. Key features include a customizable set of built-in and user-defined risk rules, a user-friendly dashboard for visualizing RBAC posture, continuous analysis capabilities within clusters, and integration with Slack for alerting on significant risks. Additionally, Krane offers reporting in machine-readable formats and can be deployed locally, within CI/CD pipelines, or as a standalone service."} +{"full_name":"apurvsinghgautam/robin","owner":"apurvsinghgautam","name":"robin","description":"AI-Powered Dark Web OSINT Tool","html_url":"https://github.com/apurvsinghgautam/robin","stars":4537,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"AI-Powered Dark Web OSINT Tool"} +{"full_name":"aquasecurity/chain-bench","owner":"aquasecurity","name":"chain-bench","description":"An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark.","html_url":"https://github.com/aquasecurity/chain-bench","stars":770,"language":"Go","topics":"malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark."} +{"full_name":"aquasecurity/trivy-operator","owner":"aquasecurity","name":"trivy-operator","description":"Kubernetes-native security toolkit","html_url":"https://github.com/aquasecurity/trivy-operator","stars":1830,"language":"Go","topics":"scanner,exploit,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Kubernetes-native security toolkit"} +{"full_name":"arch3rPro/Pentest-Windows","owner":"arch3rPro","name":"Pentest-Windows","description":"⚔️Windows11 Penetration Suite Toolkit 🔰 The First Windows Penetration Testing Environment on Mac M Chips","html_url":"https://github.com/arch3rPro/Pentest-Windows","stars":3439,"topics":"pentesting,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"⚔️Windows11 Penetration Suite Toolkit 🔰 The First Windows Penetration Testing Environment on Mac M Chips"} +{"full_name":"arch3rPro/PentestTools","owner":"arch3rPro","name":"PentestTools","description":"Awesome Pentest Tools Collection","html_url":"https://github.com/arch3rPro/PentestTools","stars":1633,"topics":"scanner,exploit,malware,web-security,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Awesome Pentest Tools Collection"} +{"full_name":"archerysec/archerysec","owner":"archerysec","name":"archerysec","description":"ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.","html_url":"https://github.com/archerysec/archerysec","stars":2445,"language":"JavaScript","topics":"pentesting,scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec."} +{"full_name":"aress31/burpgpt","owner":"aress31","name":"burpgpt","description":"A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities and enables running traffic-based analysis of any type.","html_url":"https://github.com/aress31/burpgpt","stars":2285,"language":"Java","topics":"pentesting,scanner,malware,web-security","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities and enables running traffic-based analysis of any type."} +{"full_name":"arget13/DDexec","owner":"arget13","name":"DDexec","description":"A technique to run binaries filelessly and stealthily on Linux by \"overwriting\" the shell's process with another.","html_url":"https://github.com/arget13/DDexec","stars":881,"language":"Shell","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A technique to run binaries filelessly and stealthily on Linux by \"overwriting\" the shell's process with another."} +{"full_name":"asamy/ksm","owner":"asamy","name":"ksm","description":"A fast, hackable and simple x64 VT-x hypervisor for Windows and Linux. Builtin userspace sandbox and introspection engine.","html_url":"https://github.com/asamy/ksm","stars":860,"language":"C","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A fast, hackable and simple x64 VT-x hypervisor for Windows and Linux. Builtin userspace sandbox and introspection engine."} +{"full_name":"asaotomo/ZipCracker","owner":"asaotomo","name":"ZipCracker","description":"ZipCracker是Hx0战队出品的一款功能强大的Zip密码破解工具。它集成了字典攻击、掩码攻击和CRC32碰撞等多种破解模式，并能自动修复伪加密文件。凭借其高性能与多功能的特点，ZipCracker已成为CTF比赛中的一把利器。（ZipCracker by Hx0 team is a tool for cracking passwords on Zip files, great for CTF competitions.）","html_url":"https://github.com/asaotomo/ZipCracker","stars":811,"language":"Python","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"ZipCracker是Hx0战队出品的一款功能强大的Zip密码破解工具。它集成了字典攻击、掩码攻击和CRC32碰撞等多种破解模式，并能自动修复伪加密文件。凭借其高性能与多功能的特点，ZipCracker已成为CTF比赛中的一把利器。（ZipCracker by Hx0 team is a tool for cracking passwords on Zip files, great for CTF competitions.）"} +{"full_name":"atenreiro/opensquat","owner":"atenreiro","name":"opensquat","description":"The openSquat is an open-source tool for detecting domain look-alikes by searching for newly registered domains that might be impersonating legit domains and brands.","html_url":"https://github.com/atenreiro/opensquat","stars":942,"language":"Python","topics":"scanner,malware,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"The openSquat is an open-source tool for detecting domain look-alikes by searching for newly registered domains that might be impersonating legit domains and brands."} +{"full_name":"atiilla/GeoIntel","owner":"atiilla","name":"GeoIntel","description":"GeoIntel using Google's Gemini API to uncover the location where photos were taken through AI-powered geo-location analysis.","html_url":"https://github.com/atiilla/GeoIntel","stars":1008,"language":"HTML","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"GeoIntel using Google's Gemini API to uncover the location where photos were taken through AI-powered geo-location analysis."} +{"full_name":"authzed/spicedb","owner":"authzed","name":"spicedb","description":"Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data","html_url":"https://github.com/authzed/spicedb","stars":6537,"language":"Go","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data"} +{"full_name":"automeris-io/WebPlotDigitizer","owner":"automeris-io","name":"WebPlotDigitizer","description":"Computer vision assisted tool to extract numerical data from plot images.","html_url":"https://github.com/automeris-io/WebPlotDigitizer","stars":3028,"language":"JavaScript","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Computer vision assisted tool to extract numerical data from plot images."} +{"full_name":"ax/apk.sh","owner":"ax","name":"apk.sh","description":"Makes reverse engineering Android apps easier, automating repetitive tasks like pulling, decoding, rebuilding and patching an APK.","html_url":"https://github.com/ax/apk.sh","stars":3768,"language":"Shell","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Makes reverse engineering Android apps easier, automating repetitive tasks like pulling, decoding, rebuilding and patching an APK."} +{"full_name":"aydinnyunus/Keylogger","owner":"aydinnyunus","name":"Keylogger","description":"Get Keyboard,Mouse,ScreenShot,Microphone Inputs from Target Computer and Send to your Mail.","html_url":"https://github.com/aydinnyunus/Keylogger","stars":2715,"language":"Python","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Get Keyboard,Mouse,ScreenShot,Microphone Inputs from Target Computer and Send to your Mail."} +{"full_name":"ayoubfathi/leaky-paths","owner":"ayoubfathi","name":"leaky-paths","description":"A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.","html_url":"https://github.com/ayoubfathi/leaky-paths","stars":1029,"topics":"pentesting,osint,scanner,red-team,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins."} +{"full_name":"b1tg/CVE-2023-38831-winrar-exploit","owner":"b1tg","name":"CVE-2023-38831-winrar-exploit","description":"CVE-2023-38831 winrar exploit generator","html_url":"https://github.com/b1tg/CVE-2023-38831-winrar-exploit","stars":788,"language":"Python","topics":"malware,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"CVE-2023-38831 winrar exploit generator"} +{"full_name":"b23r0/Heroinn","owner":"b23r0","name":"Heroinn","description":"Heroinn is a cross-platform command-and-control (C2) and post-exploitation framework developed in Rust, designed primarily for research and educational purposes. Notable features include a graphical user interface (GUI), an interactive PTY shell, system information collection, file management with support for large files and resuming broken transfers, and compatibility with multiple operating systems including Windows, Linux, BSD, and macOS, leveraging various communication protocols such as TCP, HTTP, and reliable UDP.","html_url":"https://github.com/b23r0/Heroinn","stars":708,"language":"Rust","topics":"malware,exploit,post-exploitation,red-team,pentesting","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"Heroinn is a cross-platform command-and-control (C2) and post-exploitation framework developed in Rust, designed primarily for research and educational purposes. Notable features include a graphical user interface (GUI), an interactive PTY shell, system information collection, file management with support for large files and resuming broken transfers, and compatibility with multiple operating systems including Windows, Linux, BSD, and macOS, leveraging various communication protocols such as TCP, HTTP, and reliable UDP."} +{"full_name":"bahaabdelwahed/killshot","owner":"bahaabdelwahed","name":"killshot","description":"KillShot is a comprehensive penetration testing framework designed for information gathering and website vulnerability scanning. Its primary use case involves automating data collection through integrated tools such as WhatWeb and Nmap, while offering features like a CMS Exploit Scanner and web application vulnerability assessments, including XSS and SQL injection detection. The framework also facilitates backdoor generation and includes a fuzzer, making it a versatile tool for security professionals.","html_url":"https://github.com/bahaabdelwahed/killshot","stars":757,"language":"Ruby","topics":"malware,exploit,pentesting,scanner","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"KillShot is a comprehensive penetration testing framework designed for information gathering and website vulnerability scanning. Its primary use case involves automating data collection through integrated tools such as WhatWeb and Nmap, while offering features like a CMS Exploit Scanner and web application vulnerability assessments, including XSS and SQL injection detection. The framework also facilitates backdoor generation and includes a fuzzer, making it a versatile tool for security professionals."} +{"full_name":"basilfx/TRADFRI-Hacking","owner":"basilfx","name":"TRADFRI-Hacking","description":"TRADFRI-Hacking is a project designed to facilitate the reverse engineering and customization of IKEA’s TRÅDFRI home automation products, which utilize Zigbee technology. It offers detailed resources for product teardowns, firmware manipulation, and the creation of custom hardware solutions using the TRÅDFRI modules, including tools for firmware dumping and development. Notable features include an extensive documentation of various TRÅDFRI products, customizable firmware options, and insights into hardware modifications, empowering developers to repurpose and enhance these smart home devices.","html_url":"https://github.com/basilfx/TRADFRI-Hacking","stars":736,"language":"Makefile","topics":"reverse-engineering","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"TRADFRI-Hacking is a project designed to facilitate the reverse engineering and customization of IKEA’s TRÅDFRI home automation products, which utilize Zigbee technology. It offers detailed resources for product teardowns, firmware manipulation, and the creation of custom hardware solutions using the TRÅDFRI modules, including tools for firmware dumping and development. Notable features include an extensive documentation of various TRÅDFRI products, customizable firmware options, and insights into hardware modifications, empowering developers to repurpose and enhance these smart home devices."} +{"full_name":"bats3c/shad0w","owner":"bats3c","name":"shad0w","description":"A post exploitation framework designed to operate covertly on heavily monitored environments","html_url":"https://github.com/bats3c/shad0w","stars":2168,"language":"C","topics":"exploit,red-team,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A post exploitation framework designed to operate covertly on heavily monitored environments"} +{"full_name":"bcoles/kernel-exploits","owner":"bcoles","name":"kernel-exploits","description":"Various kernel exploits","html_url":"https://github.com/bcoles/kernel-exploits","stars":804,"language":"C","topics":"exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Various kernel exploits"} +{"full_name":"bee-san/Ciphey","owner":"bee-san","name":"Ciphey","description":"⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡","html_url":"https://github.com/bee-san/Ciphey","stars":21264,"language":"Python","topics":"osint,network,cryptography,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡"} +{"full_name":"bee-san/Name-That-Hash","owner":"bee-san","name":"Name-That-Hash","description":"🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥","html_url":"https://github.com/bee-san/Name-That-Hash","stars":1641,"language":"Python","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥"} +{"full_name":"bee-san/RustScan","owner":"bee-san","name":"RustScan","description":"🤖 The Modern Port Scanner 🤖","html_url":"https://github.com/bee-san/RustScan","stars":19482,"language":"Rust","topics":"network,pentesting,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"🤖 The Modern Port Scanner 🤖"} +{"full_name":"ben-sb/obfuscator-io-deobfuscator","owner":"ben-sb","name":"obfuscator-io-deobfuscator","description":"The Obfuscator.io Deobfuscator is a tool designed to reverse the obfuscation applied by Obfuscator.io, enabling the recovery of original scripts. Its primary use case is to facilitate code analysis and debugging by recovering strings, removing unnecessary code, and simplifying complex structures without executing untrusted code. Notable features include automatic configuration detection, improved readability through control flow restoration, and compatibility with various forks of the original obfuscator.","html_url":"https://github.com/ben-sb/obfuscator-io-deobfuscator","stars":760,"language":"TypeScript","topics":"reverse-engineering","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"The Obfuscator.io Deobfuscator is a tool designed to reverse the obfuscation applied by Obfuscator.io, enabling the recovery of original scripts. Its primary use case is to facilitate code analysis and debugging by recovering strings, removing unnecessary code, and simplifying complex structures without executing untrusted code. Notable features include automatic configuration detection, improved readability through control flow restoration, and compatibility with various forks of the original obfuscator."} +{"full_name":"bigblackhat/oFx","owner":"bigblackhat","name":"oFx","description":"一个开源的、开箱即用的漏洞批量验证框架","html_url":"https://github.com/bigblackhat/oFx","stars":903,"language":"Python","topics":"exploit,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"一个开源的、开箱即用的漏洞批量验证框架"} +{"full_name":"binref/refinery","owner":"binref","name":"refinery","description":"High Octane Triage Analysis","html_url":"https://github.com/binref/refinery","stars":830,"language":"Python","topics":"malware,cryptography","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"High Octane Triage Analysis"} +{"full_name":"bitbrute/evillimiter","owner":"bitbrute","name":"evillimiter","description":"Tool that monitors, analyzes and limits the bandwidth of devices on the local network without administrative access.","html_url":"https://github.com/bitbrute/evillimiter","stars":1924,"language":"Python","topics":"malware,network,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Tool that monitors, analyzes and limits the bandwidth of devices on the local network without administrative access."} +{"full_name":"bitquark/shortscan","owner":"bitquark","name":"shortscan","description":"An IIS short filename enumeration tool","html_url":"https://github.com/bitquark/shortscan","stars":1132,"language":"Go","topics":"red-team,malware,pentesting,scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An IIS short filename enumeration tool"} +{"full_name":"bitsadmin/wesng","owner":"bitsadmin","name":"wesng","description":"Windows Exploit Suggester - Next Generation","html_url":"https://github.com/bitsadmin/wesng","stars":4792,"language":"Python","topics":"exploit,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Windows Exploit Suggester - Next Generation"} +{"full_name":"bl4de/security-tools","owner":"bl4de","name":"security-tools","description":"My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.","html_url":"https://github.com/bl4de/security-tools","stars":912,"language":"Python","topics":"pentesting,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty."} +{"full_name":"blackarrowsec/mssqlproxy","owner":"blackarrowsec","name":"mssqlproxy","description":"mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse","html_url":"https://github.com/blackarrowsec/mssqlproxy","stars":770,"language":"Python","topics":"post-exploitation,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse"} +{"full_name":"blacklanternsecurity/bbot","owner":"blacklanternsecurity","name":"bbot","description":"The recursive internet scanner for hackers. 🧡","html_url":"https://github.com/blacklanternsecurity/bbot","stars":9526,"language":"Python","topics":"pentesting,osint,scanner,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"The recursive internet scanner for hackers. 🧡"} +{"full_name":"blackorbird/APT_REPORT","owner":"blackorbird","name":"APT_REPORT","description":"Interesting APT Report Collection And Some Special IOCs","html_url":"https://github.com/blackorbird/APT_REPORT","stars":2954,"language":"Python","topics":"exploit,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Interesting APT Report Collection And Some Special IOCs"} +{"full_name":"bloodzer0/ossa","owner":"bloodzer0","name":"ossa","description":"Open-Source Security Architecture | 开源安全架构","html_url":"https://github.com/bloodzer0/ossa","stars":943,"topics":"exploit,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Open-Source Security Architecture | 开源安全架构"} +{"full_name":"bluscreenofjeff/Red-Team-Infrastructure-Wiki","owner":"bluscreenofjeff","name":"Red-Team-Infrastructure-Wiki","description":"Wiki to collect Red Team infrastructure hardening resources","html_url":"https://github.com/bluscreenofjeff/Red-Team-Infrastructure-Wiki","stars":4463,"topics":"red-team,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Wiki to collect Red Team infrastructure hardening resources"} +{"full_name":"bootleg/ret-sync","owner":"bootleg","name":"ret-sync","description":"ret-sync is a set of plugins that helps to synchronize a debugging session (WinDbg/GDB/LLDB/OllyDbg2/x64dbg) with IDA/Ghidra/Binary Ninja disassemblers.","html_url":"https://github.com/bootleg/ret-sync","stars":2316,"language":"C","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"ret-sync is a set of plugins that helps to synchronize a debugging session (WinDbg/GDB/LLDB/OllyDbg2/x64dbg) with IDA/Ghidra/Binary Ninja disassemblers."} +{"full_name":"botesjuan/Burp-Suite-Certified-Practitioner-Exam-Study","owner":"botesjuan","name":"Burp-Suite-Certified-Practitioner-Exam-Study","description":"Burp Suite Certified Practitioner Exam Study","html_url":"https://github.com/botesjuan/Burp-Suite-Certified-Practitioner-Exam-Study","stars":1353,"language":"Python","topics":"web-security,pentesting,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Burp Suite Certified Practitioner Exam Study"} +{"full_name":"bountyyfi/lonkero","owner":"bountyyfi","name":"lonkero","description":"Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.","html_url":"https://github.com/bountyyfi/lonkero","stars":821,"language":"Rust","topics":"pentesting,scanner,exploit,malware,web-security","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust."} +{"full_name":"brightio/penelope","owner":"brightio","name":"penelope","description":"Penelope Shell Handler","html_url":"https://github.com/brightio/penelope","stars":1614,"language":"Python","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Penelope Shell Handler"} +{"full_name":"brimstone/go-shellcode","owner":"brimstone","name":"go-shellcode","description":"Load shellcode into a new process","html_url":"https://github.com/brimstone/go-shellcode","stars":767,"language":"Go","topics":"red-team,post-exploitation,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Load shellcode into a new process"} +{"full_name":"buffer/thug","owner":"buffer","name":"thug","description":"Python low-interaction honeyclient","html_url":"https://github.com/buffer/thug","stars":1021,"language":"Python","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Python low-interaction honeyclient"} +{"full_name":"byt3bl33d3r/DeathStar","owner":"byt3bl33d3r","name":"DeathStar","description":"Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive TTPs.","html_url":"https://github.com/byt3bl33d3r/DeathStar","stars":1623,"language":"Python","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive TTPs."} +{"full_name":"byt3bl33d3r/SILENTTRINITY","owner":"byt3bl33d3r","name":"SILENTTRINITY","description":"An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR","html_url":"https://github.com/byt3bl33d3r/SILENTTRINITY","stars":2330,"language":"Boo","topics":"red-team,malware,post-exploitation,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR"} +{"full_name":"byt3bl33d3r/WitnessMe","owner":"byt3bl33d3r","name":"WitnessMe","description":"WitnessMe is a versatile web inventory tool designed for efficient scanning and data gathering, primarily utilizing headless Chromium via the Pyppeteer library. It excels in processing large Nessus and NMap XML files, generates CSV and HTML reports, and features a RESTful API for remote scanning and extensibility to accommodate custom functionalities. With additional capabilities like HTTP proxy support, signature scanning through YAML files, and terminal screenshot previews, WitnessMe stands out for providing a comprehensive workflow without significant installation challenges.","html_url":"https://github.com/byt3bl33d3r/WitnessMe","stars":762,"language":"Python","topics":"osint","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"WitnessMe is a versatile web inventory tool designed for efficient scanning and data gathering, primarily utilizing headless Chromium via the Pyppeteer library. It excels in processing large Nessus and NMap XML files, generates CSV and HTML reports, and features a RESTful API for remote scanning and extensibility to accommodate custom functionalities. With additional capabilities like HTTP proxy support, signature scanning through YAML files, and terminal screenshot previews, WitnessMe stands out for providing a comprehensive workflow without significant installation challenges."} +{"full_name":"caido/caido","owner":"caido","name":"caido","description":"🚀 Caido releases, wiki and roadmap","html_url":"https://github.com/caido/caido","stars":2216,"language":"Shell","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"🚀 Caido releases, wiki and roadmap"} +{"full_name":"calesthio/Crucix","owner":"calesthio","name":"Crucix","description":"Your personal intelligence agent. Watches the world from multiple data sources and pings you when something changes.","html_url":"https://github.com/calesthio/Crucix","stars":6144,"language":"JavaScript","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Your personal intelligence agent. Watches the world from multiple data sources and pings you when something changes."} +{"full_name":"can1357/ByePg","owner":"can1357","name":"ByePg","description":"Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI.","html_url":"https://github.com/can1357/ByePg","stars":903,"language":"C++","topics":"exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI."} +{"full_name":"carnal0wnage/weirdAAL","owner":"carnal0wnage","name":"weirdAAL","description":"WeirdAAL (AWS Attack Library)","html_url":"https://github.com/carnal0wnage/weirdAAL","stars":838,"language":"Python","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"WeirdAAL (AWS Attack Library)"} +{"full_name":"caster0x00/Above","owner":"caster0x00","name":"Above","description":"Network Security Sniffer","html_url":"https://github.com/caster0x00/Above","stars":843,"language":"Python","topics":"pentesting,osint,network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Network Security Sniffer"} +{"full_name":"cckuailong/JNDI-Injection-Exploit-Plus","owner":"cckuailong","name":"JNDI-Injection-Exploit-Plus","description":"80+ Gadgets(30 More than ysoserial). JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server.","html_url":"https://github.com/cckuailong/JNDI-Injection-Exploit-Plus","stars":871,"language":"Java","topics":"exploit,malware,web-security","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"80+ Gadgets(30 More than ysoserial). JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server."} +{"full_name":"cddmp/enum4linux-ng","owner":"cddmp","name":"enum4linux-ng","description":"A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.","html_url":"https://github.com/cddmp/enum4linux-ng","stars":1554,"language":"Python","topics":"malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players."} +{"full_name":"cdk-team/CDK","owner":"cdk-team","name":"CDK","description":"📦 Make security testing of K8s, Docker, and Containerd easier.","html_url":"https://github.com/cdk-team/CDK","stars":4584,"language":"Go","topics":"exploit,malware,pentesting,privilege-escalation","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"📦 Make security testing of K8s, Docker, and Containerd easier."} +{"full_name":"cea-sec/miasm","owner":"cea-sec","name":"miasm","description":"Reverse engineering framework in Python","html_url":"https://github.com/cea-sec/miasm","stars":3841,"language":"Python","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Reverse engineering framework in Python"} +{"full_name":"certsocietegenerale/fame","owner":"certsocietegenerale","name":"fame","description":"FAME Automates Malware Evaluation","html_url":"https://github.com/certsocietegenerale/fame","stars":931,"language":"Python","topics":"malware,forensics","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"FAME Automates Malware Evaluation"} +{"full_name":"cfalta/MicrosoftWontFixList","owner":"cfalta","name":"MicrosoftWontFixList","description":"A list of vulnerabilities or design flaws that Microsoft does not intend to fix. Since the number is growing, I decided to make a list. This list covers only vulnerabilities that came up in July 2021 (and SpoolSample ;-))","html_url":"https://github.com/cfalta/MicrosoftWontFixList","stars":952,"topics":"red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A list of vulnerabilities or design flaws that Microsoft does not intend to fix. Since the number is growing, I decided to make a list. This list covers only vulnerabilities that came up in July 2021 (and SpoolSample ;-))"} +{"full_name":"chainreactors/gogo","owner":"chainreactors","name":"gogo","description":"面向红队的, 高性能高度自由可拓展的自动化扫描引擎 | A highly controllable and extensionable automated scanning engine for red teams","html_url":"https://github.com/chainreactors/gogo","stars":2028,"language":"Go","topics":"osint,scanner,red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"面向红队的, 高性能高度自由可拓展的自动化扫描引擎 | A highly controllable and extensionable automated scanning engine for red teams"} +{"full_name":"chainreactors/spray","owner":"chainreactors","name":"spray","description":"最好用最智能最可控的目录Fuzz工具 | The most powerful, user-friendly, intelligent, and precise HTTP Fuzzer.","html_url":"https://github.com/chainreactors/spray","stars":996,"language":"Go","topics":"red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"最好用最智能最可控的目录Fuzz工具 | The most powerful, user-friendly, intelligent, and precise HTTP Fuzzer."} +{"full_name":"chaitin/xray","owner":"chaitin","name":"xray","description":"一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档","html_url":"https://github.com/chaitin/xray","stars":11470,"language":"Vue","topics":"web-security,scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档"} +{"full_name":"chame1eon/jnitrace","owner":"chame1eon","name":"jnitrace","description":"A Frida based tool that traces usage of the JNI API in Android apps.","html_url":"https://github.com/chame1eon/jnitrace","stars":1821,"language":"TypeScript","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A Frida based tool that traces usage of the JNI API in Android apps."} +{"full_name":"charles2gan/GDA-android-reversing-Tool","owner":"charles2gan","name":"GDA-android-reversing-Tool","description":"the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python\u0026java scripts, device memory extraction, data decryption, and encryption, etc.","html_url":"https://github.com/charles2gan/GDA-android-reversing-Tool","stars":4687,"language":"Java","topics":"exploit,reverse-engineering,malware,cryptography,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python\u0026java scripts, device memory extraction, data decryption, and encryption, etc."} +{"full_name":"chenjj/espoofer","owner":"chenjj","name":"espoofer","description":"An email spoofing testing tool that aims to bypass SPF/DKIM/DMARC and forge DKIM signatures.🍻","html_url":"https://github.com/chenjj/espoofer","stars":1682,"language":"Python","topics":"pentesting,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An email spoofing testing tool that aims to bypass SPF/DKIM/DMARC and forge DKIM signatures.🍻"} +{"full_name":"chenxiancai/STCObfuscator","owner":"chenxiancai","name":"STCObfuscator","description":"iOS全局自动化 代码混淆 工具！支持cocoapod组件代码一并 混淆，完美避开hardcode方法、静态库方法和系统库方法！","html_url":"https://github.com/chenxiancai/STCObfuscator","stars":828,"language":"Objective-C","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"iOS全局自动化 代码混淆 工具！支持cocoapod组件代码一并 混淆，完美避开hardcode方法、静态库方法和系统库方法！"} +{"full_name":"christophetd/censys-subdomain-finder","owner":"christophetd","name":"censys-subdomain-finder","description":"⚡ Perform subdomain enumeration using the certificate transparency logs from Censys.","html_url":"https://github.com/christophetd/censys-subdomain-finder","stars":837,"language":"Python","topics":"malware,pentesting,osint,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"⚡ Perform subdomain enumeration using the certificate transparency logs from Censys."} +{"full_name":"cifertech/ESP32-DIV","owner":"cifertech","name":"ESP32-DIV","description":"ESP32DIV is a multi-purpose wireless testing toolkit powered by an ESP32","html_url":"https://github.com/cifertech/ESP32-DIV","stars":2671,"language":"C++","topics":"network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"ESP32DIV is a multi-purpose wireless testing toolkit powered by an ESP32"} +{"full_name":"cipher387/Dorks-collections-list","owner":"cipher387","name":"Dorks-collections-list","description":"List of Github repositories and articles with list of dorks for different search engines","html_url":"https://github.com/cipher387/Dorks-collections-list","stars":2553,"topics":"osint,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"List of Github repositories and articles with list of dorks for different search engines"} +{"full_name":"cipher387/cheatsheets","owner":"cipher387","name":"cheatsheets","description":"The Cyber Detective Cheatsheets repository provides a comprehensive collection of cheat sheets focused on various aspects of Open Source Intelligence (OSINT) gathering techniques. Notable features include easily accessible text versions of cheat sheets on topics such as username, email, and reverse image OSINT, as well as guides for information gathering from companies and geolocation data. This tool serves as a practical resource for security professionals and investigators looking to streamline their OSINT processes.","html_url":"https://github.com/cipher387/cheatsheets","stars":735,"topics":"osint","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"The Cyber Detective Cheatsheets repository provides a comprehensive collection of cheat sheets focused on various aspects of Open Source Intelligence (OSINT) gathering techniques. Notable features include easily accessible text versions of cheat sheets on topics such as username, email, and reverse image OSINT, as well as guides for information gathering from companies and geolocation data. This tool serves as a practical resource for security professionals and investigators looking to streamline their OSINT processes."} +{"full_name":"cisagov/LME","owner":"cisagov","name":"LME","description":"Logging Made Easy (LME) is a no cost, open source platform that centralizes log collection, enhances threat detection, and enables real-time alerting, helping small to medium-sized organizations secure their infrastructure. LME Docs can be found at https://cisagov.github.io/lme-docs/docs/","html_url":"https://github.com/cisagov/LME","stars":1392,"language":"Shell","topics":"network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Logging Made Easy (LME) is a no cost, open source platform that centralizes log collection, enhances threat detection, and enables real-time alerting, helping small to medium-sized organizations secure their infrastructure. LME Docs can be found at https://cisagov.github.io/lme-docs/docs/"} +{"full_name":"cisagov/thorium","owner":"cisagov","name":"thorium","description":"A scalable file analysis and data generation platform that allows users to easily orchestrate arbitrary docker/vm/shell tools at scale.","html_url":"https://github.com/cisagov/thorium","stars":989,"language":"Rust","topics":"malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A scalable file analysis and data generation platform that allows users to easily orchestrate arbitrary docker/vm/shell tools at scale."} +{"full_name":"ckane/CS7038-Malware-Analysis","owner":"ckane","name":"CS7038-Malware-Analysis","description":"Course Repository for University of Cincinnati Malware Analysis Class (CS[567]038)","html_url":"https://github.com/ckane/CS7038-Malware-Analysis","stars":1342,"language":"HTML","topics":"malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Course Repository for University of Cincinnati Malware Analysis Class (CS[567]038)"} +{"full_name":"claabs/epicgames-freegames-node","owner":"claabs","name":"epicgames-freegames-node","description":"Automatically login and find available free games the Epic Games Store. Sends you a prepopulated checkout link so you can complete the checkout after logging in. Supports multiple accounts, login sessions, and scheduled runs.","html_url":"https://github.com/claabs/epicgames-freegames-node","stars":1892,"language":"TypeScript","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Automatically login and find available free games the Epic Games Store. Sends you a prepopulated checkout link so you can complete the checkout after logging in. Supports multiple accounts, login sessions, and scheduled runs."} +{"full_name":"cloudgraphdev/cli","owner":"cloudgraphdev","name":"cli","description":"The universal GraphQL API and CSPM tool for AWS, Azure, GCP, K8s, and tencent.","html_url":"https://github.com/cloudgraphdev/cli","stars":889,"language":"TypeScript","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"The universal GraphQL API and CSPM tool for AWS, Azure, GCP, K8s, and tencent."} +{"full_name":"cobbr/Covenant","owner":"cobbr","name":"Covenant","description":"Covenant is a collaborative .NET C2 framework for red teamers.","html_url":"https://github.com/cobbr/Covenant","stars":4646,"language":"C#","topics":"red-team,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Covenant is a collaborative .NET C2 framework for red teamers."} +{"full_name":"codingo/Interlace","owner":"codingo","name":"Interlace","description":"Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.","html_url":"https://github.com/codingo/Interlace","stars":1286,"language":"Python","topics":"malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support."} +{"full_name":"codingo/NoSQLMap","owner":"codingo","name":"NoSQLMap","description":"Automated NoSQL database enumeration and web application exploitation tool.","html_url":"https://github.com/codingo/NoSQLMap","stars":3249,"language":"Python","topics":"exploit,malware,web-security,pentesting,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Automated NoSQL database enumeration and web application exploitation tool."} +{"full_name":"codingo/Reconnoitre","owner":"codingo","name":"Reconnoitre","description":"A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.","html_url":"https://github.com/codingo/Reconnoitre","stars":2188,"language":"Python","topics":"malware,pentesting,osint,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing."} +{"full_name":"codingo/VHostScan","owner":"codingo","name":"VHostScan","description":"A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.","html_url":"https://github.com/codingo/VHostScan","stars":1285,"language":"Python","topics":"malware,pentesting,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages."} +{"full_name":"commaai/opendbc","owner":"commaai","name":"opendbc","description":"a Python API for your car","html_url":"https://github.com/commaai/opendbc","stars":3002,"language":"Python","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"a Python API for your car"} +{"full_name":"commixproject/commix","owner":"commixproject","name":"commix","description":"Automated All-in-One OS Command Injection Exploitation Tool","html_url":"https://github.com/commixproject/commix","stars":5683,"language":"Python","topics":"web-security,pentesting,scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Automated All-in-One OS Command Injection Exploitation Tool"} +{"full_name":"cracker911181/Cracker-Tool","owner":"cracker911181","name":"Cracker-Tool","description":"All in One CRACKER911181's Tool. This Tool For Hacking and Pentesting. 🎭","html_url":"https://github.com/cracker911181/Cracker-Tool","stars":879,"language":"Python","topics":"pentesting,web-security","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"All in One CRACKER911181's Tool. This Tool For Hacking and Pentesting. 🎭"} +{"full_name":"cujanovic/SSRF-Testing","owner":"cujanovic","name":"SSRF-Testing","description":"SSRF (Server Side Request Forgery) testing resources","html_url":"https://github.com/cujanovic/SSRF-Testing","stars":2482,"language":"Python","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"SSRF (Server Side Request Forgery) testing resources"} +{"full_name":"curated-intel/Ukraine-Cyber-Operations","owner":"curated-intel","name":"Ukraine-Cyber-Operations","description":"Curated Intelligence is working with analysts from around the world to provide useful information to organisations in Ukraine looking for additional free threat intelligence. Slava Ukraini. Glory to Ukraine.","html_url":"https://github.com/curated-intel/Ukraine-Cyber-Operations","stars":937,"language":"YARA","topics":"malware,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Curated Intelligence is working with analysts from around the world to provide useful information to organisations in Ukraine looking for additional free threat intelligence. Slava Ukraini. Glory to Ukraine."} +{"full_name":"cyberark/SkyArk","owner":"cyberark","name":"SkyArk","description":"SkyArk helps to discover, assess and secure the most privileged entities in Azure and AWS","html_url":"https://github.com/cyberark/SkyArk","stars":912,"language":"PowerShell","topics":"cloud-security","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"SkyArk helps to discover, assess and secure the most privileged entities in Azure and AWS"} +{"full_name":"cybersecsi/houdini","owner":"cybersecsi","name":"houdini","description":"Hundreds of Offensive and Useful Docker Images for Network Intrusion. The name says it all.","html_url":"https://github.com/cybersecsi/houdini","stars":1249,"language":"TypeScript","topics":"network,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Hundreds of Offensive and Useful Docker Images for Network Intrusion. The name says it all."} +{"full_name":"cycloidio/terracognita","owner":"cycloidio","name":"terracognita","description":"Reads from existing public and private cloud providers (reverse Terraform) and generates your infrastructure as code on Terraform configuration","html_url":"https://github.com/cycloidio/terracognita","stars":2355,"language":"Go","topics":"malware,reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Reads from existing public and private cloud providers (reverse Terraform) and generates your infrastructure as code on Terraform configuration"} +{"full_name":"cytopia/pwncat","owner":"cytopia","name":"pwncat","description":"pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)","html_url":"https://github.com/cytopia/pwncat","stars":1933,"language":"Shell","topics":"malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)"} +{"full_name":"daem0nc0re/TangledWinExec","owner":"daem0nc0re","name":"TangledWinExec","description":"PoCs and tools for investigation of Windows process execution techniques","html_url":"https://github.com/daem0nc0re/TangledWinExec","stars":954,"language":"C#","topics":"red-team,reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"PoCs and tools for investigation of Windows process execution techniques"} +{"full_name":"danieldurnea/FBI-tools","owner":"danieldurnea","name":"FBI-tools","description":"🕵️ OSINT Tools for gathering information and actions forensics 🕵️","html_url":"https://github.com/danieldurnea/FBI-tools","stars":2436,"topics":"forensics,pentesting,osint,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"🕵️ OSINT Tools for gathering information and actions forensics 🕵️"} +{"full_name":"danielkrupinski/Osiris","owner":"danielkrupinski","name":"Osiris","description":"Cross-platform game hack for Counter-Strike 2 with Panorama-based GUI.","html_url":"https://github.com/danielkrupinski/Osiris","stars":3675,"language":"C++","topics":"reverse-engineering,web-security","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Cross-platform game hack for Counter-Strike 2 with Panorama-based GUI."} +{"full_name":"danielkrupinski/VAC","owner":"danielkrupinski","name":"VAC","description":"Source code of Valve Anti-Cheat obtained from disassembly of compiled modules","html_url":"https://github.com/danielkrupinski/VAC","stars":810,"language":"C","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Source code of Valve Anti-Cheat obtained from disassembly of compiled modules"} +{"full_name":"danielrobbins/keychain","owner":"danielrobbins","name":"keychain","description":"A manager for ssh-agent and gpg-agent","html_url":"https://github.com/danielrobbins/keychain","stars":977,"language":"Shell","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A manager for ssh-agent and gpg-agent"} +{"full_name":"danigargu/CVE-2020-0796","owner":"danigargu","name":"CVE-2020-0796","description":"CVE-2020-0796 - Windows SMBv3 LPE exploit #SMBGhost","html_url":"https://github.com/danigargu/CVE-2020-0796","stars":1351,"language":"C","topics":"exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"CVE-2020-0796 - Windows SMBv3 LPE exploit #SMBGhost"} +{"full_name":"danigargu/heap-viewer","owner":"danigargu","name":"heap-viewer","description":"IDA Pro plugin to examine the glibc heap, focused on exploit development","html_url":"https://github.com/danigargu/heap-viewer","stars":769,"language":"Python","topics":"exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"IDA Pro plugin to examine the glibc heap, focused on exploit development"} +{"full_name":"darkarp/chromepass","owner":"darkarp","name":"chromepass","description":"Chromepass - Hacking Chrome Saved Passwords","html_url":"https://github.com/darkarp/chromepass","stars":823,"language":"Rust","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Chromepass - Hacking Chrome Saved Passwords"} +{"full_name":"darkr4y/geacon","owner":"darkr4y","name":"geacon","description":"Practice Go programming and implement CobaltStrike's Beacon in Go","html_url":"https://github.com/darkr4y/geacon","stars":1262,"language":"Go","topics":"reverse-engineering,red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Practice Go programming and implement CobaltStrike's Beacon in Go"} +{"full_name":"das-labor/panopticon","owner":"das-labor","name":"panopticon","description":"A libre cross-platform disassembler.","html_url":"https://github.com/das-labor/panopticon","stars":1441,"language":"Rust","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A libre cross-platform disassembler."} +{"full_name":"david942j/one_gadget","owner":"david942j","name":"one_gadget","description":"The best tool for finding one gadget RCE in libc.so.6","html_url":"https://github.com/david942j/one_gadget","stars":2308,"language":"Ruby","topics":"exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"The best tool for finding one gadget RCE in libc.so.6"} +{"full_name":"decalage2/ViperMonkey","owner":"decalage2","name":"ViperMonkey","description":"A VBA parser and emulation engine to analyze malicious macros.","html_url":"https://github.com/decalage2/ViperMonkey","stars":1117,"language":"Python","topics":"malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A VBA parser and emulation engine to analyze malicious macros."} +{"full_name":"decalage2/awesome-security-hardening","owner":"decalage2","name":"awesome-security-hardening","description":"A collection of awesome security hardening guides, tools and other resources","html_url":"https://github.com/decalage2/awesome-security-hardening","stars":6227,"topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A collection of awesome security hardening guides, tools and other resources"} +{"full_name":"decalage2/oletools","owner":"decalage2","name":"oletools","description":"oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.","html_url":"https://github.com/decalage2/oletools","stars":3300,"language":"Python","topics":"malware,forensics","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging."} +{"full_name":"dedsec1121fk/DedSec","owner":"dedsec1121fk","name":"DedSec","description":"Unofficial DedSec Project GitHub Repository","html_url":"https://github.com/dedsec1121fk/DedSec","stars":922,"language":"Python","topics":"pentesting,osint,exploit,malware,network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Unofficial DedSec Project GitHub Repository"} +{"full_name":"deepfence/SecretScanner","owner":"deepfence","name":"SecretScanner","description":":unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:","html_url":"https://github.com/deepfence/SecretScanner","stars":3274,"language":"Go","topics":"scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":":unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:"} +{"full_name":"deibit/cansina","owner":"deibit","name":"cansina","description":"Web Content Discovery Tool","html_url":"https://github.com/deibit/cansina","stars":907,"language":"Python","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Web Content Discovery Tool"} +{"full_name":"dembrandt/dembrandt","owner":"dembrandt","name":"dembrandt","description":"Extract any website’s design system into tokens in seconds: logo, colors, typography, borders \u0026 more. One command.","html_url":"https://github.com/dembrandt/dembrandt","stars":1542,"language":"JavaScript","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Extract any website’s design system into tokens in seconds: logo, colors, typography, borders \u0026 more. One command."} +{"full_name":"denji/golang-tls","owner":"denji","name":"golang-tls","description":"Simple Golang HTTPS/TLS Examples","html_url":"https://github.com/denji/golang-tls","stars":1329,"topics":"scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Simple Golang HTTPS/TLS Examples"} +{"full_name":"dethrace-labs/dethrace","owner":"dethrace-labs","name":"dethrace","description":"Reverse engineering the 1997 game \"Carmageddon\"","html_url":"https://github.com/dethrace-labs/dethrace","stars":1105,"language":"C","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Reverse engineering the 1997 game \"Carmageddon\""} +{"full_name":"devanshbatham/FavFreak","owner":"devanshbatham","name":"FavFreak","description":"Making Favicon.ico based Recon Great again !","html_url":"https://github.com/devanshbatham/FavFreak","stars":1269,"language":"Python","topics":"web-security,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Making Favicon.ico based Recon Great again !"} +{"full_name":"devanshbatham/ParamSpider","owner":"devanshbatham","name":"ParamSpider","description":"Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing","html_url":"https://github.com/devanshbatham/ParamSpider","stars":3024,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing"} +{"full_name":"devploit/nomore403","owner":"devploit","name":"nomore403","description":"🚫 Advanced tool for security researchers to bypass 403/40X restrictions through smart techniques and adaptive request manipulation. Fast. Precise. Effective.","html_url":"https://github.com/devploit/nomore403","stars":1555,"language":"Go","topics":"pentesting,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"🚫 Advanced tool for security researchers to bypass 403/40X restrictions through smart techniques and adaptive request manipulation. Fast. Precise. Effective."} +{"full_name":"devxprite/infoooze","owner":"devxprite","name":"infoooze","description":"A OSINT tool which helps you to quickly find information effectively. All you need is to input and it will take take care of rest.","html_url":"https://github.com/devxprite/infoooze","stars":988,"language":"JavaScript","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A OSINT tool which helps you to quickly find information effectively. All you need is to input and it will take take care of rest."} +{"full_name":"diego-treitos/linux-smart-enumeration","owner":"diego-treitos","name":"linux-smart-enumeration","description":"Linux enumeration tool for pentesting and CTFs with verbosity levels","html_url":"https://github.com/diego-treitos/linux-smart-enumeration","stars":3869,"language":"Shell","topics":"malware,pentesting,privilege-escalation","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Linux enumeration tool for pentesting and CTFs with verbosity levels"} +{"full_name":"diegocr/netcat","owner":"diegocr","name":"netcat","description":"NetCat for Windows","html_url":"https://github.com/diegocr/netcat","stars":885,"language":"C","topics":"pentesting,malware,network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"NetCat for Windows"} +{"full_name":"digitalblossom/alternative-frontends","owner":"digitalblossom","name":"alternative-frontends","description":"🔐🌐 Privacy-respecting web frontends for popular services","html_url":"https://github.com/digitalblossom/alternative-frontends","stars":2220,"topics":"network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"🔐🌐 Privacy-respecting web frontends for popular services"} +{"full_name":"digitaldisarray/OSINT-Tools","owner":"digitaldisarray","name":"OSINT-Tools","description":"OSINT-Tools is a curated collection of open-source intelligence (OSINT) tools aimed at facilitating the gathering and analysis of publicly available information. It includes a variety of tools for data extraction, reconnaissance, metadata analysis, and geolocation, with notable options like Maltego for link analysis, Recon-ng for web-based reconnaissance, and SpiderFoot for footprinting. The repository encourages contributions through pull requests, providing a collaborative platform for enhancing OSINT resources.","html_url":"https://github.com/digitaldisarray/OSINT-Tools","stars":737,"topics":"osint","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"OSINT-Tools is a curated collection of open-source intelligence (OSINT) tools aimed at facilitating the gathering and analysis of publicly available information. It includes a variety of tools for data extraction, reconnaissance, metadata analysis, and geolocation, with notable options like Maltego for link analysis, Recon-ng for web-based reconnaissance, and SpiderFoot for footprinting. The repository encourages contributions through pull requests, providing a collaborative platform for enhancing OSINT resources."} +{"full_name":"disclose/diodb","owner":"disclose","name":"diodb","description":"Open-source vulnerability disclosure and bug bounty program database","html_url":"https://github.com/disclose/diodb","stars":1054,"language":"Python","topics":"exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Open-source vulnerability disclosure and bug bounty program database"} +{"full_name":"dotenvx/dotenvx","owner":"dotenvx","name":"dotenvx","description":"a secure dotenv–from the creator of `dotenv`","html_url":"https://github.com/dotenvx/dotenvx","stars":5228,"language":"JavaScript","topics":"malware,cryptography","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"a secure dotenv–from the creator of `dotenv`"} +{"full_name":"doxx/darkflare","owner":"doxx","name":"darkflare","description":"DarkFlare Firewall Piercing (TCP over CDN)","html_url":"https://github.com/doxx/darkflare","stars":1576,"language":"Go","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"DarkFlare Firewall Piercing (TCP over CDN)"} +{"full_name":"doyensec/inql","owner":"doyensec","name":"inql","description":"InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.","html_url":"https://github.com/doyensec/inql","stars":1745,"language":"Kotlin","topics":"web-security,pentesting,scanner,exploit,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration."} +{"full_name":"dpnishant/appmon","owner":"dpnishant","name":"appmon","description":"Documentation:","html_url":"https://github.com/dpnishant/appmon","stars":1618,"language":"JavaScript","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Documentation:"} +{"full_name":"dradis/dradis-ce","owner":"dradis","name":"dradis-ce","description":"Dradis Framework: Collaboration and reporting for IT Security teams","html_url":"https://github.com/dradis/dradis-ce","stars":787,"language":"Ruby","topics":"malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Dradis Framework: Collaboration and reporting for IT Security teams"} +{"full_name":"drk1wi/Modlishka","owner":"drk1wi","name":"Modlishka","description":"Modlishka. Reverse Proxy.","html_url":"https://github.com/drk1wi/Modlishka","stars":5293,"language":"Go","topics":"pentesting,malware,network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Modlishka. Reverse Proxy."} +{"full_name":"dronesploit/dronesploit","owner":"dronesploit","name":"dronesploit","description":"Drone pentesting framework console","html_url":"https://github.com/dronesploit/dronesploit","stars":1850,"language":"Python","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Drone pentesting framework console"} +{"full_name":"dsasmblr/game-hacking","owner":"dsasmblr","name":"game-hacking","description":"Tutorials, tools, and more as related to reverse engineering video games.","html_url":"https://github.com/dsasmblr/game-hacking","stars":5414,"topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Tutorials, tools, and more as related to reverse engineering video games."} +{"full_name":"dsasmblr/hacking-online-games","owner":"dsasmblr","name":"hacking-online-games","description":"A curated list of tutorials/resources for hacking online games.","html_url":"https://github.com/dsasmblr/hacking-online-games","stars":1807,"topics":"malware,reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A curated list of tutorials/resources for hacking online games."} +{"full_name":"dwisiswant0/apkleaks","owner":"dwisiswant0","name":"apkleaks","description":"Scanning APK file for URIs, endpoints \u0026 secrets.","html_url":"https://github.com/dwisiswant0/apkleaks","stars":6008,"language":"Python","topics":"reverse-engineering,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Scanning APK file for URIs, endpoints \u0026 secrets."} +{"full_name":"dwisiswant0/awesome-oneliner-bugbounty","owner":"dwisiswant0","name":"awesome-oneliner-bugbounty","description":"A collection of awesome one-liner scripts especially for bug bounty tips.","html_url":"https://github.com/dwisiswant0/awesome-oneliner-bugbounty","stars":3087,"topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A collection of awesome one-liner scripts especially for bug bounty tips."} +{"full_name":"dwisiswant0/crlfuzz","owner":"dwisiswant0","name":"crlfuzz","description":"A fast tool to scan CRLF vulnerability written in Go","html_url":"https://github.com/dwisiswant0/crlfuzz","stars":1521,"language":"Go","topics":"web-security,scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A fast tool to scan CRLF vulnerability written in Go"} +{"full_name":"echowei/DeepTraffic","owner":"echowei","name":"DeepTraffic","description":"Deep Learning models for network traffic classification","html_url":"https://github.com/echowei/DeepTraffic","stars":763,"language":"Python","topics":"malware,network,cryptography","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Deep Learning models for network traffic classification"} +{"full_name":"edoardottt/awesome-hacker-search-engines","owner":"edoardottt","name":"awesome-hacker-search-engines","description":"A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more","html_url":"https://github.com/edoardottt/awesome-hacker-search-engines","stars":10347,"language":"Shell","topics":"osint,exploit,red-team,malware,network,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more"} +{"full_name":"edoardottt/scilla","owner":"edoardottt","name":"scilla","description":"Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration","html_url":"https://github.com/edoardottt/scilla","stars":1225,"language":"Go","topics":"pentesting,osint,scanner,malware,network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration"} +{"full_name":"ehrishirajsharma/SwiftnessX","owner":"ehrishirajsharma","name":"SwiftnessX","description":"A cross-platform note-taking \u0026 target-tracking app for penetration testers.","html_url":"https://github.com/ehrishirajsharma/SwiftnessX","stars":916,"language":"JavaScript","topics":"pentesting,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A cross-platform note-taking \u0026 target-tracking app for penetration testers."} +{"full_name":"elceef/dnstwist","owner":"elceef","name":"dnstwist","description":"Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation","html_url":"https://github.com/elceef/dnstwist","stars":5613,"language":"Python","topics":"osint,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation"} +{"full_name":"elder-plinius/CL4R1T4S","owner":"elder-plinius","name":"CL4R1T4S","description":"LEAKED SYSTEM PROMPTS FOR CHATGPT, GEMINI, GROK, CLAUDE, PERPLEXITY, CURSOR, DEVIN, REPLIT, AND MORE! - AI SYSTEMS TRANSPARENCY FOR ALL! 👐","html_url":"https://github.com/elder-plinius/CL4R1T4S","stars":13877,"topics":"red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"LEAKED SYSTEM PROMPTS FOR CHATGPT, GEMINI, GROK, CLAUDE, PERPLEXITY, CURSOR, DEVIN, REPLIT, AND MORE! - AI SYSTEMS TRANSPARENCY FOR ALL! 👐"} +{"full_name":"eliboa/TegraRcmGUI","owner":"eliboa","name":"TegraRcmGUI","description":"C++ GUI for TegraRcmSmash (Fusée Gelée exploit for Nintendo Switch)","html_url":"https://github.com/eliboa/TegraRcmGUI","stars":2214,"language":"C++","topics":"exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"C++ GUI for TegraRcmSmash (Fusée Gelée exploit for Nintendo Switch)"} +{"full_name":"emsec/hal","owner":"emsec","name":"hal","description":"HAL – The Hardware Analyzer","html_url":"https://github.com/emsec/hal","stars":787,"language":"C++","topics":"malware,reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"HAL – The Hardware Analyzer"} +{"full_name":"epsylon/xsser","owner":"epsylon","name":"xsser","description":"Cross Site \"Scripter\" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications.","html_url":"https://github.com/epsylon/xsser","stars":1428,"language":"Python","topics":"pentesting,exploit,web-security","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Cross Site \"Scripter\" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications."} +{"full_name":"erev0s/VAmPI","owner":"erev0s","name":"VAmPI","description":"Vulnerable REST API with OWASP top 10 vulnerabilities for security testing","html_url":"https://github.com/erev0s/VAmPI","stars":1191,"language":"Python","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Vulnerable REST API with OWASP top 10 vulnerabilities for security testing"} +{"full_name":"ergrelet/unlicense","owner":"ergrelet","name":"unlicense","description":"Dynamic unpacker and import fixer for Themida/WinLicense 2.x and 3.x.","html_url":"https://github.com/ergrelet/unlicense","stars":1361,"language":"Python","topics":"malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Dynamic unpacker and import fixer for Themida/WinLicense 2.x and 3.x."} +{"full_name":"ericc-ch/copilot-api","owner":"ericc-ch","name":"copilot-api","description":"Turn GitHub Copilot into OpenAI/Anthropic API compatible server. Usable with Claude Code!","html_url":"https://github.com/ericc-ch/copilot-api","stars":3130,"language":"TypeScript","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Turn GitHub Copilot into OpenAI/Anthropic API compatible server. Usable with Claude Code!"} +{"full_name":"es3n1n/obfuscator","owner":"es3n1n","name":"obfuscator","description":"PE (and elf now!) bin2bin obfuscator","html_url":"https://github.com/es3n1n/obfuscator","stars":831,"language":"C++","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"PE (and elf now!) bin2bin obfuscator"} +{"full_name":"eteran/edb-debugger","owner":"eteran","name":"edb-debugger","description":"edb is a cross-platform AArch32/x86/x86-64 debugger.","html_url":"https://github.com/eteran/edb-debugger","stars":2905,"language":"C++","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"edb is a cross-platform AArch32/x86/x86-64 debugger."} +{"full_name":"eth0izzle/shhgit","owner":"eth0izzle","name":"shhgit","description":"Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.","html_url":"https://github.com/eth0izzle/shhgit","stars":3947,"language":"JavaScript","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories."} +{"full_name":"ev-flow/quark-engine","owner":"ev-flow","name":"quark-engine","description":"Quark Engine is a comprehensive tool designed for malware family analysis and vulnerability assessment, particularly in the context of Android malware. Its primary use case involves identifying and reporting on various malware behaviors and signatures, enabling security researchers to assess risks and improve defenses. Notable features include detailed analysis reports, a rule-based scoring system for malware, and compatibility with Python 3.10, making it accessible for developers and cybersecurity professionals.","html_url":"https://github.com/ev-flow/quark-engine","stars":1652,"language":"Python","topics":"malware","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"Quark Engine is a comprehensive tool designed for malware family analysis and vulnerability assessment, particularly in the context of Android malware. Its primary use case involves identifying and reporting on various malware behaviors and signatures, enabling security researchers to assess risks and improve defenses. Notable features include detailed analysis reports, a rule-based scoring system for malware, and compatibility with Python 3.10, making it accessible for developers and cybersecurity professionals."} +{"full_name":"evilcos/xssor2","owner":"evilcos","name":"xssor2","description":"XSS'OR - Hack with JavaScript.","html_url":"https://github.com/evilcos/xssor2","stars":2207,"language":"JavaScript","topics":"web-security,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"XSS'OR - Hack with JavaScript."} +{"full_name":"evildevill/instahack","owner":"evildevill","name":"instahack","description":"instahack is a bash \u0026 python based script which is officially made to test password strength of Instagram account from termux and kali with bruteforce attack and. it based on tor This tool works on both rooted Android device and Non-rooted Android device. Best Tool For Instagram Bruteforce hacking Tool By Waseem Akram.","html_url":"https://github.com/evildevill/instahack","stars":1770,"language":"Shell","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"instahack is a bash \u0026 python based script which is officially made to test password strength of Instagram account from termux and kali with bruteforce attack and. it based on tor This tool works on both rooted Android device and Non-rooted Android device. Best Tool For Instagram Bruteforce hacking Tool By Waseem Akram."} +{"full_name":"evyatarmeged/Raccoon","owner":"evyatarmeged","name":"Raccoon","description":"A high performance offensive security tool for reconnaissance and vulnerability scanning","html_url":"https://github.com/evyatarmeged/Raccoon","stars":3522,"language":"Python","topics":"scanner,exploit,malware,pentesting,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A high performance offensive security tool for reconnaissance and vulnerability scanning"} +{"full_name":"extremecoders-re/pyinstxtractor","owner":"extremecoders-re","name":"pyinstxtractor","description":"PyInstaller Extractor","html_url":"https://github.com/extremecoders-re/pyinstxtractor","stars":4172,"language":"Python","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"PyInstaller Extractor"} +{"full_name":"fO-000/bluing","owner":"fO-000","name":"bluing","description":"An intelligence gathering tool for hacking Bluetooth","html_url":"https://github.com/fO-000/bluing","stars":990,"language":"Python","topics":"scanner,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An intelligence gathering tool for hacking Bluetooth"} +{"full_name":"fabrimagic72/malware-samples","owner":"fabrimagic72","name":"malware-samples","description":"A collection of malware samples caught by several honeypots i manage","html_url":"https://github.com/fabrimagic72/malware-samples","stars":1801,"topics":"malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A collection of malware samples caught by several honeypots i manage"} +{"full_name":"fabriziosalmi/caddy-waf","owner":"fabriziosalmi","name":"caddy-waf","description":"Caddy WAF is a customizable middleware for the Caddy web server that functions as a Web Application Firewall, designed to provide advanced protection against a wide range of web-based threats. Key features include regex-based filtering, IP blacklisting, geo-blocking, rate limiting, anomaly scoring, and detailed monitoring capabilities, all aimed at securing applications while ensuring high performance through techniques like zero-copy networking and wait-free concurrency. The tool also supports seamless dynamic configuration reloads and offers precise insights into traffic and security events, making it a robust solution for safeguarding web applications.","html_url":"https://github.com/fabriziosalmi/caddy-waf","stars":747,"language":"Go","topics":"malware,web-security","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"Caddy WAF is a customizable middleware for the Caddy web server that functions as a Web Application Firewall, designed to provide advanced protection against a wide range of web-based threats. Key features include regex-based filtering, IP blacklisting, geo-blocking, rate limiting, anomaly scoring, and detailed monitoring capabilities, all aimed at securing applications while ensuring high performance through techniques like zero-copy networking and wait-free concurrency. The tool also supports seamless dynamic configuration reloads and offers precise insights into traffic and security events, making it a robust solution for safeguarding web applications."} +{"full_name":"fail2ban/fail2ban","owner":"fail2ban","name":"fail2ban","description":"Daemon to ban hosts that cause multiple authentication errors","html_url":"https://github.com/fail2ban/fail2ban","stars":17276,"language":"Python","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Daemon to ban hosts that cause multiple authentication errors"} +{"full_name":"ffffffff0x/1earn","owner":"ffffffff0x","name":"1earn","description":"ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup","html_url":"https://github.com/ffffffff0x/1earn","stars":5651,"language":"C++","topics":"red-team,malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup"} +{"full_name":"ffffffff0x/f8x","owner":"ffffffff0x","name":"f8x","description":"红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool","html_url":"https://github.com/ffffffff0x/f8x","stars":2101,"language":"Shell","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool"} +{"full_name":"fikrado/fikrado.py","owner":"fikrado","name":"fikrado.py","description":"Facebook hacking Tools script super fast and user friendly","html_url":"https://github.com/fikrado/fikrado.py","stars":1000,"language":"Python","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Facebook hacking Tools script super fast and user friendly"} +{"full_name":"firefart/stunner","owner":"firefart","name":"stunner","description":"Stunner is a tool to test and exploit STUN, TURN and TURN over TCP servers.","html_url":"https://github.com/firefart/stunner","stars":841,"language":"Go","topics":"exploit,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Stunner is a tool to test and exploit STUN, TURN and TURN over TCP servers."} +{"full_name":"firerpa/lamda","owner":"firerpa","name":"lamda","description":"The most powerful Android RPA agent framework, next generation of mobile automation robots.","html_url":"https://github.com/firerpa/lamda","stars":7680,"language":"Python","topics":"reverse-engineering,malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"The most powerful Android RPA agent framework, next generation of mobile automation robots."} +{"full_name":"firmianay/CTF-All-In-One","owner":"firmianay","name":"CTF-All-In-One","description":"CTF竞赛权威指南","html_url":"https://github.com/firmianay/CTF-All-In-One","stars":4449,"language":"C","topics":"cryptography,exploit,reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"CTF竞赛权威指南"} +{"full_name":"flashnuke/wifi-deauth","owner":"flashnuke","name":"wifi-deauth","description":"A deauth attack that disconnects all devices from the target wifi network (2.4Ghz \u0026 5Ghz), WPA3 also supported (PMF not tested)","html_url":"https://github.com/flashnuke/wifi-deauth","stars":806,"language":"Python","topics":"pentesting,network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A deauth attack that disconnects all devices from the target wifi network (2.4Ghz \u0026 5Ghz), WPA3 also supported (PMF not tested)"} +{"full_name":"flozz/p0wny-shell","owner":"flozz","name":"p0wny-shell","description":"Single-file PHP shell","html_url":"https://github.com/flozz/p0wny-shell","stars":2742,"language":"PHP","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Single-file PHP shell"} +{"full_name":"fnmsd/MySQL_Fake_Server","owner":"fnmsd","name":"MySQL_Fake_Server","description":"MySQL Fake Server use to help MySQL Client File Reading and JDBC Client Java Deserialize","html_url":"https://github.com/fnmsd/MySQL_Fake_Server","stars":1362,"language":"Python","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"MySQL Fake Server use to help MySQL Client File Reading and JDBC Client Java Deserialize"} +{"full_name":"foundryzero/binder-trace","owner":"foundryzero","name":"binder-trace","description":"Binder Trace is a Python-based tool designed for intercepting and parsing Android Binder messages, functioning similarly to Wireshark for Binder communication. It requires a rooted Android device or emulator and leverages Frida for live analysis, allowing users to attach to specific processes and capture Binder transactions. Notable features include support for various Android versions, customizable structure files, and interactive controls for navigating captured data.","html_url":"https://github.com/foundryzero/binder-trace","stars":745,"language":"Python","topics":"reverse-engineering","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"Binder Trace is a Python-based tool designed for intercepting and parsing Android Binder messages, functioning similarly to Wireshark for Binder communication. It requires a rooted Android device or emulator and leverages Frida for live analysis, allowing users to attach to specific processes and capture Binder transactions. Notable features include support for various Android versions, customizable structure files, and interactive controls for navigating captured data."} +{"full_name":"friuns2/BlackFriday-GPTs-Prompts","owner":"friuns2","name":"BlackFriday-GPTs-Prompts","description":"List of free GPTs that doesn't require plus subscription","html_url":"https://github.com/friuns2/BlackFriday-GPTs-Prompts","stars":9266,"topics":"exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"List of free GPTs that doesn't require plus subscription"} +{"full_name":"frohoff/ysoserial","owner":"frohoff","name":"ysoserial","description":"A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.","html_url":"https://github.com/frohoff/ysoserial","stars":8813,"language":"Java","topics":"exploit,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization."} +{"full_name":"fsociety-team/fsociety","owner":"fsociety-team","name":"fsociety","description":"A Modular Penetration Testing Framework","html_url":"https://github.com/fsociety-team/fsociety","stars":1700,"language":"Python","topics":"malware,pentesting,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A Modular Penetration Testing Framework"} +{"full_name":"funkygao/cp-ddd-framework","owner":"funkygao","name":"cp-ddd-framework","description":"轻量级DDD正向/逆向业务建模框架，支撑复杂业务系统的架构演化！","html_url":"https://github.com/funkygao/cp-ddd-framework","stars":1155,"language":"Java","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"轻量级DDD正向/逆向业务建模框架，支撑复杂业务系统的架构演化！"} +{"full_name":"gaasedelen/lighthouse","owner":"gaasedelen","name":"lighthouse","description":"A Coverage Explorer for Reverse Engineers","html_url":"https://github.com/gaasedelen/lighthouse","stars":2517,"language":"Python","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A Coverage Explorer for Reverse Engineers"} +{"full_name":"gaasedelen/patching","owner":"gaasedelen","name":"patching","description":"An Interactive Binary Patching Plugin for IDA Pro","html_url":"https://github.com/gaasedelen/patching","stars":1248,"language":"Python","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An Interactive Binary Patching Plugin for IDA Pro"} +{"full_name":"gaasedelen/tenet","owner":"gaasedelen","name":"tenet","description":"A Trace Explorer for Reverse Engineers","html_url":"https://github.com/gaasedelen/tenet","stars":1528,"language":"Python","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A Trace Explorer for Reverse Engineers"} +{"full_name":"gcarmix/HexWalk","owner":"gcarmix","name":"HexWalk","description":"Hex Viewer/Editor/Analyzer compatible with Linux/Windows/MacOS","html_url":"https://github.com/gcarmix/HexWalk","stars":931,"language":"Python","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Hex Viewer/Editor/Analyzer compatible with Linux/Windows/MacOS"} +{"full_name":"gh0stkey/Web-Fuzzing-Box","owner":"gh0stkey","name":"Web-Fuzzing-Box","description":"Web Fuzzing Box - Web 模糊测试字典与一些Payloads","html_url":"https://github.com/gh0stkey/Web-Fuzzing-Box","stars":2590,"language":"HTML","topics":"malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Web Fuzzing Box - Web 模糊测试字典与一些Payloads"} +{"full_name":"gitleaks/gitleaks","owner":"gitleaks","name":"gitleaks","description":"Find secrets with Gitleaks 🔑","html_url":"https://github.com/gitleaks/gitleaks","stars":25517,"language":"Go","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Find secrets with Gitleaks 🔑"} +{"full_name":"giuliacassara/awesome-social-engineering","owner":"giuliacassara","name":"awesome-social-engineering","description":"A curated list of awesome social engineering resources.","html_url":"https://github.com/giuliacassara/awesome-social-engineering","stars":3900,"topics":"osint,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A curated list of awesome social engineering resources."} +{"full_name":"gkbrk/slowloris","owner":"gkbrk","name":"slowloris","description":"Low bandwidth DoS tool. Slowloris rewrite in Python.","html_url":"https://github.com/gkbrk/slowloris","stars":2763,"language":"Python","topics":"malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Low bandwidth DoS tool. Slowloris rewrite in Python."} +{"full_name":"gmh5225/awesome-llvm-security","owner":"gmh5225","name":"awesome-llvm-security","description":"awesome llvm security [Welcome to PR]","html_url":"https://github.com/gmh5225/awesome-llvm-security","stars":800,"topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"awesome llvm security [Welcome to PR]"} +{"full_name":"gnebbia/kb","owner":"gnebbia","name":"kb","description":"A minimalist command line knowledge base manager","html_url":"https://github.com/gnebbia/kb","stars":3364,"language":"Python","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A minimalist command line knowledge base manager"} +{"full_name":"gobysec/Goby","owner":"gobysec","name":"Goby","description":"Attack surface mapping","html_url":"https://github.com/gobysec/Goby","stars":1500,"topics":"network,pentesting,scanner,exploit,red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Attack surface mapping"} +{"full_name":"gobysec/GobyVuls","owner":"gobysec","name":"GobyVuls","description":"GobyVuls is a collection of exploitation scripts specifically designed for vulnerabilities identified by the Goby scanning tool. The primary use case is to facilitate the exploitation of detected vulnerabilities, allowing users to perform actions such as command execution or establishing reverse shells. Notable features include a user-friendly interface for scanning and verification, as well as a collaborative framework for contributing new vulnerabilities and enhancing existing exploitation methods.","html_url":"https://github.com/gobysec/GobyVuls","stars":746,"language":"Go","topics":"exploit","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"GobyVuls is a collection of exploitation scripts specifically designed for vulnerabilities identified by the Goby scanning tool. The primary use case is to facilitate the exploitation of detected vulnerabilities, allowing users to perform actions such as command execution or establishing reverse shells. Notable features include a user-friendly interface for scanning and verification, as well as a collaborative framework for contributing new vulnerabilities and enhancing existing exploitation methods."} +{"full_name":"gommzystudio/device-activity-tracker","owner":"gommzystudio","name":"device-activity-tracker","description":"A phone number can reveal whether a device is active, in standby or offline (and more). This PoC demonstrates how delivery receipts + RTT timing leak sensitive device-activity patterns. (WhatsApp / Signal)","html_url":"https://github.com/gommzystudio/device-activity-tracker","stars":4803,"language":"TypeScript","topics":"malware,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A phone number can reveal whether a device is active, in standby or offline (and more). This PoC demonstrates how delivery receipts + RTT timing leak sensitive device-activity patterns. (WhatsApp / Signal)"} +{"full_name":"goodwithtech/dockle","owner":"goodwithtech","name":"dockle","description":"Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start","html_url":"https://github.com/goodwithtech/dockle","stars":3230,"language":"Go","topics":"exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start"} +{"full_name":"google/binexport","owner":"google","name":"binexport","description":"Export disassemblies into Protocol Buffers","html_url":"https://github.com/google/binexport","stars":1178,"language":"C++","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Export disassemblies into Protocol Buffers"} +{"full_name":"google/osv-scanner","owner":"google","name":"osv-scanner","description":"Vulnerability scanner written in Go which uses the data provided by https://osv.dev","html_url":"https://github.com/google/osv-scanner","stars":8565,"language":"Go","topics":"scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Vulnerability scanner written in Go which uses the data provided by https://osv.dev"} +{"full_name":"google/osv.dev","owner":"google","name":"osv.dev","description":"Open source vulnerability DB and triage service.","html_url":"https://github.com/google/osv.dev","stars":2531,"language":"Python","topics":"scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Open source vulnerability DB and triage service."} +{"full_name":"gorisanson/pikachu-volleyball","owner":"gorisanson","name":"pikachu-volleyball","description":"Pikachu Volleyball reimplemented in JavaScript by reverse engineering the original game","html_url":"https://github.com/gorisanson/pikachu-volleyball","stars":1050,"language":"JavaScript","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Pikachu Volleyball reimplemented in JavaScript by reverse engineering the original game"} +{"full_name":"gquere/pwn_jenkins","owner":"gquere","name":"pwn_jenkins","description":"Notes about attacking Jenkins servers","html_url":"https://github.com/gquere/pwn_jenkins","stars":2089,"language":"Python","topics":"pentesting,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Notes about attacking Jenkins servers"} +{"full_name":"graniet/operative-framework","owner":"graniet","name":"operative-framework","description":"Operative Framework is a digital investigation tool designed for interacting with multiple targets, executing a variety of modules, and managing links with these targets. Its notable features include the ability to export reports in PDF format, support for crafting custom modules, and a RESTful API for integration, all underpinned by a redesigned architecture in Rust for enhanced performance and functionality.","html_url":"https://github.com/graniet/operative-framework","stars":744,"language":"Rust","topics":"osint,forensics,malware","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"Operative Framework is a digital investigation tool designed for interacting with multiple targets, executing a variety of modules, and managing links with these targets. Its notable features include the ability to export reports in PDF format, support for crafting custom modules, and a RESTful API for integration, all underpinned by a redesigned architecture in Rust for enhanced performance and functionality."} +{"full_name":"grayddq/GScan","owner":"grayddq","name":"GScan","description":"本程序旨在为安全应急响应人员对Linux主机排查时提供便利，实现主机侧Checklist的自动全面化检测，根据检测结果自动数据聚合，进行黑客攻击路径溯源。","html_url":"https://github.com/grayddq/GScan","stars":2809,"language":"Python","topics":"scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"本程序旨在为安全应急响应人员对Linux主机排查时提供便利，实现主机侧Checklist的自动全面化检测，根据检测结果自动数据聚合，进行黑客攻击路径溯源。"} +{"full_name":"guardicore/monkey","owner":"guardicore","name":"monkey","description":"Infection Monkey - An open-source adversary emulation platform","html_url":"https://github.com/guardicore/monkey","stars":6979,"language":"Python","topics":"malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Infection Monkey - An open-source adversary emulation platform"} +{"full_name":"guardrailsio/awesome-golang-security","owner":"guardrailsio","name":"awesome-golang-security","description":"Awesome Golang Security resources 🕶🔐","html_url":"https://github.com/guardrailsio/awesome-golang-security","stars":1963,"topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Awesome Golang Security resources 🕶🔐"} +{"full_name":"guardrailsio/awesome-php-security","owner":"guardrailsio","name":"awesome-php-security","description":"Awesome PHP Security Resources 🕶🐘🔐","html_url":"https://github.com/guardrailsio/awesome-php-security","stars":1031,"topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Awesome PHP Security Resources 🕶🐘🔐"} +{"full_name":"guardrailsio/awesome-python-security","owner":"guardrailsio","name":"awesome-python-security","description":"Awesome Python Security resources 🕶🐍🔐","html_url":"https://github.com/guardrailsio/awesome-python-security","stars":956,"topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Awesome Python Security resources 🕶🐍🔐"} +{"full_name":"guyoung/CaptfEncoder","owner":"guyoung","name":"CaptfEncoder","description":"Captfencoder is opensource a rapid cross platform network security tool suite, providing network security related code conversion, classical cryptography, cryptography, asymmetric encryption, miscellaneous tools, and aggregating all kinds of online tools.","html_url":"https://github.com/guyoung/CaptfEncoder","stars":1281,"language":"JavaScript","topics":"network,cryptography","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Captfencoder is opensource a rapid cross platform network security tool suite, providing network security related code conversion, classical cryptography, cryptography, asymmetric encryption, miscellaneous tools, and aggregating all kinds of online tools."} +{"full_name":"gwen001/github-search","owner":"gwen001","name":"github-search","description":"A collection of tools to perform searches on GitHub.","html_url":"https://github.com/gwen001/github-search","stars":1471,"language":"Python","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A collection of tools to perform searches on GitHub."} +{"full_name":"gwen001/github-subdomains","owner":"gwen001","name":"github-subdomains","description":"Find subdomains on GitHub.","html_url":"https://github.com/gwen001/github-subdomains","stars":828,"language":"Go","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Find subdomains on GitHub."} +{"full_name":"gwen001/pentest-tools","owner":"gwen001","name":"pentest-tools","description":"A collection of custom security tools for quick needs.","html_url":"https://github.com/gwen001/pentest-tools","stars":3286,"language":"Python","topics":"osint,scanner,malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A collection of custom security tools for quick needs."} +{"full_name":"h4r5h1t/webcopilot","owner":"h4r5h1t","name":"webcopilot","description":"An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities.","html_url":"https://github.com/h4r5h1t/webcopilot","stars":1271,"language":"Shell","topics":"scanner,malware,web-security,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities."} +{"full_name":"haccer/subjack","owner":"haccer","name":"subjack","description":"DNS Takeover tool written in Go","html_url":"https://github.com/haccer/subjack","stars":2034,"language":"Go","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"DNS Takeover tool written in Go"} +{"full_name":"hack-different/apple-knowledge","owner":"hack-different","name":"apple-knowledge","description":"A collection of reverse engineered Apple things, as well as a machine-readable database of Apple hardware","html_url":"https://github.com/hack-different/apple-knowledge","stars":1297,"language":"Ruby","topics":"exploit,reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A collection of reverse engineered Apple things, as well as a machine-readable database of Apple hardware"} +{"full_name":"hackerschoice/THC-Archive","owner":"hackerschoice","name":"THC-Archive","description":"THC-Archive is a repository that consolidates all releases from The Hacker’s Choice, a prominent security research group. This collection serves as a backup for their work, ensuring that projects are preserved despite the lack of a full web server. Notable active projects include THC-Hydra, THC-IPv6, and utilities aimed at various hacking and security tasks.","html_url":"https://github.com/hackerschoice/THC-Archive","stars":757,"language":"HTML","topics":"pentesting,malware,exploit,network","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"THC-Archive is a repository that consolidates all releases from The Hacker’s Choice, a prominent security research group. This collection serves as a backup for their work, ensuring that projects are preserved despite the lack of a full web server. Notable active projects include THC-Hydra, THC-IPv6, and utilities aimed at various hacking and security tasks."} +{"full_name":"hacktoolspack/hack-tools","owner":"hacktoolspack","name":"hack-tools","description":"hack tools","html_url":"https://github.com/hacktoolspack/hack-tools","stars":1184,"language":"Python","topics":"exploit,web-security,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"hack tools"} +{"full_name":"hak5/bashbunny-payloads","owner":"hak5","name":"bashbunny-payloads","description":"The Official Bash Bunny Payload Repository","html_url":"https://github.com/hak5/bashbunny-payloads","stars":2896,"language":"PowerShell","topics":"web-security,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"The Official Bash Bunny Payload Repository"} +{"full_name":"hak5/sharkjack-payloads","owner":"hak5","name":"sharkjack-payloads","description":"The Shark Jack Payload Library provides a collection of community-driven payloads and extensions specifically designed for the Hak5 Shark Jack device, utilizing DuckyScript™ and Bash. Its primary use case is to enrich the functionality of the Shark Jack with customizable scripts for cybersecurity tasks, while also encouraging developer contributions for new payloads. Notable features include a platform for community collaboration and integration with Payload Studio for seamless payload creation.","html_url":"https://github.com/hak5/sharkjack-payloads","stars":716,"language":"Shell","topics":"network","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"The Shark Jack Payload Library provides a collection of community-driven payloads and extensions specifically designed for the Hak5 Shark Jack device, utilizing DuckyScript™ and Bash. Its primary use case is to enrich the functionality of the Shark Jack with customizable scripts for cybersecurity tasks, while also encouraging developer contributions for new payloads. Notable features include a platform for community collaboration and integration with Payload Studio for seamless payload creation."} +{"full_name":"harleyQu1nn/AggressorScripts","owner":"harleyQu1nn","name":"AggressorScripts","description":"Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources","html_url":"https://github.com/harleyQu1nn/AggressorScripts","stars":1529,"language":"C#","topics":"red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources"} +{"full_name":"harsh-bothra/learn365","owner":"harsh-bothra","name":"learn365","description":"This repository is about @harshbothra_'s 365 days of Learning Tweets \u0026 Mindmaps collection.","html_url":"https://github.com/harsh-bothra/learn365","stars":1694,"topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"This repository is about @harshbothra_'s 365 days of Learning Tweets \u0026 Mindmaps collection."} +{"full_name":"hasherezade/hollows_hunter","owner":"hasherezade","name":"hollows_hunter","description":"Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).","html_url":"https://github.com/hasherezade/hollows_hunter","stars":2322,"language":"C","topics":"forensics,scanner,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches)."} +{"full_name":"hasherezade/mal_unpack","owner":"hasherezade","name":"mal_unpack","description":"Dynamic unpacker based on PE-sieve","html_url":"https://github.com/hasherezade/mal_unpack","stars":799,"language":"C","topics":"malware,forensics","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Dynamic unpacker based on PE-sieve"} +{"full_name":"hasherezade/malware_training_vol1","owner":"hasherezade","name":"malware_training_vol1","description":"Materials for Windows Malware Analysis training (volume 1)","html_url":"https://github.com/hasherezade/malware_training_vol1","stars":2027,"language":"Assembly","topics":"malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Materials for Windows Malware Analysis training (volume 1)"} +{"full_name":"hasherezade/pe-bear","owner":"hasherezade","name":"pe-bear","description":"Portable Executable reversing tool with a friendly GUI","html_url":"https://github.com/hasherezade/pe-bear","stars":3517,"language":"C++","topics":"malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Portable Executable reversing tool with a friendly GUI"} +{"full_name":"hasherezade/pe-sieve","owner":"hasherezade","name":"pe-sieve","description":"Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).","html_url":"https://github.com/hasherezade/pe-sieve","stars":3582,"language":"C++","topics":"scanner,malware,forensics","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches)."} +{"full_name":"hasherezade/tiny_tracer","owner":"hasherezade","name":"tiny_tracer","description":"A Pin Tool for tracing API calls etc","html_url":"https://github.com/hasherezade/tiny_tracer","stars":1635,"language":"C++","topics":"reverse-engineering,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A Pin Tool for tracing API calls etc"} +{"full_name":"hashtopolis/server","owner":"hashtopolis","name":"server","description":"Hashtopolis - distributed password cracking with Hashcat","html_url":"https://github.com/hashtopolis/server","stars":1725,"language":"PHP","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Hashtopolis - distributed password cracking with Hashcat"} +{"full_name":"hdks-bug/exploitnotes","owner":"hdks-bug","name":"exploitnotes","description":"A security research site.","html_url":"https://github.com/hdks-bug/exploitnotes","stars":793,"language":"HTML","topics":"exploit,malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A security research site."} +{"full_name":"helloexp/0day","owner":"helloexp","name":"0day","description":"各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新","html_url":"https://github.com/helloexp/0day","stars":2350,"language":"C","topics":"exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新"} +{"full_name":"hhhrrrttt222111/Ethical-Hacking-Tools","owner":"hhhrrrttt222111","name":"Ethical-Hacking-Tools","description":"Complete Listing and Usage of Tools used for Ethical Hacking","html_url":"https://github.com/hhhrrrttt222111/Ethical-Hacking-Tools","stars":2003,"topics":"web-security","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Complete Listing and Usage of Tools used for Ethical Hacking"} +{"full_name":"hisxo/gitGraber","owner":"hisxo","name":"gitGraber","description":"gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...","html_url":"https://github.com/hisxo/gitGraber","stars":2252,"language":"Python","topics":"red-team,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe..."} +{"full_name":"honmashironeko/ProxyCat","owner":"honmashironeko","name":"ProxyCat","description":"一款部署于云端或本地的隧道代理池中间件，可将静态代理IP灵活运用成隧道IP，提供固定请求地址，一次部署终身使用","html_url":"https://github.com/honmashironeko/ProxyCat","stars":2436,"language":"Python","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"一款部署于云端或本地的隧道代理池中间件，可将静态代理IP灵活运用成隧道IP，提供固定请求地址，一次部署终身使用"} +{"full_name":"horsicq/PDBRipper","owner":"horsicq","name":"PDBRipper","description":"PDBRipper is a utility for extract an information from PDB-files.","html_url":"https://github.com/horsicq/PDBRipper","stars":882,"language":"C","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"PDBRipper is a utility for extract an information from PDB-files."} +{"full_name":"horsicq/XELFViewer","owner":"horsicq","name":"XELFViewer","description":"ELF file viewer/editor for Windows, Linux and MacOS.","html_url":"https://github.com/horsicq/XELFViewer","stars":1560,"language":"C++","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"ELF file viewer/editor for Windows, Linux and MacOS."} +{"full_name":"horsicq/XMachOViewer","owner":"horsicq","name":"XMachOViewer","description":"XMachOViewer is a Mach-O viewer for Windows, Linux and MacOS","html_url":"https://github.com/horsicq/XMachOViewer","stars":925,"language":"C++","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"XMachOViewer is a Mach-O viewer for Windows, Linux and MacOS"} +{"full_name":"horsicq/XPEViewer","owner":"horsicq","name":"XPEViewer","description":"PE file viewer/editor for Windows, Linux and MacOS.","html_url":"https://github.com/horsicq/XPEViewer","stars":1200,"language":"QMake","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"PE file viewer/editor for Windows, Linux and MacOS."} +{"full_name":"hteso/iaito","owner":"hteso","name":"iaito","description":"This project has been moved to:","html_url":"https://github.com/hteso/iaito","stars":1459,"language":"C++","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"This project has been moved to:"} +{"full_name":"huntergregal/mimipenguin","owner":"huntergregal","name":"mimipenguin","description":"A tool to dump the login password from the current linux user","html_url":"https://github.com/huntergregal/mimipenguin","stars":4086,"language":"C","topics":"post-exploitation,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A tool to dump the login password from the current linux user"} +{"full_name":"iGio90/Dwarf","owner":"iGio90","name":"Dwarf","description":"Full featured multi arch/os debugger built on top of PyQt5 and frida","html_url":"https://github.com/iGio90/Dwarf","stars":1315,"language":"Python","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Full featured multi arch/os debugger built on top of PyQt5 and frida"} +{"full_name":"ibnaleem/gosearch","owner":"ibnaleem","name":"gosearch","description":"🔍 Search anyone's digital footprint across 300+ websites","html_url":"https://github.com/ibnaleem/gosearch","stars":3276,"language":"Go","topics":"pentesting,osint,scanner,red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"🔍 Search anyone's digital footprint across 300+ websites"} +{"full_name":"igorbrigadir/twitter-advanced-search","owner":"igorbrigadir","name":"twitter-advanced-search","description":"Advanced Search for Twitter.","html_url":"https://github.com/igorbrigadir/twitter-advanced-search","stars":1544,"topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Advanced Search for Twitter."} +{"full_name":"ihack4falafel/OSCP","owner":"ihack4falafel","name":"OSCP","description":"Collection of things made during my OSCP journey","html_url":"https://github.com/ihack4falafel/OSCP","stars":954,"language":"Python","topics":"privilege-escalation,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Collection of things made during my OSCP journey"} +{"full_name":"ihebski/A-Red-Teamer-diaries","owner":"ihebski","name":"A-Red-Teamer-diaries","description":"RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.","html_url":"https://github.com/ihebski/A-Red-Teamer-diaries","stars":1901,"topics":"scanner,privilege-escalation,post-exploitation,exploit,red-team,malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements."} +{"full_name":"ihebski/DefaultCreds-cheat-sheet","owner":"ihebski","name":"DefaultCreds-cheat-sheet","description":"One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️","html_url":"https://github.com/ihebski/DefaultCreds-cheat-sheet","stars":6437,"language":"Python","topics":"exploit,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️"} +{"full_name":"importCTF/Instagram-Hacker","owner":"importCTF","name":"Instagram-Hacker","description":"This is an advanced script for Instagram bruteforce attacks. WARNING THIS IS A REAL TOOL!","html_url":"https://github.com/importCTF/Instagram-Hacker","stars":1269,"language":"Python","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"This is an advanced script for Instagram bruteforce attacks. WARNING THIS IS A REAL TOOL!"} +{"full_name":"indetectables-net/toolkit","owner":"indetectables-net","name":"toolkit","description":"The essential toolkit for reversing, malware analysis, and cracking","html_url":"https://github.com/indetectables-net/toolkit","stars":982,"language":"Inno Setup","topics":"reverse-engineering,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"The essential toolkit for reversing, malware analysis, and cracking"} +{"full_name":"indianajson/can-i-take-over-dns","owner":"indianajson","name":"can-i-take-over-dns","description":"\"Can I take over DNS?\" — a list of DNS providers and how to claim vulnerable domains.","html_url":"https://github.com/indianajson/can-i-take-over-dns","stars":1084,"topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"\"Can I take over DNS?\" — a list of DNS providers and how to claim vulnerable domains."} +{"full_name":"infobyte/emploleaks","owner":"infobyte","name":"emploleaks","description":"An OSINT tool that helps detect members of a company with leaked credentials","html_url":"https://github.com/infobyte/emploleaks","stars":770,"language":"Python","topics":"red-team,pentesting,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An OSINT tool that helps detect members of a company with leaked credentials"} +{"full_name":"infobyte/faraday","owner":"infobyte","name":"faraday","description":"Open Source Vulnerability Management Platform","html_url":"https://github.com/infobyte/faraday","stars":6304,"language":"Python","topics":"web-security,pentesting,scanner,exploit,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Open Source Vulnerability Management Platform"} +{"full_name":"infobyte/spoilerwall","owner":"infobyte","name":"spoilerwall","description":"Spoilerwall is a network hardening tool that obscures open ports by serving movie spoilers whenever a scan is performed, effectively misleading potential attackers. Its primary use case is to create a deceptive environment that appears vulnerable but instead provides mundane content, deterring unwanted attention and scans. Notable features include customizable spoiler content, easy server setup, and the ability to redirect all TCP traffic to the Spoilerwall service, enhancing security through obfuscation.","html_url":"https://github.com/infobyte/spoilerwall","stars":761,"language":"Python","topics":"pentesting,scanner,network","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"Spoilerwall is a network hardening tool that obscures open ports by serving movie spoilers whenever a scan is performed, effectively misleading potential attackers. Its primary use case is to create a deceptive environment that appears vulnerable but instead provides mundane content, deterring unwanted attention and scans. Notable features include customizable spoiler content, easy server setup, and the ability to redirect all TCP traffic to the Spoilerwall service, enhancing security through obfuscation."} +{"full_name":"infosecn1nja/Red-Teaming-Toolkit","owner":"infosecn1nja","name":"Red-Teaming-Toolkit","description":"This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.","html_url":"https://github.com/infosecn1nja/Red-Teaming-Toolkit","stars":10196,"topics":"red-team,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter."} +{"full_name":"infoslack/awesome-web-hacking","owner":"infoslack","name":"awesome-web-hacking","description":"A list of web application security","html_url":"https://github.com/infoslack/awesome-web-hacking","stars":6824,"topics":"pentesting,scanner,exploit,malware,web-security","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A list of web application security"} +{"full_name":"initstring/cloud_enum","owner":"initstring","name":"cloud_enum","description":"Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.","html_url":"https://github.com/initstring/cloud_enum","stars":2043,"language":"Python","topics":"malware,pentesting,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud."} +{"full_name":"initstring/linkedin2username","owner":"initstring","name":"linkedin2username","description":"OSINT Tool: Generate username lists for companies on LinkedIn","html_url":"https://github.com/initstring/linkedin2username","stars":1647,"language":"Python","topics":"malware,pentesting,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"OSINT Tool: Generate username lists for companies on LinkedIn"} +{"full_name":"initstring/passphrase-wordlist","owner":"initstring","name":"passphrase-wordlist","description":"Passphrase wordlist and hashcat rules for offline cracking of long, complex passwords","html_url":"https://github.com/initstring/passphrase-wordlist","stars":1410,"language":"Python","topics":"malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Passphrase wordlist and hashcat rules for offline cracking of long, complex passwords"} +{"full_name":"inonshk/31-days-of-API-Security-Tips","owner":"inonshk","name":"31-days-of-API-Security-Tips","description":"This challenge is Inon Shkedy's 31 days API Security Tips.","html_url":"https://github.com/inonshk/31-days-of-API-Security-Tips","stars":2232,"topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"This challenge is Inon Shkedy's 31 days API Security Tips."} +{"full_name":"insightglacier/Dictionary-Of-Pentesting","owner":"insightglacier","name":"Dictionary-Of-Pentesting","description":"Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。","html_url":"https://github.com/insightglacier/Dictionary-Of-Pentesting","stars":2037,"language":"Shell","topics":"network,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。"} +{"full_name":"instaloader/instaloader","owner":"instaloader","name":"instaloader","description":"Download pictures (or videos) along with their captions and other metadata from Instagram.","html_url":"https://github.com/instaloader/instaloader","stars":11938,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Download pictures (or videos) along with their captions and other metadata from Instagram."} +{"full_name":"intigriti/misconfig-mapper","owner":"intigriti","name":"misconfig-mapper","description":"Misconfig Mapper is a fast tool to help you uncover security misconfigurations on popular third-party services used by your company and/or bug bounty targets!","html_url":"https://github.com/intigriti/misconfig-mapper","stars":901,"language":"Go","topics":"malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Misconfig Mapper is a fast tool to help you uncover security misconfigurations on popular third-party services used by your company and/or bug bounty targets!"} +{"full_name":"io12/pwninit","owner":"io12","name":"pwninit","description":"pwninit - automate starting binary exploit challenges","html_url":"https://github.com/io12/pwninit","stars":1083,"language":"Rust","topics":"exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"pwninit - automate starting binary exploit challenges"} +{"full_name":"ioncodes/idacode","owner":"ioncodes","name":"idacode","description":"An integration for IDA and VS Code which connects both to easily execute and debug IDAPython scripts.","html_url":"https://github.com/ioncodes/idacode","stars":970,"language":"Python","topics":"reverse-engineering,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An integration for IDA and VS Code which connects both to easily execute and debug IDAPython scripts."} +{"full_name":"ipa-lab/hackingBuddyGPT","owner":"ipa-lab","name":"hackingBuddyGPT","description":"Helping Ethical Hackers use LLMs in 50 Lines of Code or less..","html_url":"https://github.com/ipa-lab/hackingBuddyGPT","stars":980,"language":"Python","topics":"malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Helping Ethical Hackers use LLMs in 50 Lines of Code or less.."} +{"full_name":"itm4n/PrivescCheck","owner":"itm4n","name":"PrivescCheck","description":"Privilege Escalation Enumeration Script for Windows","html_url":"https://github.com/itm4n/PrivescCheck","stars":3759,"language":"PowerShell","topics":"privilege-escalation,malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Privilege Escalation Enumeration Script for Windows"} +{"full_name":"ivan-sincek/penetration-testing-cheat-sheet","owner":"ivan-sincek","name":"penetration-testing-cheat-sheet","description":"Work in progress...","html_url":"https://github.com/ivan-sincek/penetration-testing-cheat-sheet","stars":796,"language":"PHP","topics":"scanner,exploit,red-team,malware,pentesting,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Work in progress..."} +{"full_name":"ivre/ivre","owner":"ivre","name":"ivre","description":"Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.","html_url":"https://github.com/ivre/ivre","stars":3986,"language":"Python","topics":"network,osint,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc."} +{"full_name":"j3ssie/metabigor","owner":"j3ssie","name":"metabigor","description":"OSINT tools and more but without API key","html_url":"https://github.com/j3ssie/metabigor","stars":1492,"language":"Go","topics":"pentesting,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"OSINT tools and more but without API key"} +{"full_name":"j3ssie/osmedeus","owner":"j3ssie","name":"osmedeus","description":"A Modern Orchestration Engine for Security","html_url":"https://github.com/j3ssie/osmedeus","stars":6155,"language":"Go","topics":"pentesting,osint,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A Modern Orchestration Engine for Security"} +{"full_name":"j4k0xb/webcrack","owner":"j4k0xb","name":"webcrack","description":"Deobfuscate obfuscator.io, unminify and unpack bundled javascript","html_url":"https://github.com/j4k0xb/webcrack","stars":2472,"language":"TypeScript","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Deobfuscate obfuscator.io, unminify and unpack bundled javascript"} +{"full_name":"jaeles-project/jaeles","owner":"jaeles-project","name":"jaeles","description":"The Swiss Army knife for automated Web Application Testing","html_url":"https://github.com/jaeles-project/jaeles","stars":2321,"language":"Go","topics":"scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"The Swiss Army knife for automated Web Application Testing"} +{"full_name":"jaiswalakshansh/Facebook-BugBounty-Writeups","owner":"jaiswalakshansh","name":"Facebook-BugBounty-Writeups","description":"The Meta(Facebook) Bug Bounty Writeups repository compiles a collection of documented vulnerabilities discovered on Facebook, showcasing varying bounty rewards ranging from account takeovers to remote code execution. Its primary use case is to serve as a resource for security researchers and ethical hackers to share and learn from reported vulnerabilities in Meta’s platforms. Notable features include a chronological organization of writeups, contributing guidelines, and links to detailed analysis articles for each reported bug.","html_url":"https://github.com/jaiswalakshansh/Facebook-BugBounty-Writeups","stars":712,"topics":"security-tools","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"The Meta(Facebook) Bug Bounty Writeups repository compiles a collection of documented vulnerabilities discovered on Facebook, showcasing varying bounty rewards ranging from account takeovers to remote code execution. Its primary use case is to serve as a resource for security researchers and ethical hackers to share and learn from reported vulnerabilities in Meta’s platforms. Notable features include a chronological organization of writeups, contributing guidelines, and links to detailed analysis articles for each reported bug."} +{"full_name":"jakejarvis/awesome-shodan-queries","owner":"jakejarvis","name":"awesome-shodan-queries","description":"🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻","html_url":"https://github.com/jakejarvis/awesome-shodan-queries","stars":7282,"topics":"malware,network,pentesting,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻"} +{"full_name":"jason5ng32/MyIP","owner":"jason5ng32","name":"MyIP","description":"The best IP Toolbox. Easy to check what's your IPs, IP geolocation, check for DNS leaks, examine WebRTC connections, speed test, ping test, MTR test, check website availability, whois search and more! || 可能是最好用的IP工具箱。轻松检查你的 IP，IP 地理位置，检查DNS泄漏，检查 WebRTC 连接，速度测试，ping 测试，MTR测试，检查网站可用性，查询 Whois 信息等等。","html_url":"https://github.com/jason5ng32/MyIP","stars":9982,"language":"Vue","topics":"network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"The best IP Toolbox. Easy to check what's your IPs, IP geolocation, check for DNS leaks, examine WebRTC connections, speed test, ping test, MTR test, check website availability, whois search and more! || 可能是最好用的IP工具箱。轻松检查你的 IP，IP 地理位置，检查DNS泄漏，检查 WebRTC 连接，速度测试，ping 测试，MTR测试，检查网站可用性，查询 Whois 信息等等。"} +{"full_name":"jasonxtn/Argus","owner":"jasonxtn","name":"Argus","description":"The Ultimate Information Gathering Toolkit","html_url":"https://github.com/jasonxtn/Argus","stars":3344,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"The Ultimate Information Gathering Toolkit"} +{"full_name":"jasperan/whatsapp-osint","owner":"jasperan","name":"whatsapp-osint","description":"WhatsApp spy - logs online/offline events from ANYONE in the world","html_url":"https://github.com/jasperan/whatsapp-osint","stars":1286,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"WhatsApp spy - logs online/offline events from ANYONE in the world"} +{"full_name":"jassics/awesome-aws-security","owner":"jassics","name":"awesome-aws-security","description":"Curated list of links, references, books videos, tutorials (Free or Paid), Exploit, CTFs, Hacking Practices etc. which are related to AWS Security","html_url":"https://github.com/jassics/awesome-aws-security","stars":1533,"topics":"exploit,malware,cloud-security","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Curated list of links, references, books videos, tutorials (Free or Paid), Exploit, CTFs, Hacking Practices etc. which are related to AWS Security"} +{"full_name":"jassics/security-study-plan","owner":"jassics","name":"security-study-plan","description":"Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...","html_url":"https://github.com/jassics/security-study-plan","stars":4907,"topics":"pentesting,cloud-security","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on..."} +{"full_name":"jaykali/hackerpro","owner":"jaykali","name":"hackerpro","description":"All in One Hacking Tool for Linux \u0026 Android (Termux). Make your linux environment into a Hacking Machine. Hackers are welcome in our blog","html_url":"https://github.com/jaykali/hackerpro","stars":1785,"language":"Python","topics":"malware,pentesting,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"All in One Hacking Tool for Linux \u0026 Android (Termux). Make your linux environment into a Hacking Machine. Hackers are welcome in our blog"} +{"full_name":"jaykali/maskphish","owner":"jaykali","name":"maskphish","description":"Introducing \"URL Making Technology\" to the world for the very FIRST TIME. Give a Mask to Phishing URL like a PRO.. A MUST have tool for Phishing.","html_url":"https://github.com/jaykali/maskphish","stars":3051,"language":"Shell","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Introducing \"URL Making Technology\" to the world for the very FIRST TIME. Give a Mask to Phishing URL like a PRO.. A MUST have tool for Phishing."} +{"full_name":"jayofelony/pwnagotchi","owner":"jayofelony","name":"pwnagotchi","description":"(⌐■_■) - Raspberry Pi instrumenting Bettercap for Wi-Fi pwning.","html_url":"https://github.com/jayofelony/pwnagotchi","stars":2584,"language":"Python","topics":"pentesting,malware,network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"(⌐■_■) - Raspberry Pi instrumenting Bettercap for Wi-Fi pwning."} +{"full_name":"jekil/awesome-hacking","owner":"jekil","name":"awesome-hacking","description":"Awesome hacking is an awesome collection of hacking tools.","html_url":"https://github.com/jekil/awesome-hacking","stars":3788,"language":"Python","topics":"malware,forensics,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Awesome hacking is an awesome collection of hacking tools."} +{"full_name":"jivoi/awesome-osint","owner":"jivoi","name":"awesome-osint","description":":scream: A curated list of amazingly awesome OSINT","html_url":"https://github.com/jivoi/awesome-osint","stars":25415,"topics":"osint,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":":scream: A curated list of amazingly awesome OSINT"} +{"full_name":"jivoi/pentest","owner":"jivoi","name":"pentest","description":":no_entry: offsec batteries included","html_url":"https://github.com/jivoi/pentest","stars":1606,"language":"Python","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":":no_entry: offsec batteries included"} +{"full_name":"joaomatosf/jexboss","owner":"joaomatosf","name":"jexboss","description":"JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool","html_url":"https://github.com/joaomatosf/jexboss","stars":2516,"language":"Python","topics":"exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool"} +{"full_name":"joaoviictorti/RustRedOps","owner":"joaoviictorti","name":"RustRedOps","description":"RustRedOps is a repository for advanced Red Team techniques and offensive malware, focused on Rust","html_url":"https://github.com/joaoviictorti/RustRedOps","stars":1844,"language":"Rust","topics":"malware,red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"RustRedOps is a repository for advanced Red Team techniques and offensive malware, focused on Rust"} +{"full_name":"jofpin/trape","owner":"jofpin","name":"trape","description":"People tracker on the Internet: OSINT analysis and research tool by Jose Pino","html_url":"https://github.com/jofpin/trape","stars":8625,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"People tracker on the Internet: OSINT analysis and research tool by Jose Pino"} +{"full_name":"jonaslejon/malicious-pdf","owner":"jonaslejon","name":"malicious-pdf","description":"💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh","html_url":"https://github.com/jonaslejon/malicious-pdf","stars":3635,"language":"Python","topics":"web-security,pentesting,scanner,red-team,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh"} +{"full_name":"jonrau1/ElectricEye","owner":"jonrau1","name":"ElectricEye","description":"ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management \u0026 Attack Surface Monitoring supporting 100s of services and evaluations to harden your CSP \u0026 SaaS environments with controls mapped to over 20 industry, regulatory, and best practice controls frameworks","html_url":"https://github.com/jonrau1/ElectricEye","stars":1036,"language":"Python","topics":"cloud-security","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management \u0026 Attack Surface Monitoring supporting 100s of services and evaluations to harden your CSP \u0026 SaaS environments with controls mapped to over 20 industry, regulatory, and best practice controls frameworks"} +{"full_name":"jstrosch/learning-reverse-engineering","owner":"jstrosch","name":"learning-reverse-engineering","description":"The Learning Reverse Engineering repository provides a collection of programs aimed at enhancing skills in reverse engineering and malware analysis. It organizes content by specific concepts related to reverse engineering, delivers both source code and compiled binaries, and includes links to supplementary online courses and video playlists. Notable features include guidance on using various tools like Ghidra and IDA Pro, as well as instructions for compiling the source code with Microsoft’s C/C++ compiler.","html_url":"https://github.com/jstrosch/learning-reverse-engineering","stars":750,"language":"C","topics":"reverse-engineering","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"The Learning Reverse Engineering repository provides a collection of programs aimed at enhancing skills in reverse engineering and malware analysis. It organizes content by specific concepts related to reverse engineering, delivers both source code and compiled binaries, and includes links to supplementary online courses and video playlists. Notable features include guidance on using various tools like Ghidra and IDA Pro, as well as instructions for compiling the source code with Microsoft’s C/C++ compiler."} +{"full_name":"jthuraisamy/TelemetrySourcerer","owner":"jthuraisamy","name":"TelemetrySourcerer","description":"Enumerate and disable common sources of telemetry used by AV/EDR.","html_url":"https://github.com/jthuraisamy/TelemetrySourcerer","stars":844,"language":"C++","topics":"malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Enumerate and disable common sources of telemetry used by AV/EDR."} +{"full_name":"juice-shop/juice-shop","owner":"juice-shop","name":"juice-shop","description":"OWASP Juice Shop: Probably the most modern and sophisticated insecure web application","html_url":"https://github.com/juice-shop/juice-shop","stars":12730,"language":"TypeScript","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"OWASP Juice Shop: Probably the most modern and sophisticated insecure web application"} +{"full_name":"justakazh/sicat","owner":"justakazh","name":"sicat","description":"The useful exploit finder","html_url":"https://github.com/justakazh/sicat","stars":827,"language":"Python","topics":"osint,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"The useful exploit finder"} +{"full_name":"juzeon/SydneyQt","owner":"juzeon","name":"SydneyQt","description":"A cross-platform desktop client for the jailbroken New Bing AI Copilot (Sydney ver.) built with Go and Wails (previously based on Python and Qt).","html_url":"https://github.com/juzeon/SydneyQt","stars":883,"language":"Go","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A cross-platform desktop client for the jailbroken New Bing AI Copilot (Sydney ver.) built with Go and Wails (previously based on Python and Qt)."} +{"full_name":"jvdsn/crypto-attacks","owner":"jvdsn","name":"crypto-attacks","description":"Python implementations of cryptographic attacks and utilities.","html_url":"https://github.com/jvdsn/crypto-attacks","stars":1243,"language":"Python","topics":"cryptography","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Python implementations of cryptographic attacks and utilities."} +{"full_name":"jwt1399/Sec-Tools","owner":"jwt1399","name":"Sec-Tools","description":"🍉一款基于Python-Django的多功能Web安全渗透测试工具，包含漏洞扫描，端口扫描，指纹识别，目录扫描，旁站扫描，域名扫描等功能。","html_url":"https://github.com/jwt1399/Sec-Tools","stars":844,"language":"Python","topics":"pentesting,scanner,exploit,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"🍉一款基于Python-Django的多功能Web安全渗透测试工具，包含漏洞扫描，端口扫描，指纹识别，目录扫描，旁站扫描，域名扫描等功能。"} +{"full_name":"jxroot/adbwebkit","owner":"jxroot","name":"adbwebkit","description":"ADB WebKit is a browser-based tool designed for managing Android devices via ADB (Android Debug Bridge) with an intuitive user interface. Its primary use case includes functionalities like application management (installing, uninstalling, granting permissions), shell access, screen capture, and device control commands, making it a comprehensive solution for developers and testers. Notable features include support for live application management, real-time screen interactions, and various device control options, all accessible through a USB connection or IP address.","html_url":"https://github.com/jxroot/adbwebkit","stars":720,"language":"JavaScript","topics":"post-exploitation,malware,exploit","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"ADB WebKit is a browser-based tool designed for managing Android devices via ADB (Android Debug Bridge) with an intuitive user interface. Its primary use case includes functionalities like application management (installing, uninstalling, granting permissions), shell access, screen capture, and device control commands, making it a comprehensive solution for developers and testers. Notable features include support for live application management, real-time screen interactions, and various device control options, all accessible through a USB connection or IP address."} +{"full_name":"jxy-s/herpaderping","owner":"jxy-s","name":"herpaderping","description":"Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.","html_url":"https://github.com/jxy-s/herpaderping","stars":1188,"language":"C++","topics":"malware,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process."} +{"full_name":"k8gege/K8CScan","owner":"k8gege","name":"K8CScan","description":"K8Ladon大型内网渗透自定义插件化扫描神器，包含信息收集、网络资产、漏洞扫描、密码爆破、漏洞利用，程序采用多线程批量扫描大型内网多个IP段C段主机，目前插件包含: C段旁注扫描、子域名扫描、Ftp密码爆破、Mysql密码爆破、Oracle密码爆破、MSSQL密码爆破、Windows/Linux系统密码爆破、存活主机扫描、端口扫描、Web信息探测、操作系统版本探测、Cisco思科设备扫描等,支持调用任意外部程序或脚本，支持Cobalt Strike联动","html_url":"https://github.com/k8gege/K8CScan","stars":1301,"language":"Python","topics":"pentesting,scanner,exploit,red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"K8Ladon大型内网渗透自定义插件化扫描神器，包含信息收集、网络资产、漏洞扫描、密码爆破、漏洞利用，程序采用多线程批量扫描大型内网多个IP段C段主机，目前插件包含: C段旁注扫描、子域名扫描、Ftp密码爆破、Mysql密码爆破、Oracle密码爆破、MSSQL密码爆破、Windows/Linux系统密码爆破、存活主机扫描、端口扫描、Web信息探测、操作系统版本探测、Cisco思科设备扫描等,支持调用任意外部程序或脚本，支持Cobalt Strike联动"} +{"full_name":"k8gege/K8tools","owner":"k8gege","name":"K8tools","description":"K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)","html_url":"https://github.com/k8gege/K8tools","stars":6159,"language":"PowerShell","topics":"exploit,pentesting,scanner,privilege-escalation","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)"} +{"full_name":"k8gege/Ladon","owner":"k8gege","name":"Ladon","description":"Ladon大型内网渗透扫描器，PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。网络资产探测32种协议(ICMP\\NBT\\DNS\\MAC\\SMB\\WMI\\SSH\\HTTP\\HTTPS\\Exchange\\mssql\\FTP\\RDP)或方法快速获取目标网络存活主机IP、计算机名、工作组、共享资源、网卡地址、操作系统版本、网站、子域名、中间件、开放服务、路由器、交换机、数据库、打印机等，大量高危漏洞检测模块MS17010、Zimbra、Exchange","html_url":"https://github.com/k8gege/Ladon","stars":5272,"language":"C#","topics":"exploit,red-team,pentesting,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Ladon大型内网渗透扫描器，PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。网络资产探测32种协议(ICMP\\NBT\\DNS\\MAC\\SMB\\WMI\\SSH\\HTTP\\HTTPS\\Exchange\\mssql\\FTP\\RDP)或方法快速获取目标网络存活主机IP、计算机名、工作组、共享资源、网卡地址、操作系统版本、网站、子域名、中间件、开放服务、路由器、交换机、数据库、打印机等，大量高危漏洞检测模块MS17010、Zimbra、Exchange"} +{"full_name":"k8gege/LadonGo","owner":"k8gege","name":"LadonGo","description":"Ladon for Kali 全平台开源内网渗透扫描器,Windows/Linux/Mac/路由器内网渗透，使用它可轻松一键批量探测C段、B段、A段存活主机、高危漏洞检测MS17010、SmbGhost，远程执行SSH/Winrm，密码爆破SMB/SSH/FTP/Mysql/Mssql/Oracle/Winrm/HttpBasic/Redis，端口扫描服务识别PortScan指纹识别/HttpBanner/HttpTitle/TcpBanner/Weblogic/Oxid多网卡主机，端口扫描服务识别PortScan。","html_url":"https://github.com/k8gege/LadonGo","stars":1705,"language":"Go","topics":"exploit,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Ladon for Kali 全平台开源内网渗透扫描器,Windows/Linux/Mac/路由器内网渗透，使用它可轻松一键批量探测C段、B段、A段存活主机、高危漏洞检测MS17010、SmbGhost，远程执行SSH/Winrm，密码爆破SMB/SSH/FTP/Mysql/Mssql/Oracle/Winrm/HttpBasic/Redis，端口扫描服务识别PortScan指纹识别/HttpBanner/HttpTitle/TcpBanner/Weblogic/Oxid多网卡主机，端口扫描服务识别PortScan。"} +{"full_name":"kaifcodec/user-scanner","owner":"kaifcodec","name":"user-scanner","description":"🕵️🫆 (2-in-1) Emaill and Username OSINT tool that analyzes username and email presence across multiple platforms, intended for security research, investigations, legitimate analysis","html_url":"https://github.com/kaifcodec/user-scanner","stars":1323,"language":"Python","topics":"scanner,malware,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"🕵️🫆 (2-in-1) Emaill and Username OSINT tool that analyzes username and email presence across multiple platforms, intended for security research, investigations, legitimate analysis"} +{"full_name":"karma9874/AndroRAT","owner":"karma9874","name":"AndroRAT","description":"A Simple android remote administration tool using sockets. It uses java on the client side and python on the server side","html_url":"https://github.com/karma9874/AndroRAT","stars":4658,"language":"Java","topics":"exploit,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A Simple android remote administration tool using sockets. It uses java on the client side and python on the server side"} +{"full_name":"kelvinBen/AppInfoScanner","owner":"kelvinBen","name":"AppInfoScanner","description":"一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。","html_url":"https://github.com/kelvinBen/AppInfoScanner","stars":3514,"language":"Python","topics":"pentesting,scanner,malware,network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。"} +{"full_name":"kennbroorg/iKy","owner":"kennbroorg","name":"iKy","description":"OSINT Project. Collect information from a mail. Gather. Profile. Timeline.","html_url":"https://github.com/kennbroorg/iKy","stars":935,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"OSINT Project. Collect information from a mail. Gather. Profile. Timeline."} +{"full_name":"kevin-mizu/domloggerpp","owner":"kevin-mizu","name":"domloggerpp","description":"A browser extension that allows you to monitor, intercept, and debug JavaScript sinks based on customizable configurations.","html_url":"https://github.com/kevin-mizu/domloggerpp","stars":779,"language":"JavaScript","topics":"malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A browser extension that allows you to monitor, intercept, and debug JavaScript sinks based on customizable configurations."} +{"full_name":"kevoreilly/CAPEv2","owner":"kevoreilly","name":"CAPEv2","description":"Malware Configuration And Payload Extraction","html_url":"https://github.com/kevoreilly/CAPEv2","stars":3086,"language":"Python","topics":"malware,reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Malware Configuration And Payload Extraction"} +{"full_name":"keystone-engine/keypatch","owner":"keystone-engine","name":"keypatch","description":"Multi-architecture assembler for IDA Pro. Powered by Keystone Engine.","html_url":"https://github.com/keystone-engine/keypatch","stars":1818,"language":"Python","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Multi-architecture assembler for IDA Pro. Powered by Keystone Engine."} +{"full_name":"keystone-engine/keystone","owner":"keystone-engine","name":"keystone","description":"Keystone assembler framework: Core (Arm, Arm64, Hexagon, Mips, PowerPC, Sparc, SystemZ \u0026 X86) + bindings","html_url":"https://github.com/keystone-engine/keystone","stars":2558,"language":"C++","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Keystone assembler framework: Core (Arm, Arm64, Hexagon, Mips, PowerPC, Sparc, SystemZ \u0026 X86) + bindings"} +{"full_name":"khast3x/h8mail","owner":"khast3x","name":"h8mail","description":"Email OSINT \u0026 Password breach hunting tool, locally or using premium services. Supports chasing down related email","html_url":"https://github.com/khast3x/h8mail","stars":4929,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Email OSINT \u0026 Password breach hunting tool, locally or using premium services. Supports chasing down related email"} +{"full_name":"ki9mu/ARL-plus-docker","owner":"ki9mu","name":"ARL-plus-docker","description":"基于ARL-V2.6.2修改后的版本","html_url":"https://github.com/ki9mu/ARL-plus-docker","stars":982,"language":"Shell","topics":"osint,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"基于ARL-V2.6.2修改后的版本"} +{"full_name":"klezVirus/inceptor","owner":"klezVirus","name":"inceptor","description":"Template-Driven AV/EDR Evasion Framework","html_url":"https://github.com/klezVirus/inceptor","stars":1786,"language":"Assembly","topics":"red-team,malware,web-security","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Template-Driven AV/EDR Evasion Framework"} +{"full_name":"knownsec/ksubdomain","owner":"knownsec","name":"ksubdomain","description":"无状态子域名爆破工具","html_url":"https://github.com/knownsec/ksubdomain","stars":2371,"language":"Go","topics":"pentesting,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"无状态子域名爆破工具"} +{"full_name":"knownsec/pocsuite3","owner":"knownsec","name":"pocsuite3","description":"pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.","html_url":"https://github.com/knownsec/pocsuite3","stars":3830,"language":"Python","topics":"pentesting,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team."} +{"full_name":"koala73/worldmonitor","owner":"koala73","name":"worldmonitor","description":"Real-time global intelligence dashboard — AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational awareness interface","html_url":"https://github.com/koala73/worldmonitor","stars":42466,"language":"TypeScript","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Real-time global intelligence dashboard — AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational awareness interface"} +{"full_name":"konatabrk/shellen","owner":"konatabrk","name":"shellen","description":":cherry_blossom: Interactive shellcoding environment to easily craft shellcodes","html_url":"https://github.com/konatabrk/shellen","stars":909,"language":"Python","topics":"exploit,reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":":cherry_blossom: Interactive shellcoding environment to easily craft shellcodes"} +{"full_name":"konstruktoid/hardening","owner":"konstruktoid","name":"hardening","description":"Hardening Ubuntu. Systemd edition.","html_url":"https://github.com/konstruktoid/hardening","stars":1688,"language":"Shell","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Hardening Ubuntu. Systemd edition."} +{"full_name":"korcankaraokcu/PINCE","owner":"korcankaraokcu","name":"PINCE","description":"Reverse engineering tool for linux games","html_url":"https://github.com/korcankaraokcu/PINCE","stars":2809,"language":"Python","topics":"reverse-engineering,web-security","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Reverse engineering tool for linux games"} +{"full_name":"koutto/jok3r","owner":"koutto","name":"jok3r","description":"Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework","html_url":"https://github.com/koutto/jok3r","stars":1077,"language":"HTML","topics":"scanner,exploit,network,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework"} +{"full_name":"koutto/pi-pwnbox-rogueap","owner":"koutto","name":"pi-pwnbox-rogueap","description":"Homemade Pwnbox :rocket: / Rogue AP :satellite: based on Raspberry Pi — WiFi Hacking Cheatsheets + MindMap :bulb:","html_url":"https://github.com/koutto/pi-pwnbox-rogueap","stars":2000,"language":"Shell","topics":"network,red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Homemade Pwnbox :rocket: / Rogue AP :satellite: based on Raspberry Pi — WiFi Hacking Cheatsheets + MindMap :bulb:"} +{"full_name":"kovidomi/game-reversing","owner":"kovidomi","name":"game-reversing","description":"Beginner learning materials on how to reverse engineer video games","html_url":"https://github.com/kovidomi/game-reversing","stars":1575,"topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Beginner learning materials on how to reverse engineer video games"} +{"full_name":"kpcyrd/sn0int","owner":"kpcyrd","name":"sn0int","description":"Semi-automatic OSINT framework and package manager","html_url":"https://github.com/kpcyrd/sn0int","stars":2417,"language":"Rust","topics":"pentesting,osint,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Semi-automatic OSINT framework and package manager"} +{"full_name":"lamster2018/EasyProtector","owner":"lamster2018","name":"EasyProtector","description":"一行代码检测XP/调试/多开/模拟器/root","html_url":"https://github.com/lamster2018/EasyProtector","stars":2291,"language":"Java","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"一行代码检测XP/调试/多开/模拟器/root"} +{"full_name":"laramies/theHarvester","owner":"laramies","name":"theHarvester","description":"E-mails, subdomains and names Harvester - OSINT","html_url":"https://github.com/laramies/theHarvester","stars":15867,"language":"Python","topics":"osint,red-team,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"E-mails, subdomains and names Harvester - OSINT"} +{"full_name":"lcvvvv/kscan","owner":"lcvvvv","name":"kscan","description":"Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹20000+，暴力破解协议10余种。","html_url":"https://github.com/lcvvvv/kscan","stars":4257,"language":"Go","topics":"red-team,pentesting,scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹20000+，暴力破解协议10余种。"} +{"full_name":"leebaird/discover","owner":"leebaird","name":"discover","description":"Custom bash scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Kali Linux.","html_url":"https://github.com/leebaird/discover","stars":3830,"language":"Shell","topics":"malware,pentesting,osint,scanner,red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Custom bash scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Kali Linux."} +{"full_name":"lefayjey/linWinPwn","owner":"lefayjey","name":"linWinPwn","description":"linWinPwn is a bash script that streamlines the use of a number of Active Directory tools","html_url":"https://github.com/lefayjey/linWinPwn","stars":2158,"language":"Shell","topics":"exploit,malware,network,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"linWinPwn is a bash script that streamlines the use of a number of Active Directory tools"} +{"full_name":"lengjibo/RedTeamTools","owner":"lengjibo","name":"RedTeamTools","description":"记录自己编写、修改的部分工具","html_url":"https://github.com/lengjibo/RedTeamTools","stars":1465,"language":"Python","topics":"web-security,red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"记录自己编写、修改的部分工具"} +{"full_name":"leoetlino/project-restoration","owner":"leoetlino","name":"project-restoration","description":"A Majora's Mask 3D patch that restores some mechanics from the original game to get the best of both worlds","html_url":"https://github.com/leoetlino/project-restoration","stars":765,"language":"C++","topics":"reverse-engineering,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A Majora's Mask 3D patch that restores some mechanics from the original game to get the best of both worlds"} +{"full_name":"lethal-guitar/RigelEngine","owner":"lethal-guitar","name":"RigelEngine","description":"A modern re-implementation of the classic DOS game Duke Nukem II","html_url":"https://github.com/lethal-guitar/RigelEngine","stars":977,"language":"C++","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A modern re-implementation of the classic DOS game Duke Nukem II"} +{"full_name":"liamg/gitjacker","owner":"liamg","name":"gitjacker","description":"🔪 :octocat: Leak git repositories from misconfigured websites","html_url":"https://github.com/liamg/gitjacker","stars":1598,"language":"Go","topics":"red-team,malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"🔪 :octocat: Leak git repositories from misconfigured websites"} +{"full_name":"liamg/traitor","owner":"liamg","name":"traitor","description":":arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock","html_url":"https://github.com/liamg/traitor","stars":7111,"language":"Go","topics":"privilege-escalation,exploit,red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":":arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock"} +{"full_name":"lintsinghua/DeepAudit","owner":"lintsinghua","name":"DeepAudit","description":"DeepAudit：人人拥有的 AI 黑客战队，让漏洞挖掘触手可及。国内首个开源的代码漏洞挖掘多智能体系统。小白一键部署运行，自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ，一键生成报告。支持中转站。​让安全不再昂贵，让审计不再复杂。","html_url":"https://github.com/lintsinghua/DeepAudit","stars":5381,"language":"Python","topics":"scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"DeepAudit：人人拥有的 AI 黑客战队，让漏洞挖掘触手可及。国内首个开源的代码漏洞挖掘多智能体系统。小白一键部署运行，自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ，一键生成报告。支持中转站。​让安全不再昂贵，让审计不再复杂。"} +{"full_name":"lirantal/npq","owner":"lirantal","name":"npq","description":"safely install npm packages by auditing them pre-install stage","html_url":"https://github.com/lirantal/npq","stars":1556,"language":"JavaScript","topics":"scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"safely install npm packages by auditing them pre-install stage"} +{"full_name":"ljagiello/ctf-skills","owner":"ljagiello","name":"ctf-skills","description":"The ctf-skills repository provides an extensive collection of agent skills designed to facilitate the solving of Capture The Flag (CTF) challenges across various domains, including web exploitation, binary pwn, reverse engineering, and more. Notable features include support for multiple installation methods, a comprehensive tool installer script, and detailed skill documentation for on-demand use, allowing users to efficiently integrate the necessary tools as challenges arise. It is compatible with any tool adhering to the Agent Skills specification, enhancing its versatility in competitive cybersecurity contexts.","html_url":"https://github.com/ljagiello/ctf-skills","stars":837,"language":"Python","topics":"cryptography,forensics,exploit,osint","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"The ctf-skills repository provides an extensive collection of agent skills designed to facilitate the solving of Capture The Flag (CTF) challenges across various domains, including web exploitation, binary pwn, reverse engineering, and more. Notable features include support for multiple installation methods, a comprehensive tool installer script, and detailed skill documentation for on-demand use, allowing users to efficiently integrate the necessary tools as challenges arise. It is compatible with any tool adhering to the Agent Skills specification, enhancing its versatility in competitive cybersecurity contexts."} +{"full_name":"lockfale/OSINT-Framework","owner":"lockfale","name":"OSINT-Framework","description":"OSINT Framework","html_url":"https://github.com/lockfale/OSINT-Framework","stars":11067,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"OSINT Framework"} +{"full_name":"loerting/JByteMod-Beta","owner":"loerting","name":"JByteMod-Beta","description":"Java bytecode editor","html_url":"https://github.com/loerting/JByteMod-Beta","stars":863,"language":"Java","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Java bytecode editor"} +{"full_name":"lord-alfred/ipranges","owner":"lord-alfred","name":"ipranges","description":"🔨 List all IP ranges from: Google (Cloud \u0026 GoogleBot), Bing (Bingbot), Amazon (AWS), Microsoft, Oracle (Cloud), GitHub, Facebook (Meta), OpenAI (GPTBot) and other with daily updates.","html_url":"https://github.com/lord-alfred/ipranges","stars":1018,"language":"Shell","topics":"osint,network,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"🔨 List all IP ranges from: Google (Cloud \u0026 GoogleBot), Bing (Bingbot), Amazon (AWS), Microsoft, Oracle (Cloud), GitHub, Facebook (Meta), OpenAI (GPTBot) and other with daily updates."} +{"full_name":"lucasjacks0n/EggShell","owner":"lucasjacks0n","name":"EggShell","description":"iOS/macOS/Linux Remote Administration Tool","html_url":"https://github.com/lucasjacks0n/EggShell","stars":1743,"language":"Objective-C","topics":"malware,pentesting,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"iOS/macOS/Linux Remote Administration Tool"} +{"full_name":"ludwig-v/wireless-carplay-dongle-reverse-engineering","owner":"ludwig-v","name":"wireless-carplay-dongle-reverse-engineering","description":"CPlay2Air / Carlinkit Wireless Apple CarPlay Dongle reverse engineering","html_url":"https://github.com/ludwig-v/wireless-carplay-dongle-reverse-engineering","stars":848,"language":"Shell","topics":"network,reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"CPlay2Air / Carlinkit Wireless Apple CarPlay Dongle reverse engineering"} +{"full_name":"lukechilds/reverse-shell","owner":"lukechilds","name":"reverse-shell","description":"Reverse Shell as a Service","html_url":"https://github.com/lukechilds/reverse-shell","stars":2024,"language":"Go","topics":"pentesting,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Reverse Shell as a Service"} +{"full_name":"lunasec-io/lunasec","owner":"lunasec-io","name":"lunasec","description":"LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/","html_url":"https://github.com/lunasec-io/lunasec","stars":1468,"language":"TypeScript","topics":"scanner,exploit,red-team,malware,web-security","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/"} +{"full_name":"luoyesiqiu/dpt-shell","owner":"luoyesiqiu","name":"dpt-shell","description":"An android Dex protection shell implementation","html_url":"https://github.com/luoyesiqiu/dpt-shell","stars":911,"language":"Java","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An android Dex protection shell implementation"} +{"full_name":"lutfumertceylan/top25-parameter","owner":"lutfumertceylan","name":"top25-parameter","description":"For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙","html_url":"https://github.com/lutfumertceylan/top25-parameter","stars":1823,"topics":"web-security,pentesting,osint,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙"} +{"full_name":"m0bilesecurity/RMS-Runtime-Mobile-Security","owner":"m0bilesecurity","name":"RMS-Runtime-Mobile-Security","description":"Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime","html_url":"https://github.com/m0bilesecurity/RMS-Runtime-Mobile-Security","stars":2988,"language":"JavaScript","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime"} +{"full_name":"m0nad/awesome-privilege-escalation","owner":"m0nad","name":"awesome-privilege-escalation","description":"A curated list of awesome privilege escalation","html_url":"https://github.com/m0nad/awesome-privilege-escalation","stars":1522,"topics":"malware,pentesting,privilege-escalation","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A curated list of awesome privilege escalation"} +{"full_name":"m0rtem/CloudFail","owner":"m0rtem","name":"CloudFail","description":"Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network","html_url":"https://github.com/m0rtem/CloudFail","stars":2529,"language":"Python","topics":"osint,scanner,network,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network"} +{"full_name":"m3n0sd0n4ld/uDork","owner":"m3n0sd0n4ld","name":"uDork","description":"uDork is a script written in Bash Scripting that uses advanced Google search techniques to obtain sensitive information in files or directories, find IoT devices, detect versions of web applications, and so on.","html_url":"https://github.com/m3n0sd0n4ld/uDork","stars":842,"language":"Shell","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"uDork is a script written in Bash Scripting that uses advanced Google search techniques to obtain sensitive information in files or directories, find IoT devices, detect versions of web applications, and so on."} +{"full_name":"m4b/goblin","owner":"m4b","name":"goblin","description":"An impish, cross-platform binary parsing crate, written in Rust","html_url":"https://github.com/m4b/goblin","stars":1456,"language":"Rust","topics":"malware,reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An impish, cross-platform binary parsing crate, written in Rust"} +{"full_name":"m4n3dw0lf/pythem","owner":"m4n3dw0lf","name":"pythem","description":"pentest framework","html_url":"https://github.com/m4n3dw0lf/pythem","stars":1243,"language":"Python","topics":"pentesting,scanner,exploit,malware,web-security,network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"pentest framework"} +{"full_name":"m8sec/CrossLinked","owner":"m8sec","name":"CrossLinked","description":"LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping","html_url":"https://github.com/m8sec/CrossLinked","stars":1486,"language":"Python","topics":"osint,malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping"} +{"full_name":"m8sec/subscraper","owner":"m8sec","name":"subscraper","description":"Subdomain and target enumeration tool built for offensive security testing","html_url":"https://github.com/m8sec/subscraper","stars":940,"language":"Python","topics":"malware,pentesting,osint,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Subdomain and target enumeration tool built for offensive security testing"} +{"full_name":"madhuakula/kubernetes-goat","owner":"madhuakula","name":"kubernetes-goat","description":"Kubernetes Goat is a \"Vulnerable by Design\" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀","html_url":"https://github.com/madhuakula/kubernetes-goat","stars":5448,"language":"HTML","topics":"cloud-security,red-team,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Kubernetes Goat is a \"Vulnerable by Design\" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀"} +{"full_name":"mandiant/flare-emu","owner":"mandiant","name":"flare-emu","description":"flare-emu is an advanced emulation tool that integrates with binary analysis frameworks such as IDA Pro or Radare2, leveraging the Unicorn emulation framework to facilitate flexible and efficient code analysis. It offers multiple interfaces for emulating instruction ranges, iterating through function paths, and handling complex emulation scenarios, making it suitable for deep analysis of executable binaries across various architectures including x86, ARM, and their 64-bit counterparts. Notably, it provides functionalities for user-defined hooks, direct memory manipulation, and dynamic code discovery, enhancing the analyst’s ability to probe and understand obfuscated or complex binaries.","html_url":"https://github.com/mandiant/flare-emu","stars":936,"language":"Python","topics":"malware","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"flare-emu is an advanced emulation tool that integrates with binary analysis frameworks such as IDA Pro or Radare2, leveraging the Unicorn emulation framework to facilitate flexible and efficient code analysis. It offers multiple interfaces for emulating instruction ranges, iterating through function paths, and handling complex emulation scenarios, making it suitable for deep analysis of executable binaries across various architectures including x86, ARM, and their 64-bit counterparts. Notably, it provides functionalities for user-defined hooks, direct memory manipulation, and dynamic code discovery, enhancing the analyst’s ability to probe and understand obfuscated or complex binaries."} +{"full_name":"mantvydasb/RedTeaming-Tactics-and-Techniques","owner":"mantvydasb","name":"RedTeaming-Tactics-and-Techniques","description":"Red Teaming Tactics and Techniques","html_url":"https://github.com/mantvydasb/RedTeaming-Tactics-and-Techniques","stars":4516,"language":"PowerShell","topics":"pentesting,red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Red Teaming Tactics and Techniques"} +{"full_name":"marco-lancini/goscan","owner":"marco-lancini","name":"goscan","description":"Interactive Network Scanner","html_url":"https://github.com/marco-lancini/goscan","stars":1038,"language":"Go","topics":"scanner,network,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Interactive Network Scanner"} +{"full_name":"marcocesarato/PHP-Antimalware-Scanner","owner":"marcocesarato","name":"PHP-Antimalware-Scanner","description":"PHP Antimalware Scanner is a PHP-based tool designed to scan projects for malicious code embedded within PHP files. Its primary use case is to detect potential malware through an interactive console interface or in a reporting mode that generates results in HTML or text. Notable features include customizable scanning options for file paths, action prompts upon detection of malware, and compatibility with various PHP configurations.","html_url":"https://github.com/marcocesarato/PHP-Antimalware-Scanner","stars":753,"language":"PHP","topics":"scanner,malware,exploit","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"PHP Antimalware Scanner is a PHP-based tool designed to scan projects for malicious code embedded within PHP files. Its primary use case is to detect potential malware through an interactive console interface or in a reporting mode that generates results in HTML or text. Notable features include customizable scanning options for file paths, action prompts upon detection of malware, and compatibility with various PHP configurations."} +{"full_name":"marin-m/pbtk","owner":"marin-m","name":"pbtk","description":"A toolset for reverse engineering and fuzzing Protobuf-based apps","html_url":"https://github.com/marin-m/pbtk","stars":1641,"language":"Python","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A toolset for reverse engineering and fuzzing Protobuf-based apps"} +{"full_name":"marin-m/vmlinux-to-elf","owner":"marin-m","name":"vmlinux-to-elf","description":"A tool to recover a fully analyzable .ELF from a raw kernel, through extracting the kernel symbol table (kallsyms)","html_url":"https://github.com/marin-m/vmlinux-to-elf","stars":1701,"language":"Python","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A tool to recover a fully analyzable .ELF from a raw kernel, through extracting the kernel symbol table (kallsyms)"} +{"full_name":"matanolabs/matano","owner":"matanolabs","name":"matano","description":"Open source security data lake for threat hunting, detection \u0026 response, and cybersecurity analytics at petabyte scale on AWS","html_url":"https://github.com/matanolabs/matano","stars":1663,"language":"Rust","topics":"cloud-security,forensics","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Open source security data lake for threat hunting, detection \u0026 response, and cybersecurity analytics at petabyte scale on AWS"} +{"full_name":"matrixleons/evilwaf","owner":"matrixleons","name":"evilwaf","description":"EvilWAF is a sophisticated transparent MITM Firewall bypass proxy and deep WAF vulnerability scanner designed for authorized security testing purposes. It operates at the transport layer, allowing seamless integration with various security tools while employing advanced techniques such as TCP and TLS fingerprint rotation, source port manipulation, and automated WAF detection to evade defensive mechanisms. Notable features include a comprehensive multi-layer WAF scanning capability, direct origin bypass, and a robust IP rotation strategy through Tor and proxy pools, ensuring effective assessment of firewall vulnerabilities.","html_url":"https://github.com/matrixleons/evilwaf","stars":739,"language":"Python","topics":"network,red-team,pentesting,malware","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"EvilWAF is a sophisticated transparent MITM Firewall bypass proxy and deep WAF vulnerability scanner designed for authorized security testing purposes. It operates at the transport layer, allowing seamless integration with various security tools while employing advanced techniques such as TCP and TLS fingerprint rotation, source port manipulation, and automated WAF detection to evade defensive mechanisms. Notable features include a comprehensive multi-layer WAF scanning capability, direct origin bypass, and a robust IP rotation strategy through Tor and proxy pools, ensuring effective assessment of firewall vulnerabilities."} +{"full_name":"may215/awesome-termux-hacking","owner":"may215","name":"awesome-termux-hacking","description":"⚡️An awesome list of the best Termux hacking tools","html_url":"https://github.com/may215/awesome-termux-hacking","stars":4440,"topics":"malware,network,pentesting,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"⚡️An awesome list of the best Termux hacking tools"} +{"full_name":"mbrg/power-pwn","owner":"mbrg","name":"power-pwn","description":"An offensive/defense security toolset for discovery, recon and ethical assessment of AI Agents","html_url":"https://github.com/mbrg/power-pwn","stars":1133,"language":"Python","topics":"red-team,pentesting,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An offensive/defense security toolset for discovery, recon and ethical assessment of AI Agents"} +{"full_name":"megadose/OnionSearch","owner":"megadose","name":"OnionSearch","description":"OnionSearch is a script that scrapes urls on different .onion search engines.","html_url":"https://github.com/megadose/OnionSearch","stars":1648,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"OnionSearch is a script that scrapes urls on different .onion search engines."} +{"full_name":"megadose/ignorant","owner":"megadose","name":"ignorant","description":"ignorant allows you to check if a phone number is used on different sites like snapchat, instagram.","html_url":"https://github.com/megadose/ignorant","stars":1607,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"ignorant allows you to check if a phone number is used on different sites like snapchat, instagram."} +{"full_name":"megadose/toutatis","owner":"megadose","name":"toutatis","description":"Toutatis is a tool that allows you to extract information from instagrams accounts such as e-mails, phone numbers and more","html_url":"https://github.com/megadose/toutatis","stars":3809,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Toutatis is a tool that allows you to extract information from instagrams accounts such as e-mails, phone numbers and more"} +{"full_name":"mentebinaria/readpe","owner":"mentebinaria","name":"readpe","description":"The PE file analysis toolkit","html_url":"https://github.com/mentebinaria/readpe","stars":767,"language":"C","topics":"reverse-engineering,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"The PE file analysis toolkit"} +{"full_name":"mentebinaria/retoolkit","owner":"mentebinaria","name":"retoolkit","description":"Reverse Engineer's Toolkit","html_url":"https://github.com/mentebinaria/retoolkit","stars":5175,"language":"Inno Setup","topics":"reverse-engineering,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Reverse Engineer's Toolkit"} +{"full_name":"mgechev/ngrev","owner":"mgechev","name":"ngrev","description":"Tool for reverse engineering of Angular applications","html_url":"https://github.com/mgechev/ngrev","stars":1580,"language":"TypeScript","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Tool for reverse engineering of Angular applications"} +{"full_name":"mgeeky/Penetration-Testing-Tools","owner":"mgeeky","name":"Penetration-Testing-Tools","description":"A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audits purposes.","html_url":"https://github.com/mgeeky/Penetration-Testing-Tools","stars":2915,"language":"PowerShell","topics":"pentesting,exploit,red-team,malware,network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audits purposes."} +{"full_name":"mhaskar/Octopus","owner":"mhaskar","name":"Octopus","description":"Open source pre-operation C2 server based on python and powershell","html_url":"https://github.com/mhaskar/Octopus","stars":765,"language":"Python","topics":"red-team,malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Open source pre-operation C2 server based on python and powershell"} +{"full_name":"microsoft/ApplicationInspector","owner":"microsoft","name":"ApplicationInspector","description":"A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.","html_url":"https://github.com/microsoft/ApplicationInspector","stars":4388,"language":"C#","topics":"scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes."} +{"full_name":"microsoft/AttackSurfaceAnalyzer","owner":"microsoft","name":"AttackSurfaceAnalyzer","description":"Attack Surface Analyzer can help you analyze your operating system's security configuration for changes during software installation.","html_url":"https://github.com/microsoft/AttackSurfaceAnalyzer","stars":2922,"language":"C#","topics":"malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Attack Surface Analyzer can help you analyze your operating system's security configuration for changes during software installation."} +{"full_name":"mikeroyal/Digital-Forensics-Guide","owner":"mikeroyal","name":"Digital-Forensics-Guide","description":"Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.","html_url":"https://github.com/mikeroyal/Digital-Forensics-Guide","stars":2478,"language":"Python","topics":"network,forensics,osint,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics."} +{"full_name":"mikeroyal/Open-Source-Security-Guide","owner":"mikeroyal","name":"Open-Source-Security-Guide","description":"Open Source Security Guide. Learn all about Security Standards (FIPS, CIS, FedRAMP, FISMA, etc.), Frameworks, Threat Models, Encryption, and Benchmarks.","html_url":"https://github.com/mikeroyal/Open-Source-Security-Guide","stars":1057,"language":"Go","topics":"network,cryptography,forensics,pentesting,scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Open Source Security Guide. Learn all about Security Standards (FIPS, CIS, FedRAMP, FISMA, etc.), Frameworks, Threat Models, Encryption, and Benchmarks."} +{"full_name":"mildsunrise/protobuf-inspector","owner":"mildsunrise","name":"protobuf-inspector","description":"🕵️ Tool to reverse-engineer Protocol Buffers with unknown definition","html_url":"https://github.com/mildsunrise/protobuf-inspector","stars":1115,"language":"Python","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"🕵️ Tool to reverse-engineer Protocol Buffers with unknown definition"} +{"full_name":"mishakorzik/AdminHack","owner":"mishakorzik","name":"AdminHack","description":"today we will hack the admin panel of the site.","html_url":"https://github.com/mishakorzik/AdminHack","stars":864,"language":"Shell","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"today we will hack the admin panel of the site."} +{"full_name":"mishakorzik/AllHackingTools","owner":"mishakorzik","name":"AllHackingTools","description":"All-in-One Hacking Tools For Hackers! And more hacking tools! For termux.","html_url":"https://github.com/mishakorzik/AllHackingTools","stars":5292,"language":"Shell","topics":"web-security,network,pentesting,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"All-in-One Hacking Tools For Hackers! And more hacking tools! For termux."} +{"full_name":"mishakorzik/IpHack","owner":"mishakorzik","name":"IpHack","description":"Track Location With Live Address And City in Termux","html_url":"https://github.com/mishakorzik/IpHack","stars":797,"language":"Shell","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Track Location With Live Address And City in Termux"} +{"full_name":"mishakorzik/UserFinder","owner":"mishakorzik","name":"UserFinder","description":"OSINT tool for finding profiles by username","html_url":"https://github.com/mishakorzik/UserFinder","stars":1266,"language":"Shell","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"OSINT tool for finding profiles by username"} +{"full_name":"misiektoja/instagram_monitor","owner":"misiektoja","name":"instagram_monitor","description":"Track Instagram users' activities, profile changes and capture content with beautiful dashboards and instant notifications","html_url":"https://github.com/misiektoja/instagram_monitor","stars":809,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Track Instagram users' activities, profile changes and capture content with beautiful dashboards and instant notifications"} +{"full_name":"mitmproxy/android-unpinner","owner":"mitmproxy","name":"android-unpinner","description":"Remove Certificate Pinning from APKs","html_url":"https://github.com/mitmproxy/android-unpinner","stars":923,"language":"Python","topics":"reverse-engineering,network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Remove Certificate Pinning from APKs"} +{"full_name":"momo5502/sogen","owner":"momo5502","name":"sogen","description":"🪅 Windows User Space Emulator","html_url":"https://github.com/momo5502/sogen","stars":2793,"language":"C++","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"🪅 Windows User Space Emulator"} +{"full_name":"momosecurity/rhizobia_J","owner":"momosecurity","name":"rhizobia_J","description":"JAVA安全SDK及编码规范","html_url":"https://github.com/momosecurity/rhizobia_J","stars":1069,"language":"Java","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"JAVA安全SDK及编码规范"} +{"full_name":"montysecurity/C2-Tracker","owner":"montysecurity","name":"C2-Tracker","description":"C2 Tracker is a community-driven IOC feed that aggregates IP addresses related to known malware, botnets, and command-and-control (C2) infrastructures by leveraging searches from platforms like Shodan. Its primary use case is to facilitate threat intelligence by providing a regularly updated feed that can be ingested by various SIEM and EDR systems, enhancing detection and investigation capabilities. Notable features include version-controlled historical data, weekly updates, and compatibility with tools like OpenCTI and FortinetSIEM for streamlined integration and alerting.","html_url":"https://github.com/montysecurity/C2-Tracker","stars":762,"language":"Python","topics":"red-team,osint","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"C2 Tracker is a community-driven IOC feed that aggregates IP addresses related to known malware, botnets, and command-and-control (C2) infrastructures by leveraging searches from platforms like Shodan. Its primary use case is to facilitate threat intelligence by providing a regularly updated feed that can be ingested by various SIEM and EDR systems, enhancing detection and investigation capabilities. Notable features include version-controlled historical data, weekly updates, and compatibility with tools like OpenCTI and FortinetSIEM for streamlined integration and alerting."} +{"full_name":"moonD4rk/HackBrowserData","owner":"moonD4rk","name":"HackBrowserData","description":"Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).","html_url":"https://github.com/moonD4rk/HackBrowserData","stars":13625,"language":"Go","topics":"malware,cryptography,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux)."} +{"full_name":"morkt/GARbro","owner":"morkt","name":"GARbro","description":"Visual Novels resource browser","html_url":"https://github.com/morkt/GARbro","stars":3023,"language":"C#","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Visual Novels resource browser"} +{"full_name":"motdotla/dotenv","owner":"motdotla","name":"dotenv","description":"Loads environment variables from .env for nodejs projects.","html_url":"https://github.com/motdotla/dotenv","stars":20336,"language":"JavaScript","topics":"malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Loads environment variables from .env for nodejs projects."} +{"full_name":"moyuwa/ApkCheckPack","owner":"moyuwa","name":"ApkCheckPack","description":"apk加固特征检查工具，汇总收集已知特征和手动收集大家提交的app加固特征，全网最全开源加固特征，支持40+厂商的加固检测，欢迎大家提交无法识别的app","html_url":"https://github.com/moyuwa/ApkCheckPack","stars":1210,"language":"Go","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"apk加固特征检查工具，汇总收集已知特征和手动收集大家提交的app加固特征，全网最全开源加固特征，支持40+厂商的加固检测，欢迎大家提交无法识别的app"} +{"full_name":"mrexodia/dumpulator","owner":"mrexodia","name":"dumpulator","description":"An easy-to-use library for emulating memory dumps. Useful for malware analysis (config extraction, unpacking) and dynamic analysis in general (sandboxing).","html_url":"https://github.com/mrexodia/dumpulator","stars":857,"language":"C","topics":"malware,reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An easy-to-use library for emulating memory dumps. Useful for malware analysis (config extraction, unpacking) and dynamic analysis in general (sandboxing)."} +{"full_name":"mrexodia/ida-pro-mcp","owner":"mrexodia","name":"ida-pro-mcp","description":"AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.","html_url":"https://github.com/mrexodia/ida-pro-mcp","stars":6594,"language":"Python","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP."} +{"full_name":"mufeedvh/moonwalk","owner":"mufeedvh","name":"moonwalk","description":"Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps.","html_url":"https://github.com/mufeedvh/moonwalk","stars":1476,"language":"Rust","topics":"privilege-escalation,exploit,red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps."} +{"full_name":"mufeedvh/pdfrip","owner":"mufeedvh","name":"pdfrip","description":"A multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks.","html_url":"https://github.com/mufeedvh/pdfrip","stars":1328,"language":"Rust","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks."} +{"full_name":"mukul975/Anthropic-Cybersecurity-Skills","owner":"mukul975","name":"Anthropic-Cybersecurity-Skills","description":"734+ structured cybersecurity skills for AI agents · MITRE ATT\u0026CK mapped · agentskills.io open standard · Works with Claude Code, GitHub Copilot, OpenAI Codex CLI, Cursor, Gemini CLI \u0026 20+ platforms · Penetration testing, DFIR, threat intel, cloud security \u0026 more · Apache 2.0","html_url":"https://github.com/mukul975/Anthropic-Cybersecurity-Skills","stars":3609,"language":"Python","topics":"osint,cloud-security,red-team,malware,forensics,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"734+ structured cybersecurity skills for AI agents · MITRE ATT\u0026CK mapped · agentskills.io open standard · Works with Claude Code, GitHub Copilot, OpenAI Codex CLI, Cursor, Gemini CLI \u0026 20+ platforms · Penetration testing, DFIR, threat intel, cloud security \u0026 more · Apache 2.0"} +{"full_name":"multitheftauto/mtasa-blue","owner":"multitheftauto","name":"mtasa-blue","description":"Multi Theft Auto is a game engine that turns Grand Theft Auto: San Andreas into networked multiplayer.","html_url":"https://github.com/multitheftauto/mtasa-blue","stars":1706,"language":"C++","topics":"reverse-engineering,network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Multi Theft Auto is a game engine that turns Grand Theft Auto: San Andreas into networked multiplayer."} +{"full_name":"mxrch/GHunt","owner":"mxrch","name":"GHunt","description":"🕵️‍♂️ Offensive Google framework.","html_url":"https://github.com/mxrch/GHunt","stars":18599,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"🕵️‍♂️ Offensive Google framework."} +{"full_name":"mxrch/GitFive","owner":"mxrch","name":"GitFive","description":"🐙 Track down GitHub users.","html_url":"https://github.com/mxrch/GitFive","stars":973,"language":"Python","topics":"osint,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"🐙 Track down GitHub users."} +{"full_name":"mytechnotalent/Hacking-Windows","owner":"mytechnotalent","name":"Hacking-Windows","description":"A FREE Windows C development course where we will learn the Win32API and reverse engineer each step utilizing IDA Free in both an x86 and x64 environment.","html_url":"https://github.com/mytechnotalent/Hacking-Windows","stars":1565,"language":"C","topics":"reverse-engineering,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A FREE Windows C development course where we will learn the Win32API and reverse engineer each step utilizing IDA Free in both an x86 and x64 environment."} +{"full_name":"n00py/WPForce","owner":"n00py","name":"WPForce","description":"Wordpress Attack Suite","html_url":"https://github.com/n00py/WPForce","stars":974,"language":"Python","topics":"pentesting,exploit,web-security","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Wordpress Attack Suite"} +{"full_name":"n0kovo/n0kovo_subdomains","owner":"n0kovo","name":"n0kovo_subdomains","description":"An extremely effective subdomain enumeration wordlist of 3,000,000 lines, crafted by harvesting SSL certs from the entire IPv4 space.","html_url":"https://github.com/n0kovo/n0kovo_subdomains","stars":770,"topics":"scanner,red-team,malware,pentesting,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An extremely effective subdomain enumeration wordlist of 3,000,000 lines, crafted by harvesting SSL certs from the entire IPv4 space."} +{"full_name":"nabla-c0d3/ssl-kill-switch2","owner":"nabla-c0d3","name":"ssl-kill-switch2","description":"Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and macOS applications.","html_url":"https://github.com/nabla-c0d3/ssl-kill-switch2","stars":3257,"language":"Objective-C","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and macOS applications."} +{"full_name":"nahamsec/Resources-for-Beginner-Bug-Bounty-Hunters","owner":"nahamsec","name":"Resources-for-Beginner-Bug-Bounty-Hunters","description":"A list of resources for those interested in getting started in bug bounties","html_url":"https://github.com/nahamsec/Resources-for-Beginner-Bug-Bounty-Hunters","stars":11910,"topics":"web-security,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A list of resources for those interested in getting started in bug bounties"} +{"full_name":"naim94a/lumen","owner":"naim94a","name":"lumen","description":"A private Lumina server for IDA Pro","html_url":"https://github.com/naim94a/lumen","stars":1123,"language":"Rust","topics":"malware,reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A private Lumina server for IDA Pro"} +{"full_name":"nascentxyz/simple-security-toolkit","owner":"nascentxyz","name":"simple-security-toolkit","description":"A collection of practical security-focused guides and checklists for smart contract development","html_url":"https://github.com/nascentxyz/simple-security-toolkit","stars":1219,"topics":"cryptography","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A collection of practical security-focused guides and checklists for smart contract development"} +{"full_name":"nccgroup/featherduster","owner":"nccgroup","name":"featherduster","description":"An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction","html_url":"https://github.com/nccgroup/featherduster","stars":1119,"language":"Python","topics":"cryptography,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction"} +{"full_name":"nccgroup/redsnarf","owner":"nccgroup","name":"redsnarf","description":"RedSnarf is a pen-testing / red-teaming tool for Windows environments","html_url":"https://github.com/nccgroup/redsnarf","stars":1214,"language":"PowerShell","topics":"red-team,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"RedSnarf is a pen-testing / red-teaming tool for Windows environments"} +{"full_name":"ndelphit/apkurlgrep","owner":"ndelphit","name":"apkurlgrep","description":"Extract endpoints from APK files","html_url":"https://github.com/ndelphit/apkurlgrep","stars":882,"language":"Go","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Extract endpoints from APK files"} +{"full_name":"nerdsinspace/nocom-explanation","owner":"nerdsinspace","name":"nocom-explanation","description":"block game military grade radar","html_url":"https://github.com/nerdsinspace/nocom-explanation","stars":843,"topics":"exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"block game military grade radar"} +{"full_name":"netlas-io/netlas-cookbook","owner":"netlas-io","name":"netlas-cookbook","description":"The goal of this guide is very simple - to teach anyone interested in cyber security, regardless of their knowledge level, how to make the most of Netlas.io.","html_url":"https://github.com/netlas-io/netlas-cookbook","stars":846,"language":"Python","topics":"pentesting,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"The goal of this guide is very simple - to teach anyone interested in cyber security, regardless of their knowledge level, how to make the most of Netlas.io."} +{"full_name":"nickvourd/Windows-Local-Privilege-Escalation-Cookbook","owner":"nickvourd","name":"Windows-Local-Privilege-Escalation-Cookbook","description":"Windows Local Privilege Escalation Cookbook","html_url":"https://github.com/nickvourd/Windows-Local-Privilege-Escalation-Cookbook","stars":1287,"language":"PowerShell","topics":"malware,privilege-escalation","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Windows Local Privilege Escalation Cookbook"} +{"full_name":"nicocha30/ligolo-ng","owner":"nicocha30","name":"ligolo-ng","description":"An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.","html_url":"https://github.com/nicocha30/ligolo-ng","stars":4374,"language":"Go","topics":"pentesting,post-exploitation,exploit,red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface."} +{"full_name":"niemand-sec/AntiCheat-Testing-Framework","owner":"niemand-sec","name":"AntiCheat-Testing-Framework","description":"Framework to test any Anti-Cheat","html_url":"https://github.com/niemand-sec/AntiCheat-Testing-Framework","stars":821,"language":"C++","topics":"exploit,reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Framework to test any Anti-Cheat"} +{"full_name":"nikaiw/VMkatz","owner":"nikaiw","name":"VMkatz","description":"VMkatz is a cybersecurity tool designed to extract Windows credentials and secrets directly from virtual machine memory snapshots and disk images without the need for full exfiltration. It supports various input formats, including VMware snapshots and VirtualBox saved states, allowing efficient retrieval of sensitive data such as NTLM hashes, DPAPI master keys, and Kerberos tickets directly from the hypervisor or NAS. Notably, VMkatz operates as a single static binary, requiring minimal setup and enabling rapid credential access in red team engagements.","html_url":"https://github.com/nikaiw/VMkatz","stars":815,"language":"Rust","topics":"exploit,post-exploitation","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"VMkatz is a cybersecurity tool designed to extract Windows credentials and secrets directly from virtual machine memory snapshots and disk images without the need for full exfiltration. It supports various input formats, including VMware snapshots and VirtualBox saved states, allowing efficient retrieval of sensitive data such as NTLM hashes, DPAPI master keys, and Kerberos tickets directly from the hypervisor or NAS. Notably, VMkatz operates as a single static binary, requiring minimal setup and enabling rapid credential access in red team engagements."} +{"full_name":"nikitastupin/clairvoyance","owner":"nikitastupin","name":"clairvoyance","description":"Obtain GraphQL API schema even if the introspection is disabled","html_url":"https://github.com/nikitastupin/clairvoyance","stars":1410,"language":"Python","topics":"pentesting,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Obtain GraphQL API schema even if the introspection is disabled"} +{"full_name":"nikivdev/privacy-respecting","owner":"nikivdev","name":"privacy-respecting","description":"Curated List of Privacy Respecting Services and Software","html_url":"https://github.com/nikivdev/privacy-respecting","stars":2034,"topics":"malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Curated List of Privacy Respecting Services and Software"} +{"full_name":"niklasb/libc-database","owner":"niklasb","name":"libc-database","description":"Build a database of libc offsets to simplify exploitation","html_url":"https://github.com/niklasb/libc-database","stars":1858,"language":"Shell","topics":"exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Build a database of libc offsets to simplify exploitation"} +{"full_name":"nil0x42/phpsploit","owner":"nil0x42","name":"phpsploit","description":"Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor","html_url":"https://github.com/nil0x42/phpsploit","stars":2449,"language":"Python","topics":"exploit,red-team,privilege-escalation,post-exploitation","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor"} +{"full_name":"ninoseki/mihari","owner":"ninoseki","name":"mihari","description":"A query aggregator for OSINT based threat hunting","html_url":"https://github.com/ninoseki/mihari","stars":932,"language":"Ruby","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A query aggregator for OSINT based threat hunting"} +{"full_name":"ninoseki/mitaka","owner":"ninoseki","name":"mitaka","description":"A browser extension for OSINT search","html_url":"https://github.com/ninoseki/mitaka","stars":1752,"language":"TypeScript","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A browser extension for OSINT search"} +{"full_name":"nitefood/asn","owner":"nitefood","name":"asn","description":"ASN / RPKI validity / BGP stats / IPv4v6 / Prefix / URL / ASPath / Organization / IP reputation / IP geolocation / IP fingerprinting / Network recon / lookup API server / Web traceroute server","html_url":"https://github.com/nitefood/asn","stars":1849,"language":"Shell","topics":"network,forensics,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"ASN / RPKI validity / BGP stats / IPv4v6 / Prefix / URL / ASPath / Organization / IP reputation / IP geolocation / IP fingerprinting / Network recon / lookup API server / Web traceroute server"} +{"full_name":"nixawk/labs","owner":"nixawk","name":"labs","description":"Vulnerability Labs for security analysis","html_url":"https://github.com/nixawk/labs","stars":1170,"language":"Python","topics":"exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Vulnerability Labs for security analysis"} +{"full_name":"nmikhailov/Validity90","owner":"nmikhailov","name":"Validity90","description":"Reverse engineering of Validity/Synaptics 138a:0090, 138a:0094, 138a:0097, 06cb:0081, 06cb:009a fingerprint readers protocol","html_url":"https://github.com/nmikhailov/Validity90","stars":1874,"language":"C","topics":"reverse-engineering,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Reverse engineering of Validity/Synaptics 138a:0090, 138a:0094, 138a:0097, 06cb:0081, 06cb:009a fingerprint readers protocol"} +{"full_name":"nmlgc/ReC98","owner":"nmlgc","name":"ReC98","description":"The Touhou PC-98 Restoration Project","html_url":"https://github.com/nmlgc/ReC98","stars":816,"language":"Assembly","topics":"reverse-engineering,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"The Touhou PC-98 Restoration Project"} +{"full_name":"noob-hackers/T-LOAD","owner":"noob-hackers","name":"T-LOAD","description":"New Interface And Loading Screen For Termux Users","html_url":"https://github.com/noob-hackers/T-LOAD","stars":848,"language":"Shell","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"New Interface And Loading Screen For Termux Users"} +{"full_name":"noob-hackers/ighack","owner":"noob-hackers","name":"ighack","description":"Hack Instagram From Termux With Help of Tor","html_url":"https://github.com/noob-hackers/ighack","stars":2038,"language":"Shell","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Hack Instagram From Termux With Help of Tor"} +{"full_name":"noob-hackers/ipdrone","owner":"noob-hackers","name":"ipdrone","description":"Track Location With Live Address And Accuracy In Termux","html_url":"https://github.com/noob-hackers/ipdrone","stars":1988,"language":"Python","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Track Location With Live Address And Accuracy In Termux"} +{"full_name":"noobpk/frida-ios-hook","owner":"noobpk","name":"frida-ios-hook","description":"A tool that helps you easy trace classes, functions, and modify the return values of methods on iOS platform","html_url":"https://github.com/noobpk/frida-ios-hook","stars":1139,"language":"JavaScript","topics":"reverse-engineering,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A tool that helps you easy trace classes, functions, and modify the return values of methods on iOS platform"} +{"full_name":"noraj/OSCP-Exam-Report-Template-Markdown","owner":"noraj","name":"OSCP-Exam-Report-Template-Markdown","description":":orange_book: Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report","html_url":"https://github.com/noraj/OSCP-Exam-Report-Template-Markdown","stars":4065,"language":"Ruby","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":":orange_book: Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report"} +{"full_name":"noraj/flask-session-cookie-manager","owner":"noraj","name":"flask-session-cookie-manager","description":":cookie: Flask Session Cookie Decoder/Encoder","html_url":"https://github.com/noraj/flask-session-cookie-manager","stars":768,"language":"Python","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":":cookie: Flask Session Cookie Decoder/Encoder"} +{"full_name":"nozaq/terraform-aws-secure-baseline","owner":"nozaq","name":"terraform-aws-secure-baseline","description":"Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational Security Best Practices.","html_url":"https://github.com/nozaq/terraform-aws-secure-baseline","stars":1196,"language":"HCL","topics":"malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational Security Best Practices."} +{"full_name":"nsmfoo/antivmdetection","owner":"nsmfoo","name":"antivmdetection","description":"Script to create templates to use with VirtualBox to make vm detection harder","html_url":"https://github.com/nsmfoo/antivmdetection","stars":768,"language":"Python","topics":"malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Script to create templates to use with VirtualBox to make vm detection harder"} +{"full_name":"nsonaniya2010/SubDomainizer","owner":"nsonaniya2010","name":"SubDomainizer","description":"A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.","html_url":"https://github.com/nsonaniya2010/SubDomainizer","stars":1852,"language":"Python","topics":"scanner,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github."} +{"full_name":"numirias/security","owner":"numirias","name":"security","description":"Some of my security stuff and vulnerabilities. Nothing advanced. More to come.","html_url":"https://github.com/numirias/security","stars":866,"topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Some of my security stuff and vulnerabilities. Nothing advanced. More to come."} +{"full_name":"nyxgeek/o365recon","owner":"nyxgeek","name":"o365recon","description":"o365recon is a PowerShell script designed for retrieving information from Office 365 and Azure AD using valid credentials. Its primary use case is to facilitate information gathering for security assessments, with a notable feature allowing optional Azure querying through a simple command-line interface. The tool requires the installation of MSOnline and AzureAD modules and includes support for multi-factor authentication.","html_url":"https://github.com/nyxgeek/o365recon","stars":732,"language":"PowerShell","topics":"pentesting,malware,osint","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"o365recon is a PowerShell script designed for retrieving information from Office 365 and Azure AD using valid credentials. Its primary use case is to facilitate information gathering for security assessments, with a notable feature allowing optional Azure querying through a simple command-line interface. The tool requires the installation of MSOnline and AzureAD modules and includes support for multi-factor authentication."} +{"full_name":"nyxgeek/onedrive_user_enum","owner":"nyxgeek","name":"onedrive_user_enum","description":"onedrive_user_enum is a tool designed for enumerating valid OneDrive users by leveraging the HTTP response codes from file share URLs. Its primary use case is passive user enumeration, which avoids direct login attempts, making it less detectable by the target organization. Notable features include options for remote logging to MySQL, local SQLite database support, user list truncation, and mechanisms for de-duplication and user list management.","html_url":"https://github.com/nyxgeek/onedrive_user_enum","stars":747,"language":"Python","topics":"osint,pentesting,malware","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"onedrive_user_enum is a tool designed for enumerating valid OneDrive users by leveraging the HTTP response codes from file share URLs. Its primary use case is passive user enumeration, which avoids direct login attempts, making it less detectable by the target organization. Notable features include options for remote logging to MySQL, local SQLite database support, user list truncation, and mechanisms for de-duplication and user list management."} +{"full_name":"obhq/obliteration","owner":"obhq","name":"obliteration","description":"Experimental free and open-source PlayStation 4 kernel","html_url":"https://github.com/obhq/obliteration","stars":783,"language":"Rust","topics":"reverse-engineering,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Experimental free and open-source PlayStation 4 kernel"} +{"full_name":"obitouka/InstagramPrivSniffer","owner":"obitouka","name":"InstagramPrivSniffer","description":"InstagramPrivSniffer is a digital investigation tool designed for accessing and analyzing posts from private Instagram accounts that are made visible through collaborations with public accounts. Notable features include the ability to download and view media from these private accounts, serving primarily as an OSINT resource for cybersecurity professionals. The tool is intended strictly for educational and research purposes, and its use should be approached with legal considerations in mind.","html_url":"https://github.com/obitouka/InstagramPrivSniffer","stars":724,"language":"Python","topics":"osint","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"InstagramPrivSniffer is a digital investigation tool designed for accessing and analyzing posts from private Instagram accounts that are made visible through collaborations with public accounts. Notable features include the ability to download and view media from these private accounts, serving primarily as an OSINT resource for cybersecurity professionals. The tool is intended strictly for educational and research purposes, and its use should be approached with legal considerations in mind."} +{"full_name":"ohpe/juicy-potato","owner":"ohpe","name":"juicy-potato","description":"A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\\SYSTEM.","html_url":"https://github.com/ohpe/juicy-potato","stars":2747,"language":"C++","topics":"privilege-escalation","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\\SYSTEM."} +{"full_name":"olafhartong/sysmon-modular","owner":"olafhartong","name":"sysmon-modular","description":"A repository of sysmon configuration modules","html_url":"https://github.com/olafhartong/sysmon-modular","stars":2995,"language":"PowerShell","topics":"malware,forensics","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A repository of sysmon configuration modules"} +{"full_name":"onecli/onecli","owner":"onecli","name":"onecli","description":"Open-source credential vault, give your AI agents access to services without exposing keys.","html_url":"https://github.com/onecli/onecli","stars":1025,"language":"TypeScript","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Open-source credential vault, give your AI agents access to services without exposing keys."} +{"full_name":"open-goal/jak-project","owner":"open-goal","name":"jak-project","description":"Reviving the language that brought us the Jak \u0026 Daxter Series","html_url":"https://github.com/open-goal/jak-project","stars":3254,"language":"Common Lisp","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Reviving the language that brought us the Jak \u0026 Daxter Series"} +{"full_name":"openappsec/openappsec","owner":"openappsec","name":"openappsec","description":"open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application \u0026 APIs. This repo include the main code and logic.","html_url":"https://github.com/openappsec/openappsec","stars":1555,"language":"C++","topics":"malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application \u0026 APIs. This repo include the main code and logic."} +{"full_name":"openblack/openblack","owner":"openblack","name":"openblack","description":"openblack is an open-source game engine that supports playing Black \u0026 White (2001).","html_url":"https://github.com/openblack/openblack","stars":1469,"language":"C++","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"openblack is an open-source game engine that supports playing Black \u0026 White (2001)."} +{"full_name":"opencve/opencve","owner":"opencve","name":"opencve","description":"Vulnerability Intelligence Platform","html_url":"https://github.com/opencve/opencve","stars":2573,"language":"Python","topics":"osint,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Vulnerability Intelligence Platform"} +{"full_name":"opensemanticsearch/open-semantic-search","owner":"opensemanticsearch","name":"open-semantic-search","description":"Open Source research tool to search, browse, analyze and explore large document collections by Semantic Search Engine and Open Source Text Mining \u0026 Text Analytics platform (Integrates ETL for document processing, OCR for images \u0026 PDF, named entity recognition for persons, organizations \u0026 locations, metadata management by thesaurus \u0026 ontologies, search user interface \u0026 search apps for fulltext search, faceted search \u0026 knowledge graph)","html_url":"https://github.com/opensemanticsearch/open-semantic-search","stars":1156,"language":"Shell","topics":"malware,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Open Source research tool to search, browse, analyze and explore large document collections by Semantic Search Engine and Open Source Text Mining \u0026 Text Analytics platform (Integrates ETL for document processing, OCR for images \u0026 PDF, named entity recognition for persons, organizations \u0026 locations, metadata management by thesaurus \u0026 ontologies, search user interface \u0026 search apps for fulltext search, faceted search \u0026 knowledge graph)"} +{"full_name":"openwrt-xiaomi/xmir-patcher","owner":"openwrt-xiaomi","name":"xmir-patcher","description":"Firmware patcher for Xiaomi routers","html_url":"https://github.com/openwrt-xiaomi/xmir-patcher","stars":2688,"language":"Python","topics":"exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Firmware patcher for Xiaomi routers"} +{"full_name":"orhun/binsider","owner":"orhun","name":"binsider","description":"Analyze ELF binaries like a boss 😼🕵️‍♂️","html_url":"https://github.com/orhun/binsider","stars":4088,"language":"Rust","topics":"reverse-engineering,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Analyze ELF binaries like a boss 😼🕵️‍♂️"} +{"full_name":"osintambition/Social-Media-OSINT-Tools-Collection","owner":"osintambition","name":"Social-Media-OSINT-Tools-Collection","description":"A collection of most useful osint tools for SOCINT.","html_url":"https://github.com/osintambition/Social-Media-OSINT-Tools-Collection","stars":1706,"topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A collection of most useful osint tools for SOCINT."} +{"full_name":"osintbrazuca/osint-brazuca","owner":"osintbrazuca","name":"osint-brazuca","description":"Repositório criado com intuito de reunir informações, fontes(websites/portais) e tricks de OSINT dentro do contexto Brasil.","html_url":"https://github.com/osintbrazuca/osint-brazuca","stars":2343,"topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Repositório criado com intuito de reunir informações, fontes(websites/portais) e tricks de OSINT dentro do contexto Brasil."} +{"full_name":"osintbrazuca/osint-brazuca-regex","owner":"osintbrazuca","name":"osint-brazuca-regex","description":"Repositório criado com intuito de reunir expressões regulares dentro do contexto Brasil","html_url":"https://github.com/osintbrazuca/osint-brazuca-regex","stars":969,"topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Repositório criado com intuito de reunir expressões regulares dentro do contexto Brasil"} +{"full_name":"ossf/cve-bin-tool","owner":"ossf","name":"cve-bin-tool","description":"The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.","html_url":"https://github.com/ossf/cve-bin-tool","stars":1646,"language":"Python","topics":"exploit,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions."} +{"full_name":"owasp-dep-scan/dep-scan","owner":"owasp-dep-scan","name":"dep-scan","description":"OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.","html_url":"https://github.com/owasp-dep-scan/dep-scan","stars":1212,"language":"Python","topics":"exploit,malware,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration."} +{"full_name":"owasp-noir/noir","owner":"owasp-noir","name":"noir","description":"Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.","html_url":"https://github.com/owasp-noir/noir","stars":1141,"language":"Crystal","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface."} +{"full_name":"p0dalirius/Awesome-RCE-techniques","owner":"p0dalirius","name":"Awesome-RCE-techniques","description":"Awesome list of step by step techniques to achieve Remote Code Execution on various apps!","html_url":"https://github.com/p0dalirius/Awesome-RCE-techniques","stars":1941,"language":"Dockerfile","topics":"exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Awesome list of step by step techniques to achieve Remote Code Execution on various apps!"} +{"full_name":"p0dalirius/Coercer","owner":"p0dalirius","name":"Coercer","description":"A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.","html_url":"https://github.com/p0dalirius/Coercer","stars":2209,"language":"Python","topics":"privilege-escalation","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods."} +{"full_name":"p1ngul1n0/blackbird","owner":"p1ngul1n0","name":"blackbird","description":"An OSINT tool to search for accounts by username and email in social networks.","html_url":"https://github.com/p1ngul1n0/blackbird","stars":5873,"language":"Python","topics":"osint,network,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An OSINT tool to search for accounts by username and email in social networks."} +{"full_name":"packing-box/awesome-executable-packing","owner":"packing-box","name":"awesome-executable-packing","description":"A curated list of awesome resources related to executable packing","html_url":"https://github.com/packing-box/awesome-executable-packing","stars":1551,"topics":"reverse-engineering,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A curated list of awesome resources related to executable packing"} +{"full_name":"palahsu/DDoS-Ripper","owner":"palahsu","name":"DDoS-Ripper","description":"DDos Ripper a Distributable Denied-of-Service (DDOS) attack server that cuts off targets or surrounding infrastructure in a flood of Internet traffic","html_url":"https://github.com/palahsu/DDoS-Ripper","stars":2738,"language":"Python","topics":"web-security","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"DDos Ripper a Distributable Denied-of-Service (DDOS) attack server that cuts off targets or surrounding infrastructure in a flood of Internet traffic"} +{"full_name":"panda-re/panda","owner":"panda-re","name":"panda","description":"Platform for Architecture-Neutral Dynamic Analysis","html_url":"https://github.com/panda-re/panda","stars":2726,"language":"C","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Platform for Architecture-Neutral Dynamic Analysis"} +{"full_name":"pcaversaccio/reentrancy-attacks","owner":"pcaversaccio","name":"reentrancy-attacks","description":"A chronological and (hopefully) complete list of reentrancy attacks to date.","html_url":"https://github.com/pcaversaccio/reentrancy-attacks","stars":1597,"topics":"exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A chronological and (hopefully) complete list of reentrancy attacks to date."} +{"full_name":"pentestgeek/phishing-frenzy","owner":"pentestgeek","name":"phishing-frenzy","description":"Ruby on Rails Phishing Framework","html_url":"https://github.com/pentestgeek/phishing-frenzy","stars":885,"language":"PHP","topics":"malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Ruby on Rails Phishing Framework"} +{"full_name":"pglombardo/PasswordPusher","owner":"pglombardo","name":"PasswordPusher","description":"🔐 Securely share sensitive information with automatic expiration \u0026 deletion after a set number of views or duration. Track who, what and when with full audit logs.","html_url":"https://github.com/pglombardo/PasswordPusher","stars":2905,"language":"Ruby","topics":"cryptography,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"🔐 Securely share sensitive information with automatic expiration \u0026 deletion after a set number of views or duration. Track who, what and when with full audit logs."} +{"full_name":"ph4ntonn/Stowaway","owner":"ph4ntonn","name":"Stowaway","description":"👻Stowaway -- Multi-hop Proxy Tool for pentesters","html_url":"https://github.com/ph4ntonn/Stowaway","stars":3343,"language":"Go","topics":"pentesting,red-team,cryptography","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"👻Stowaway -- Multi-hop Proxy Tool for pentesters"} +{"full_name":"phasehq/console","owner":"phasehq","name":"console","description":"Application secrets and configuration management for developers.","html_url":"https://github.com/phasehq/console","stars":838,"language":"TypeScript","topics":"malware,cryptography","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Application secrets and configuration management for developers."} +{"full_name":"phishdestroy/destroylist","owner":"phishdestroy","name":"destroylist","description":"Real-time phishing \u0026 scam domain blocklist — 99,000+ curated threats, 828K+ community, free API, multiple formats","html_url":"https://github.com/phishdestroy/destroylist","stars":907,"language":"HTML","topics":"malware,cryptography,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Real-time phishing \u0026 scam domain blocklist — 99,000+ curated threats, 828K+ community, free API, multiple formats"} +{"full_name":"pielco11/fav-up","owner":"pielco11","name":"fav-up","description":"IP lookup by favicon using Shodan","html_url":"https://github.com/pielco11/fav-up","stars":1192,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"IP lookup by favicon using Shodan"} +{"full_name":"plasma-disassembler/plasma","owner":"plasma-disassembler","name":"plasma","description":"Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.","html_url":"https://github.com/plasma-disassembler/plasma","stars":3065,"language":"Python","topics":"reverse-engineering,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax."} +{"full_name":"pmret/papermario","owner":"pmret","name":"papermario","description":"Decompilation of Paper Mario (Nintendo 64)","html_url":"https://github.com/pmret/papermario","stars":1544,"language":"C","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Decompilation of Paper Mario (Nintendo 64)"} +{"full_name":"praetorian-inc/noseyparker","owner":"praetorian-inc","name":"noseyparker","description":"Nosey Parker is a command-line tool that finds secrets and sensitive information in textual data and Git history.","html_url":"https://github.com/praetorian-inc/noseyparker","stars":2315,"language":"Rust","topics":"malware,pentesting,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Nosey Parker is a command-line tool that finds secrets and sensitive information in textual data and Git history."} +{"full_name":"prbhtkumr/PhoneSploit","owner":"prbhtkumr","name":"PhoneSploit","description":"A tool for remote ADB exploitation in Python3 for all Machines.","html_url":"https://github.com/prbhtkumr/PhoneSploit","stars":873,"language":"Python","topics":"exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A tool for remote ADB exploitation in Python3 for all Machines."} +{"full_name":"presidentbeef/brakeman","owner":"presidentbeef","name":"brakeman","description":"A static analysis security vulnerability scanner for Ruby on Rails applications","html_url":"https://github.com/presidentbeef/brakeman","stars":7206,"language":"Ruby","topics":"scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A static analysis security vulnerability scanner for Ruby on Rails applications"} +{"full_name":"pret/pokecrystal","owner":"pret","name":"pokecrystal","description":"Disassembly of Pokémon Crystal","html_url":"https://github.com/pret/pokecrystal","stars":2391,"language":"Assembly","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Disassembly of Pokémon Crystal"} +{"full_name":"pret/pokeemerald","owner":"pret","name":"pokeemerald","description":"Decompilation of Pokémon Emerald","html_url":"https://github.com/pret/pokeemerald","stars":3029,"language":"C","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Decompilation of Pokémon Emerald"} +{"full_name":"pret/pokefirered","owner":"pret","name":"pokefirered","description":"Decompilation of Pokémon FireRed/LeafGreen","html_url":"https://github.com/pret/pokefirered","stars":1361,"language":"C","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Decompilation of Pokémon FireRed/LeafGreen"} +{"full_name":"pret/pokered","owner":"pret","name":"pokered","description":"Disassembly of Pokémon Red/Blue","html_url":"https://github.com/pret/pokered","stars":4625,"language":"Assembly","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Disassembly of Pokémon Red/Blue"} +{"full_name":"pret/pokeruby","owner":"pret","name":"pokeruby","description":"Decompilation of Pokémon Ruby/Sapphire","html_url":"https://github.com/pret/pokeruby","stars":934,"language":"C","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Decompilation of Pokémon Ruby/Sapphire"} +{"full_name":"pret/pokeyellow","owner":"pret","name":"pokeyellow","description":"Disassembly of Pokemon Yellow","html_url":"https://github.com/pret/pokeyellow","stars":821,"language":"Assembly","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Disassembly of Pokemon Yellow"} +{"full_name":"project-copacetic/copacetic","owner":"project-copacetic","name":"copacetic","description":"🧵 CLI tool for directly patching container images!","html_url":"https://github.com/project-copacetic/copacetic","stars":1566,"language":"Go","topics":"exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"🧵 CLI tool for directly patching container images!"} +{"full_name":"projectdiscovery/asnmap","owner":"projectdiscovery","name":"asnmap","description":"Go CLI and Library for quickly mapping organization network ranges using ASN information.","html_url":"https://github.com/projectdiscovery/asnmap","stars":1024,"language":"Go","topics":"network,osint,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Go CLI and Library for quickly mapping organization network ranges using ASN information."} +{"full_name":"projectdiscovery/urlfinder","owner":"projectdiscovery","name":"urlfinder","description":"A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.","html_url":"https://github.com/projectdiscovery/urlfinder","stars":853,"language":"Go","topics":"osint,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning."} +{"full_name":"protectai/llm-guard","owner":"protectai","name":"llm-guard","description":"The Security Toolkit for LLM Interactions","html_url":"https://github.com/protectai/llm-guard","stars":2711,"language":"Python","topics":"web-security","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"The Security Toolkit for LLM Interactions"} +{"full_name":"prowler-cloud/prowler","owner":"prowler-cloud","name":"prowler","description":"Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.","html_url":"https://github.com/prowler-cloud/prowler","stars":13378,"language":"Python","topics":"forensics","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment."} +{"full_name":"pushsecurity/saas-attacks","owner":"pushsecurity","name":"saas-attacks","description":"Offensive security drives defensive security. We're sharing a collection of SaaS attack techniques to help defenders understand the threats they face. #nolockdown","html_url":"https://github.com/pushsecurity/saas-attacks","stars":1410,"topics":"web-security","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Offensive security drives defensive security. We're sharing a collection of SaaS attack techniques to help defenders understand the threats they face. #nolockdown"} +{"full_name":"pwndbg/pwndbg","owner":"pwndbg","name":"pwndbg","description":"Exploit Development and Reverse Engineering with GDB \u0026 LLDB Made Easy","html_url":"https://github.com/pwndbg/pwndbg","stars":10212,"language":"Python","topics":"malware,exploit,reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Exploit Development and Reverse Engineering with GDB \u0026 LLDB Made Easy"} +{"full_name":"pygod-team/pygod","owner":"pygod-team","name":"pygod","description":"A Python Library for Graph Outlier Detection (Anomaly Detection)","html_url":"https://github.com/pygod-team/pygod","stars":1482,"language":"Python","topics":"network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A Python Library for Graph Outlier Detection (Anomaly Detection)"} +{"full_name":"qeeqbox/honeypots","owner":"qeeqbox","name":"honeypots","description":"30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)","html_url":"https://github.com/qeeqbox/honeypots","stars":957,"language":"Python","topics":"malware,network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)"} +{"full_name":"qeeqbox/social-analyzer","owner":"qeeqbox","name":"social-analyzer","description":"API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \\ websites","html_url":"https://github.com/qeeqbox/social-analyzer","stars":22260,"language":"JavaScript","topics":"osint,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \\ websites"} +{"full_name":"qiwentaidi/Slack","owner":"qiwentaidi","name":"Slack","description":"安全服务集成化工具集","html_url":"https://github.com/qiwentaidi/Slack","stars":1050,"language":"Go","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"安全服务集成化工具集"} +{"full_name":"qtc-de/remote-method-guesser","owner":"qtc-de","name":"remote-method-guesser","description":"Java RMI Vulnerability Scanner","html_url":"https://github.com/qtc-de/remote-method-guesser","stars":915,"language":"Java","topics":"pentesting,scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Java RMI Vulnerability Scanner"} +{"full_name":"quantumcore/paradoxiaRAT","owner":"quantumcore","name":"paradoxiaRAT","description":"ParadoxiaRat : Native Windows Remote access Tool.","html_url":"https://github.com/quantumcore/paradoxiaRAT","stars":823,"language":"C","topics":"red-team,malware,web-security","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"ParadoxiaRat : Native Windows Remote access Tool."} +{"full_name":"quentinhardy/msdat","owner":"quentinhardy","name":"msdat","description":"MSDAT: Microsoft SQL Database Attacking Tool","html_url":"https://github.com/quentinhardy/msdat","stars":990,"language":"Python","topics":"pentesting,privilege-escalation","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"MSDAT: Microsoft SQL Database Attacking Tool"} +{"full_name":"quentinhardy/odat","owner":"quentinhardy","name":"odat","description":"ODAT: Oracle Database Attacking Tool","html_url":"https://github.com/quentinhardy/odat","stars":1745,"language":"Python","topics":"pentesting,privilege-escalation","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"ODAT: Oracle Database Attacking Tool"} +{"full_name":"r00t-3xp10it/venom","owner":"r00t-3xp10it","name":"venom","description":"venom - C2 shellcode generator/compiler/handler","html_url":"https://github.com/r00t-3xp10it/venom","stars":1943,"language":"Shell","topics":"post-exploitation,exploit,red-team,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"venom - C2 shellcode generator/compiler/handler"} +{"full_name":"r3nt0n/bopscrk","owner":"r3nt0n","name":"bopscrk","description":"Generate smart and powerful wordlists","html_url":"https://github.com/r3nt0n/bopscrk","stars":1069,"language":"Python","topics":"malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Generate smart and powerful wordlists"} +{"full_name":"radareorg/radare2-book","owner":"radareorg","name":"radare2-book","description":"The Official Radare2 Book","html_url":"https://github.com/radareorg/radare2-book","stars":877,"language":"C","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"The Official Radare2 Book"} +{"full_name":"rajkumardusad/IP-Tracer","owner":"rajkumardusad","name":"IP-Tracer","description":"Track any ip address with IP-Tracer. IP-Tracer is developed for Linux and Termux. you can retrieve any ip address information using IP-Tracer.","html_url":"https://github.com/rajkumardusad/IP-Tracer","stars":2819,"language":"PHP","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Track any ip address with IP-Tracer. IP-Tracer is developed for Linux and Termux. you can retrieve any ip address information using IP-Tracer."} +{"full_name":"ran-j/PS2Recomp","owner":"ran-j","name":"PS2Recomp","description":"Playstation 2 Static Recompiler \u0026 Runtime Tool to make native PC ports","html_url":"https://github.com/ran-j/PS2Recomp","stars":2881,"language":"C++","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Playstation 2 Static Recompiler \u0026 Runtime Tool to make native PC ports"} +{"full_name":"reconmap/reconmap","owner":"reconmap","name":"reconmap","description":"Reconmap is a collaboration-first security operations platform for infosec teams and MSSPs, enabling end‑to‑end engagement management, from reconnaissance through execution and reporting. With built-in command automation, output parsing, and AI‑assisted summaries, it delivers faster, more structured, and high‑quality security assessments.","html_url":"https://github.com/reconmap/reconmap","stars":914,"language":"JavaScript","topics":"pentesting,osint,scanner,exploit,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Reconmap is a collaboration-first security operations platform for infosec teams and MSSPs, enabling end‑to‑end engagement management, from reconnaissance through execution and reporting. With built-in command automation, output parsing, and AI‑assisted summaries, it delivers faster, more structured, and high‑quality security assessments."} +{"full_name":"reconurge/flowsint","owner":"reconurge","name":"flowsint","description":"A modern platform for visual, flexible, and extensible graph-based investigations. For cybersecurity analysts and investigators.","html_url":"https://github.com/reconurge/flowsint","stars":2768,"language":"TypeScript","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A modern platform for visual, flexible, and extensible graph-based investigations. For cybersecurity analysts and investigators."} +{"full_name":"redballoonsecurity/ofrak","owner":"redballoonsecurity","name":"ofrak","description":"OFRAK: unpack, modify, and repack binaries.","html_url":"https://github.com/redballoonsecurity/ofrak","stars":2033,"language":"Python","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"OFRAK: unpack, modify, and repack binaries."} +{"full_name":"redcode-labs/Bashark","owner":"redcode-labs","name":"Bashark","description":"Bashark 2.0 is a post-exploitation toolkit designed for penetration testers and security researchers to facilitate operations during the post-exploitation phase of security audits. It offers a simple command-line interface, where users can source the bashark.sh script to access various functions and commands, streamlining the process of managing compromised hosts. Key features include ease of use through a help menu and support for Bash scripting, making it a practical tool for enhancing post-exploitation activities.","html_url":"https://github.com/redcode-labs/Bashark","stars":747,"language":"Shell","topics":"post-exploitation,exploit","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"Bashark 2.0 is a post-exploitation toolkit designed for penetration testers and security researchers to facilitate operations during the post-exploitation phase of security audits. It offers a simple command-line interface, where users can source the bashark.sh script to access various functions and commands, streamlining the process of managing compromised hosts. Key features include ease of use through a help menu and support for Bash scripting, making it a practical tool for enhancing post-exploitation activities."} +{"full_name":"rednaga/APKiD","owner":"rednaga","name":"APKiD","description":"Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android","html_url":"https://github.com/rednaga/APKiD","stars":2437,"language":"YARA","topics":"malware,forensics","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android"} +{"full_name":"reversinglabs/reversinglabs-yara-rules","owner":"reversinglabs","name":"reversinglabs-yara-rules","description":"ReversingLabs YARA Rules","html_url":"https://github.com/reversinglabs/reversinglabs-yara-rules","stars":900,"language":"YARA","topics":"reverse-engineering,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"ReversingLabs YARA Rules"} +{"full_name":"rewanthtammana/Damn-Vulnerable-Bank","owner":"rewanthtammana","name":"Damn-Vulnerable-Bank","description":"Damn Vulnerable Bank is an intentionally vulnerable Android application designed to educate users on security flaws in banking apps. Its primary use case is for security professionals and developers to explore various vulnerabilities, such as root detection and insecure storage, by interacting with features like user registration, fund transfers, and transaction history. Notable features include fingerprint and PIN verification for transactions, as well as a gamified approach to discovering hidden vulnerabilities within the app.","html_url":"https://github.com/rewanthtammana/Damn-Vulnerable-Bank","stars":739,"language":"Java","topics":"pentesting","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"Damn Vulnerable Bank is an intentionally vulnerable Android application designed to educate users on security flaws in banking apps. Its primary use case is for security professionals and developers to explore various vulnerabilities, such as root detection and insecure storage, by interacting with features like user registration, fund transfers, and transaction history. Notable features include fingerprint and PIN verification for transactions, as well as a gamified approach to discovering hidden vulnerabilities within the app."} +{"full_name":"rezaduty/cybersecurity-career-path","owner":"rezaduty","name":"cybersecurity-career-path","description":"Cybersecurity Career Path","html_url":"https://github.com/rezaduty/cybersecurity-career-path","stars":2020,"topics":"forensics,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Cybersecurity Career Path"} +{"full_name":"rfunix/Pompem","owner":"rfunix","name":"Pompem","description":"Find exploit tool","html_url":"https://github.com/rfunix/Pompem","stars":1024,"language":"Python","topics":"pentesting,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Find exploit tool"} +{"full_name":"rizinorg/rz-ghidra","owner":"rizinorg","name":"rz-ghidra","description":"Deep ghidra decompiler and sleigh disassembler integration for rizin","html_url":"https://github.com/rizinorg/rz-ghidra","stars":925,"language":"C++","topics":"reverse-engineering,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Deep ghidra decompiler and sleigh disassembler integration for rizin"} +{"full_name":"rmusser01/Infosec_Reference","owner":"rmusser01","name":"Infosec_Reference","description":"An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.","html_url":"https://github.com/rmusser01/Infosec_Reference","stars":5925,"language":"CSS","topics":"pentesting,privilege-escalation,exploit,red-team,reverse-engineering,malware,forensics","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version."} +{"full_name":"rndinfosecguy/Scavenger","owner":"rndinfosecguy","name":"Scavenger","description":"Crawler (Bot) searching for credential leaks on paste sites.","html_url":"https://github.com/rndinfosecguy/Scavenger","stars":765,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Crawler (Bot) searching for credential leaks on paste sites."} +{"full_name":"rng70/TryHackMe-Roadmap","owner":"rng70","name":"TryHackMe-Roadmap","description":"a list of 350+ Free TryHackMe rooms to start learning cybersecurity with THM","html_url":"https://github.com/rng70/TryHackMe-Roadmap","stars":1094,"topics":"network,forensics,reverse-engineering,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"a list of 350+ Free TryHackMe rooms to start learning cybersecurity with THM"} +{"full_name":"robiot/rustcat","owner":"robiot","name":"rustcat","description":"Rustcat(rcat) - The modern Port listener and Reverse shell","html_url":"https://github.com/robiot/rustcat","stars":806,"language":"Rust","topics":"network,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Rustcat(rcat) - The modern Port listener and Reverse shell"} +{"full_name":"rodolfomarianocy/OSCP-Tricks","owner":"rodolfomarianocy","name":"OSCP-Tricks","description":"OSCP Preparation Guide | Courses, Tricks, Tutorials, Exercises, Machines","html_url":"https://github.com/rodolfomarianocy/OSCP-Tricks","stars":1074,"topics":"pentesting,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"OSCP Preparation Guide | Courses, Tricks, Tutorials, Exercises, Machines"} +{"full_name":"ron190/jsql-injection","owner":"ron190","name":"jsql-injection","description":"jSQL Injection is a Java application for automatic SQL database injection.","html_url":"https://github.com/ron190/jsql-injection","stars":1751,"language":"Java","topics":"web-security,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"jSQL Injection is a Java application for automatic SQL database injection."} +{"full_name":"ronin-rb/ronin","owner":"ronin-rb","name":"ronin","description":"Ronin is an open-source Ruby toolkit designed for security research and development, featuring a comprehensive suite of CLI commands and libraries tailored for various security tasks such as data encoding/decoding, vulnerability scanning, fuzzing, and reconnaissance. Notable features include a fully-loaded Ruby REPL, a lightweight web UI for database interaction, and the ability to install and run third-party exploits or payloads. This tool is primarily used by security researchers, bug bounty hunters, and developers for efficient data processing and rapid script prototyping.","html_url":"https://github.com/ronin-rb/ronin","stars":743,"language":"Ruby","topics":"exploit,network","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"Ronin is an open-source Ruby toolkit designed for security research and development, featuring a comprehensive suite of CLI commands and libraries tailored for various security tasks such as data encoding/decoding, vulnerability scanning, fuzzing, and reconnaissance. Notable features include a fully-loaded Ruby REPL, a lightweight web UI for database interaction, and the ability to install and run third-party exploits or payloads. This tool is primarily used by security researchers, bug bounty hunters, and developers for efficient data processing and rapid script prototyping."} +{"full_name":"rshipp/awesome-malware-analysis","owner":"rshipp","name":"awesome-malware-analysis","description":"Defund the Police.","html_url":"https://github.com/rshipp/awesome-malware-analysis","stars":13541,"topics":"osint,malware,network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Defund the Police."} +{"full_name":"rubysec/bundler-audit","owner":"rubysec","name":"bundler-audit","description":"Patch-level verification for Bundler","html_url":"https://github.com/rubysec/bundler-audit","stars":2742,"language":"Ruby","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Patch-level verification for Bundler"} +{"full_name":"rust-secure-code/cargo-auditable","owner":"rust-secure-code","name":"cargo-auditable","description":"Make production Rust binaries auditable","html_url":"https://github.com/rust-secure-code/cargo-auditable","stars":815,"language":"Rust","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Make production Rust binaries auditable"} +{"full_name":"rverton/webanalyze","owner":"rverton","name":"webanalyze","description":"Port of Wappalyzer (uncovers technologies used on websites) to automate mass scanning.","html_url":"https://github.com/rverton/webanalyze","stars":1112,"language":"Go","topics":"scanner,malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Port of Wappalyzer (uncovers technologies used on websites) to automate mass scanning."} +{"full_name":"s0md3v/Corsy","owner":"s0md3v","name":"Corsy","description":"CORS Misconfiguration Scanner","html_url":"https://github.com/s0md3v/Corsy","stars":1509,"language":"Python","topics":"exploit,malware,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"CORS Misconfiguration Scanner"} +{"full_name":"s0md3v/Silver","owner":"s0md3v","name":"Silver","description":"Mass scan IPs for vulnerable services","html_url":"https://github.com/s0md3v/Silver","stars":1047,"language":"Python","topics":"network,scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Mass scan IPs for vulnerable services"} +{"full_name":"safe-graph/DGFraud","owner":"safe-graph","name":"DGFraud","description":"DGFraud is a Graph Neural Network (GNN) toolbox designed for detecting fraud in various systems by integrating and comparing state-of-the-art GNN-based models. Its primary use case lies in enhancing the efficacy of fraud detection mechanisms through advanced graph-based methodologies. Notable features include a modular architecture for implementing new models, comprehensive documentation on existing algorithms, and support for TensorFlow 2.0, allowing seamless integration into existing projects.","html_url":"https://github.com/safe-graph/DGFraud","stars":750,"language":"Python","topics":"network","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"DGFraud is a Graph Neural Network (GNN) toolbox designed for detecting fraud in various systems by integrating and comparing state-of-the-art GNN-based models. Its primary use case lies in enhancing the efficacy of fraud detection mechanisms through advanced graph-based methodologies. Notable features include a modular architecture for implementing new models, comprehensive documentation on existing algorithms, and support for TensorFlow 2.0, allowing seamless integration into existing projects."} +{"full_name":"samratashok/nishang","owner":"samratashok","name":"nishang","description":"Nishang - Offensive PowerShell for red team, penetration testing and offensive security.","html_url":"https://github.com/samratashok/nishang","stars":9805,"language":"PowerShell","topics":"red-team,malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Nishang - Offensive PowerShell for red team, penetration testing and offensive security."} +{"full_name":"samsesh/SocialBox-Termux","owner":"samsesh","name":"SocialBox-Termux","description":"SocialBox is a Bruteforce Attack Framework [ Facebook , Gmail , Instagram ,Twitter ] , Coded By Belahsan Ouerghi Edit By samsesh for termux on android","html_url":"https://github.com/samsesh/SocialBox-Termux","stars":4197,"language":"Shell","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"SocialBox is a Bruteforce Attack Framework [ Facebook , Gmail , Instagram ,Twitter ] , Coded By Belahsan Ouerghi Edit By samsesh for termux on android"} +{"full_name":"samugit83/redamon","owner":"samugit83","name":"redamon","description":"An AI-powered agentic red team framework that automates offensive security operations, from reconnaissance to exploitation to post-exploitation, with zero human intervention.","html_url":"https://github.com/samugit83/redamon","stars":1629,"language":"Python","topics":"red-team,malware,pentesting,osint,post-exploitation,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An AI-powered agentic red team framework that automates offensive security operations, from reconnaissance to exploitation to post-exploitation, with zero human intervention."} +{"full_name":"saturneric/GpgFrontend","owner":"saturneric","name":"GpgFrontend","description":"GpgFrontend is a modern encryption tool that leverages GnuPG to facilitate easy and secure encryption and signing of texts and files across multiple platforms, including Windows, macOS, and Linux. Key features include a portable solution that can be run from a USB drive, flexible management of key databases, and a strong focus on user privacy through various safety measures. The tool also supports extensive module development, allowing for customizable user experiences and features.","html_url":"https://github.com/saturneric/GpgFrontend","stars":711,"language":"C++","topics":"cryptography","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"GpgFrontend is a modern encryption tool that leverages GnuPG to facilitate easy and secure encryption and signing of texts and files across multiple platforms, including Windows, macOS, and Linux. Key features include a portable solution that can be run from a USB drive, flexible management of key databases, and a strong focus on user privacy through various safety measures. The tool also supports extensive module development, allowing for customizable user experiences and features."} +{"full_name":"schemacrawler/SchemaCrawler","owner":"schemacrawler","name":"SchemaCrawler","description":"Free database schema discovery and comprehension tool","html_url":"https://github.com/schemacrawler/SchemaCrawler","stars":1789,"language":"HTML","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Free database schema discovery and comprehension tool"} +{"full_name":"schemaspy/schemaspy","owner":"schemaspy","name":"schemaspy","description":"Database documentation built easy","html_url":"https://github.com/schemaspy/schemaspy","stars":3557,"language":"HTML","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Database documentation built easy"} +{"full_name":"schutzwerk/CANalyzat0r","owner":"schutzwerk","name":"CANalyzat0r","description":"Security analysis toolkit for proprietary car protocols","html_url":"https://github.com/schutzwerk/CANalyzat0r","stars":785,"language":"Python","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Security analysis toolkit for proprietary car protocols"} +{"full_name":"scipag/vulscan","owner":"scipag","name":"vulscan","description":"Advanced vulnerability scanning with Nmap NSE","html_url":"https://github.com/scipag/vulscan","stars":3730,"language":"Lua","topics":"pentesting,scanner,exploit,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Advanced vulnerability scanning with Nmap NSE"} +{"full_name":"scito/extract_otp_secrets","owner":"scito","name":"extract_otp_secrets","description":"Extract one time password (OTP) secrets from QR codes exported by two-factor authentication (2FA) apps such as \"Google Authenticator\". The exported QR codes from authentication apps can be captured by camera, read from images, or read from text files. The secrets can be exported to JSON or CSV, or printed as QR codes to console.","html_url":"https://github.com/scito/extract_otp_secrets","stars":1573,"language":"Python","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Extract one time password (OTP) secrets from QR codes exported by two-factor authentication (2FA) apps such as \"Google Authenticator\". The exported QR codes from authentication apps can be captured by camera, read from images, or read from text files. The secrets can be exported to JSON or CSV, or printed as QR codes to console."} +{"full_name":"screetsec/Sudomy","owner":"screetsec","name":"Sudomy","description":"Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting","html_url":"https://github.com/screetsec/Sudomy","stars":2350,"language":"Shell","topics":"malware,pentesting,osint,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting"} +{"full_name":"screetsec/Vegile","owner":"screetsec","name":"Vegile","description":"Vegile is a post-exploitation tool designed for maintaining stealthy backdoor/rootkit access on Linux systems. Its primary use case involves establishing persistent access to compromised hosts while enabling features such as process hiding and session unlimited capabilities in Metasploit. Notable functionalities include the ability to automatically restart hidden processes, ensuring persistent access even after termination, and support for various backdoor implementations, including those created with msfvenom.","html_url":"https://github.com/screetsec/Vegile","stars":752,"language":"Shell","topics":"post-exploitation,exploit","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"Vegile is a post-exploitation tool designed for maintaining stealthy backdoor/rootkit access on Linux systems. Its primary use case involves establishing persistent access to compromised hosts while enabling features such as process hiding and session unlimited capabilities in Metasploit. Notable functionalities include the ability to automatically restart hidden processes, ensuring persistent access even after termination, and support for various backdoor implementations, including those created with msfvenom."} +{"full_name":"secdev/scapy","owner":"secdev","name":"scapy","description":"Scapy: the Python-based interactive packet manipulation program \u0026 library.","html_url":"https://github.com/secdev/scapy","stars":12121,"language":"Python","topics":"network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Scapy: the Python-based interactive packet manipulation program \u0026 library."} +{"full_name":"secrary/Andromeda","owner":"secrary","name":"Andromeda","description":"Andromeda is a performance-oriented tool designed for accelerating the initial reverse engineering of Android applications, leveraging its C/C++ implementation. It aims to simplify the analysis process with a straightforward command-line interface, making it accessible for security researchers and developers. Currently in early development, Andromeda highlights the potential for speed improvements over alternative solutions in the same domain.","html_url":"https://github.com/secrary/Andromeda","stars":710,"language":"C++","topics":"reverse-engineering","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"Andromeda is a performance-oriented tool designed for accelerating the initial reverse engineering of Android applications, leveraging its C/C++ implementation. It aims to simplify the analysis process with a straightforward command-line interface, making it accessible for security researchers and developers. Currently in early development, Andromeda highlights the potential for speed improvements over alternative solutions in the same domain."} +{"full_name":"secrary/makin","owner":"secrary","name":"makin","description":"makin is a malware assessment tool designed to simplify the process of identifying anti-debugging techniques employed by malicious samples. It injects a DLL into the target process to monitor specific API calls, providing insights into debugger detection methods, and can generate IDA Pro scripts for setting breakpoints at the identified APIs. Notable features include the ability to hook various functions from ntdll.dll and kernelbase.dll , effectively revealing complex anti-debugging strategies.","html_url":"https://github.com/secrary/makin","stars":742,"language":"C++","topics":"reverse-engineering,malware","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"makin is a malware assessment tool designed to simplify the process of identifying anti-debugging techniques employed by malicious samples. It injects a DLL into the target process to monitor specific API calls, providing insights into debugger detection methods, and can generate IDA Pro scripts for setting breakpoints at the identified APIs. Notable features include the ability to hook various functions from ntdll.dll and kernelbase.dll , effectively revealing complex anti-debugging strategies."} +{"full_name":"securego/gosec","owner":"securego","name":"gosec","description":"Go security checker","html_url":"https://github.com/securego/gosec","stars":8730,"language":"Go","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Go security checker"} +{"full_name":"securitytemplates/sectemplates","owner":"securitytemplates","name":"sectemplates","description":"Open source templates you can use to bootstrap your security programs","html_url":"https://github.com/securitytemplates/sectemplates","stars":894,"topics":"malware,forensics,pentesting,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Open source templates you can use to bootstrap your security programs"} +{"full_name":"seekbytes/IPA","owner":"seekbytes","name":"IPA","description":"GUI analyzer for deep-diving into PDF files. Detect malicious payloads, understand object relationships, and extract key information for threat analysis.","html_url":"https://github.com/seekbytes/IPA","stars":870,"language":"Rust","topics":"malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"GUI analyzer for deep-diving into PDF files. Detect malicious payloads, understand object relationships, and extract key information for threat analysis."} +{"full_name":"seekr-osint/seekr","owner":"seekr-osint","name":"seekr","description":"Seekr is a multi-purpose toolkit designed for gathering and managing Open Source Intelligence (OSINT) data, featuring a streamlined web interface for data collection, organization, and analysis. Key functionalities include integration with popular OSINT tools, account discovery, customizable themes, and the absence of API keys for any features, making it suitable for researchers and investigators seeking to enhance their OSINT workflows. It is currently in beta development and allows for easy setup on various platforms including Windows, Linux, and Docker.","html_url":"https://github.com/seekr-osint/seekr","stars":760,"language":"Go","topics":"osint","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"Seekr is a multi-purpose toolkit designed for gathering and managing Open Source Intelligence (OSINT) data, featuring a streamlined web interface for data collection, organization, and analysis. Key functionalities include integration with popular OSINT tools, account discovery, customizable themes, and the absence of API keys for any features, making it suitable for researchers and investigators seeking to enhance their OSINT workflows. It is currently in beta development and allows for easy setup on various platforms including Windows, Linux, and Docker."} +{"full_name":"seemoo-lab/openhaystack","owner":"seemoo-lab","name":"openhaystack","description":"Build your own 'AirTags' 🏷 today! Framework for tracking personal Bluetooth devices via Apple's massive Find My network.","html_url":"https://github.com/seemoo-lab/openhaystack","stars":12815,"language":"Swift","topics":"reverse-engineering,network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Build your own 'AirTags' 🏷 today! Framework for tracking personal Bluetooth devices via Apple's massive Find My network."} +{"full_name":"seemoo-lab/openwifipass","owner":"seemoo-lab","name":"openwifipass","description":"An open source implementation of Apple's Wi-Fi Password Sharing protocol in Python.","html_url":"https://github.com/seemoo-lab/openwifipass","stars":832,"language":"Python","topics":"reverse-engineering,network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An open source implementation of Apple's Wi-Fi Password Sharing protocol in Python."} +{"full_name":"sensepost/ruler","owner":"sensepost","name":"ruler","description":"A tool to abuse Exchange services","html_url":"https://github.com/sensepost/ruler","stars":2301,"language":"Go","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A tool to abuse Exchange services"} +{"full_name":"sh4hin/Androl4b","owner":"sh4hin","name":"Androl4b","description":"A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis","html_url":"https://github.com/sh4hin/Androl4b","stars":1157,"topics":"reverse-engineering,malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis"} +{"full_name":"shadow1ng/fscan","owner":"shadow1ng","name":"fscan","description":"一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)","html_url":"https://github.com/shadow1ng/fscan","stars":13522,"language":"Go","topics":"scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)"} +{"full_name":"sham00n/buster","owner":"sham00n","name":"buster","description":"An advanced tool for email reconnaissance","html_url":"https://github.com/sham00n/buster","stars":1286,"language":"Python","topics":"pentesting,osint,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An advanced tool for email reconnaissance"} +{"full_name":"shanzson/Smart-Contract-Auditor-Tools-and-Techniques","owner":"shanzson","name":"Smart-Contract-Auditor-Tools-and-Techniques","description":"This repo contains a comprehensive list of smart contract auditor tools and techniques that can be utilized by both smart contract auditors and blockchain developers for developing secure smart contracts","html_url":"https://github.com/shanzson/Smart-Contract-Auditor-Tools-and-Techniques","stars":791,"topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"This repo contains a comprehensive list of smart contract auditor tools and techniques that can be utilized by both smart contract auditors and blockchain developers for developing secure smart contracts"} +{"full_name":"sharsil/mailcat","owner":"sharsil","name":"mailcat","description":"Find existing email addresses by nickname using API/SMTP checking methods without user notification. Please, don't hesitate to improve cat's job! 🐱🔎 📬","html_url":"https://github.com/sharsil/mailcat","stars":837,"language":"Python","topics":"malware,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Find existing email addresses by nickname using API/SMTP checking methods without user notification. Please, don't hesitate to improve cat's job! 🐱🔎 📬"} +{"full_name":"shivaya-dav/DogeRat","owner":"shivaya-dav","name":"DogeRat","description":"A multifunctional Telegram based Android RAT without port forwarding.","html_url":"https://github.com/shivaya-dav/DogeRat","stars":1866,"topics":"malware,pentesting,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A multifunctional Telegram based Android RAT without port forwarding."} +{"full_name":"shmilylty/OneForAll","owner":"shmilylty","name":"OneForAll","description":"OneForAll是一款功能强大的子域收集工具","html_url":"https://github.com/shmilylty/OneForAll","stars":9682,"language":"Python","topics":"pentesting,osint,scanner,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"OneForAll是一款功能强大的子域收集工具"} +{"full_name":"shuvonsec/claude-bug-bounty","owner":"shuvonsec","name":"claude-bug-bounty","description":"Claude Code skill for AI-assisted bug bounty hunting - recon, IDOR, XSS, SSRF, OAuth, GraphQL, LLM injection, and report generation","html_url":"https://github.com/shuvonsec/claude-bug-bounty","stars":928,"language":"Python","topics":"malware,web-security,pentesting,osint,scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Claude Code skill for AI-assisted bug bounty hunting - recon, IDOR, XSS, SSRF, OAuth, GraphQL, LLM injection, and report generation"} +{"full_name":"sighook/pixload","owner":"sighook","name":"pixload","description":"Image Payload Creating/Injecting tools","html_url":"https://github.com/sighook/pixload","stars":1291,"language":"Perl","topics":"malware,web-security","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Image Payload Creating/Injecting tools"} +{"full_name":"silverhack/monkey365","owner":"silverhack","name":"monkey365","description":"Monkey365 provides a tool for security consultants to easily conduct not only Microsoft 365, but also Azure subscriptions and Microsoft Entra ID security configuration reviews.","html_url":"https://github.com/silverhack/monkey365","stars":1249,"language":"PowerShell","topics":"cloud-security,malware,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Monkey365 provides a tool for security consultants to easily conduct not only Microsoft 365, but also Azure subscriptions and Microsoft Entra ID security configuration reviews."} +{"full_name":"sinfulz/JustTryHarder","owner":"sinfulz","name":"JustTryHarder","description":"JustTryHarder, a cheat sheet which will aid you through the PWK course \u0026 the OSCP Exam. (Inspired by PayloadAllTheThings)","html_url":"https://github.com/sinfulz/JustTryHarder","stars":828,"language":"Python","topics":"network,pentesting,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"JustTryHarder, a cheat sheet which will aid you through the PWK course \u0026 the OSCP Exam. (Inspired by PayloadAllTheThings)"} +{"full_name":"six2dez/OSCP-Human-Guide","owner":"six2dez","name":"OSCP-Human-Guide","description":"My own OSCP guide","html_url":"https://github.com/six2dez/OSCP-Human-Guide","stars":849,"topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"My own OSCP guide"} +{"full_name":"six2dez/OneListForAll","owner":"six2dez","name":"OneListForAll","description":"Rockyou for web fuzzing","html_url":"https://github.com/six2dez/OneListForAll","stars":3094,"language":"Go","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Rockyou for web fuzzing"} +{"full_name":"six2dez/burp-ai-agent","owner":"six2dez","name":"burp-ai-agent","description":"Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more","html_url":"https://github.com/six2dez/burp-ai-agent","stars":820,"language":"Kotlin","topics":"web-security,pentesting,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more"} +{"full_name":"six2dez/pentest-book","owner":"six2dez","name":"pentest-book","description":"The Pentest Book is a comprehensive resource for penetration testers, offering a collection of information, scripts, and methodologies gathered during various pentests. It serves as a practical guide for conducting recon, exploring vulnerabilities in web and cloud services, and utilizing tools like Burp Suite, complemented by cheat sheets and checklists. Key features include easy navigation, a searchable interface, and continuous updates to ensure relevance and accuracy in the fast-evolving cybersecurity landscape.","html_url":"https://github.com/six2dez/pentest-book","stars":1995,"topics":"pentesting","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"The Pentest Book is a comprehensive resource for penetration testers, offering a collection of information, scripts, and methodologies gathered during various pentests. It serves as a practical guide for conducting recon, exploring vulnerabilities in web and cloud services, and utilizing tools like Burp Suite, complemented by cheat sheets and checklists. Key features include easy navigation, a searchable interface, and continuous updates to ensure relevance and accuracy in the fast-evolving cybersecurity landscape."} +{"full_name":"sjh37/EntityFramework-Reverse-POCO-Code-First-Generator","owner":"sjh37","name":"EntityFramework-Reverse-POCO-Code-First-Generator","description":"The EntityFramework Reverse POCO Code First Generator is a tool designed to reverse engineer existing databases and generate fully customizable Entity Framework Code First POCO classes along with configuration mappings and DbContext setups. Its primary use case is to facilitate the rapid creation of data access code that mimics hand-crafted designs, enhancing readability and maintainability. Notable features include support for multiple database types (including SQL Server and PostgreSQL), customizable output through template files, and integration with Visual Studio via a VSIX installer.","html_url":"https://github.com/sjh37/EntityFramework-Reverse-POCO-Code-First-Generator","stars":711,"language":"C#","topics":"malware,reverse-engineering","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"The EntityFramework Reverse POCO Code First Generator is a tool designed to reverse engineer existing databases and generate fully customizable Entity Framework Code First POCO classes along with configuration mappings and DbContext setups. Its primary use case is to facilitate the rapid creation of data access code that mimics hand-crafted designs, enhancing readability and maintainability. Notable features include support for multiple database types (including SQL Server and PostgreSQL), customizable output through template files, and integration with Visual Studio via a VSIX installer."} +{"full_name":"skavngr/rapidscan","owner":"skavngr","name":"rapidscan","description":":new: The Multi-Tool Web Vulnerability Scanner.","html_url":"https://github.com/skavngr/rapidscan","stars":2046,"language":"Python","topics":"pentesting,osint,scanner,exploit,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":":new: The Multi-Tool Web Vulnerability Scanner."} +{"full_name":"skerkour/black-hat-rust","owner":"skerkour","name":"black-hat-rust","description":"Applied offensive security with Rust - https://kerkour.com/black-hat-rust","html_url":"https://github.com/skerkour/black-hat-rust","stars":4295,"language":"Rust","topics":"red-team,malware,pentesting,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Applied offensive security with Rust - https://kerkour.com/black-hat-rust"} +{"full_name":"skidfuscatordev/skidfuscator-java-obfuscator","owner":"skidfuscatordev","name":"skidfuscator-java-obfuscator","description":"Skidfuscator is a production-grade Java obfuscation tool that employs SSA form to enhance and obscure Java bytecode flow while maintaining execution efficiency. Its primary use case is to protect applications from reverse engineering by providing advanced obfuscation techniques, automatic dependency downloading, and an easy-to-configure command-line interface. Notable features include smart recovery, flow obfuscation, and out-of-the-box optimization.","html_url":"https://github.com/skidfuscatordev/skidfuscator-java-obfuscator","stars":748,"language":"Java","topics":"reverse-engineering","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"Skidfuscator is a production-grade Java obfuscation tool that employs SSA form to enhance and obscure Java bytecode flow while maintaining execution efficiency. Its primary use case is to protect applications from reverse engineering by providing advanced obfuscation techniques, automatic dependency downloading, and an easy-to-configure command-line interface. Notable features include smart recovery, flow obfuscation, and out-of-the-box optimization."} +{"full_name":"sleventyeleven/linuxprivchecker","owner":"sleventyeleven","name":"linuxprivchecker","description":"linuxprivchecker.py -- a Linux Privilege Escalation Check Script","html_url":"https://github.com/sleventyeleven/linuxprivchecker","stars":1786,"language":"Python","topics":"pentesting,privilege-escalation","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"linuxprivchecker.py -- a Linux Privilege Escalation Check Script"} +{"full_name":"smallkirby/kernelpwn","owner":"smallkirby","name":"kernelpwn","description":"The kernelpwn repository serves as a comprehensive resource for Capture The Flag (CTF) challenges focused on kernel exploitation, providing both challenge write-ups and educational material for beginners in the field. It features a collection of solved kernel-pwn challenges with detailed write-ups, covering various complex exploitation techniques such as SMEP, SMAP, KPTI, and KASLR bypasses. Notable features include a focus on both kernel and non-userland vulnerabilities, as well as an invitation for community contributions to enhance the repository’s challenge offerings.","html_url":"https://github.com/smallkirby/kernelpwn","stars":708,"language":"C","topics":"exploit","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"The kernelpwn repository serves as a comprehensive resource for Capture The Flag (CTF) challenges focused on kernel exploitation, providing both challenge write-ups and educational material for beginners in the field. It features a collection of solved kernel-pwn challenges with detailed write-ups, covering various complex exploitation techniques such as SMEP, SMAP, KPTI, and KASLR bypasses. Notable features include a focus on both kernel and non-userland vulnerabilities, as well as an invitation for community contributions to enhance the repository’s challenge offerings."} +{"full_name":"smallstep/certificates","owner":"smallstep","name":"certificates","description":"🛡️ A private certificate authority (X.509 \u0026 SSH) \u0026 ACME server for secure automated certificate management, so you can use TLS everywhere \u0026 SSO for SSH.","html_url":"https://github.com/smallstep/certificates","stars":8351,"language":"Go","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"🛡️ A private certificate authority (X.509 \u0026 SSH) \u0026 ACME server for secure automated certificate management, so you can use TLS everywhere \u0026 SSO for SSH."} +{"full_name":"smallstep/cli","owner":"smallstep","name":"cli","description":"🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.","html_url":"https://github.com/smallstep/cli","stars":4161,"language":"Go","topics":"cryptography","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc."} +{"full_name":"snooppr/snoop","owner":"snooppr","name":"snoop","description":"Snoop — инструмент разведки на основе открытых данных (OSINT world)","html_url":"https://github.com/snooppr/snoop","stars":3748,"language":"Python","topics":"red-team,pentesting,osint,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Snoop — инструмент разведки на основе открытых данных (OSINT world)"} +{"full_name":"soupslurpr/AppVerifier","owner":"soupslurpr","name":"AppVerifier","description":"Verify apps easily.","html_url":"https://github.com/soupslurpr/AppVerifier","stars":960,"language":"Kotlin","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Verify apps easily."} +{"full_name":"soxoj/maigret","owner":"soxoj","name":"maigret","description":"🕵️‍♂️ Collect a dossier on a person by username from thousands of sites","html_url":"https://github.com/soxoj/maigret","stars":19247,"language":"Python","topics":"pentesting,osint,red-team,network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"🕵️‍♂️ Collect a dossier on a person by username from thousands of sites"} +{"full_name":"soxoj/socid-extractor","owner":"soxoj","name":"socid-extractor","description":"⛏️ Extract accounts info from personal pages on various sites for OSINT purpose","html_url":"https://github.com/soxoj/socid-extractor","stars":920,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"⛏️ Extract accounts info from personal pages on various sites for OSINT purpose"} +{"full_name":"spawnmason/randar-explanation","owner":"spawnmason","name":"randar-explanation","description":"\"Randar\" is an exploit for Minecraft which uses LLL lattice reduction to crack the internal state of an incorrectly reused java.util.Random in the Minecraft server, then works backwards from that to locate other players currently loaded into the world.","html_url":"https://github.com/spawnmason/randar-explanation","stars":956,"language":"Shell","topics":"scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"\"Randar\" is an exploit for Minecraft which uses LLL lattice reduction to crack the internal state of an incorrectly reused java.util.Random in the Minecraft server, then works backwards from that to locate other players currently loaded into the world."} +{"full_name":"spidersuite/SpiderSuite","owner":"spidersuite","name":"SpiderSuite","description":"SpiderSuite releases, wiki and roadmap","html_url":"https://github.com/spidersuite/SpiderSuite","stars":939,"topics":"osint,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"SpiderSuite releases, wiki and roadmap"} +{"full_name":"splx-ai/agentic-radar","owner":"splx-ai","name":"agentic-radar","description":"A security scanner for your LLM agentic workflows","html_url":"https://github.com/splx-ai/agentic-radar","stars":929,"language":"Python","topics":"scanner,red-team,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A security scanner for your LLM agentic workflows"} +{"full_name":"sqlmapproject/sqlmap","owner":"sqlmapproject","name":"sqlmap","description":"Automatic SQL injection and database takeover tool","html_url":"https://github.com/sqlmapproject/sqlmap","stars":36889,"language":"Python","topics":"exploit,web-security,pentesting,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Automatic SQL injection and database takeover tool"} +{"full_name":"ssh-mitm/ssh-mitm","owner":"ssh-mitm","name":"ssh-mitm","description":"SSH-MITM - ssh audits made simple","html_url":"https://github.com/ssh-mitm/ssh-mitm","stars":1438,"language":"Python","topics":"network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"SSH-MITM - ssh audits made simple"} +{"full_name":"stampery/mongoaudit","owner":"stampery","name":"mongoaudit","description":"🔥 A powerful MongoDB auditing and pentesting tool 🔥","html_url":"https://github.com/stampery/mongoaudit","stars":1331,"language":"Python","topics":"cryptography,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"🔥 A powerful MongoDB auditing and pentesting tool 🔥"} +{"full_name":"stealthcopter/deepce","owner":"stealthcopter","name":"deepce","description":"Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)","html_url":"https://github.com/stealthcopter/deepce","stars":1491,"language":"Shell","topics":"privilege-escalation,exploit,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)"} +{"full_name":"steven-michaud/HookCase","owner":"steven-michaud","name":"HookCase","description":"Tool for reverse engineering macOS/OS X","html_url":"https://github.com/steven-michaud/HookCase","stars":822,"language":"C++","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Tool for reverse engineering macOS/OS X"} +{"full_name":"stivenhacker/GhostStrike","owner":"stivenhacker","name":"GhostStrike","description":"Deploy stealthy reverse shells using advanced process hollowing with GhostStrike – a C++ tool for ethical hacking and Red Team operations.","html_url":"https://github.com/stivenhacker/GhostStrike","stars":810,"language":"C++","topics":"red-team,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Deploy stealthy reverse shells using advanced process hollowing with GhostStrike – a C++ tool for ethical hacking and Red Team operations."} +{"full_name":"strazzere/android-unpacker","owner":"strazzere","name":"android-unpacker","description":"Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0","html_url":"https://github.com/strazzere/android-unpacker","stars":1176,"language":"C","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0"} +{"full_name":"strazzere/anti-emulator","owner":"strazzere","name":"anti-emulator","description":"Android Anti-Emulator","html_url":"https://github.com/strazzere/anti-emulator","stars":825,"language":"Java","topics":"reverse-engineering,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Android Anti-Emulator"} +{"full_name":"suifei/fridare","owner":"suifei","name":"fridare","description":"Fridare is an automation tool for modifying the Frida server on iOS, Android, Linux, and Windows platforms, designed to enhance security and flexibility by allowing users to change server names and ports while bypassing jailbreak detection. The tool features a dual-mode interface, offering both a robust command line and a modern graphical user interface (GUI) based on the Fyne framework, facilitating intuitive server modifications and visual feedback. Notable functionalities include cross-platform support, binary replacement, custom packaging, and dependency management, making it a comprehensive solution for Frida users across different environments.","html_url":"https://github.com/suifei/fridare","stars":751,"language":"Go","topics":"reverse-engineering,pentesting,malware","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"Fridare is an automation tool for modifying the Frida server on iOS, Android, Linux, and Windows platforms, designed to enhance security and flexibility by allowing users to change server names and ports while bypassing jailbreak detection. The tool features a dual-mode interface, offering both a robust command line and a modern graphical user interface (GUI) based on the Fyne framework, facilitating intuitive server modifications and visual feedback. Notable functionalities include cross-platform support, binary replacement, custom packaging, and dependency management, making it a comprehensive solution for Frida users across different environments."} +{"full_name":"summitt/Nope-Proxy","owner":"summitt","name":"Nope-Proxy","description":"TCP/UDP Non-HTTP Proxy Extension (NoPE) for Burp Suite.","html_url":"https://github.com/summitt/Nope-Proxy","stars":1656,"language":"Java","topics":"web-security,network,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"TCP/UDP Non-HTTP Proxy Extension (NoPE) for Burp Suite."} +{"full_name":"sundaysec/Android-Exploits","owner":"sundaysec","name":"Android-Exploits","description":"A collection of android Exploits and Hacks","html_url":"https://github.com/sundaysec/Android-Exploits","stars":972,"language":"HTML","topics":"exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A collection of android Exploits and Hacks"} +{"full_name":"sundowndev/phoneinfoga","owner":"sundowndev","name":"phoneinfoga","description":"Information gathering framework for phone numbers","html_url":"https://github.com/sundowndev/phoneinfoga","stars":16080,"language":"Go","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Information gathering framework for phone numbers"} +{"full_name":"superhedgy/AttackSurfaceMapper","owner":"superhedgy","name":"AttackSurfaceMapper","description":"AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.","html_url":"https://github.com/superhedgy/AttackSurfaceMapper","stars":1402,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"AttackSurfaceMapper is a tool that aims to automate the reconnaissance process."} +{"full_name":"syssec-utd/pylingual","owner":"syssec-utd","name":"pylingual","description":"Python decompiler for modern Python versions.","html_url":"https://github.com/syssec-utd/pylingual","stars":1140,"language":"Python","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Python decompiler for modern Python versions."} +{"full_name":"t3l3machus/Villain","owner":"t3l3machus","name":"Villain","description":"Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP \u0026 HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).","html_url":"https://github.com/t3l3machus/Villain","stars":4353,"language":"Python","topics":"malware,pentesting,red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP \u0026 HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines)."} +{"full_name":"t3l3machus/psudohash","owner":"t3l3machus","name":"psudohash","description":"Generates millions of keyword-based password mutations in seconds.","html_url":"https://github.com/t3l3machus/psudohash","stars":1415,"language":"Python","topics":"malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Generates millions of keyword-based password mutations in seconds."} +{"full_name":"tabby-sec/tabby","owner":"tabby-sec","name":"tabby","description":"A CAT called tabby ( Code Analysis Tool )","html_url":"https://github.com/tabby-sec/tabby","stars":1641,"language":"Java","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A CAT called tabby ( Code Analysis Tool )"} +{"full_name":"taielab/awesome-hacking-lists","owner":"taielab","name":"awesome-hacking-lists","description":"A curated collection of top-tier penetration testing tools and productivity utilities across multiple domains. Join us to explore, contribute, and enhance your hacking toolkit!","html_url":"https://github.com/taielab/awesome-hacking-lists","stars":1300,"topics":"malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A curated collection of top-tier penetration testing tools and productivity utilities across multiple domains. Join us to explore, contribute, and enhance your hacking toolkit!"} +{"full_name":"tanprathan/MobileApp-Pentest-Cheatsheet","owner":"tanprathan","name":"MobileApp-Pentest-Cheatsheet","description":"The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.","html_url":"https://github.com/tanprathan/MobileApp-Pentest-Cheatsheet","stars":5174,"topics":"malware,network,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics."} +{"full_name":"taranis-ai/taranis-ai","owner":"taranis-ai","name":"taranis-ai","description":"Taranis AI is an advanced Open-Source Intelligence (OSINT) tool, leveraging Artificial Intelligence to revolutionize information gathering and situational analysis.","html_url":"https://github.com/taranis-ai/taranis-ai","stars":978,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Taranis AI is an advanced Open-Source Intelligence (OSINT) tool, leveraging Artificial Intelligence to revolutionize information gathering and situational analysis."} +{"full_name":"tarcisio-marinho/GonnaCry","owner":"tarcisio-marinho","name":"GonnaCry","description":"A Linux Ransomware","html_url":"https://github.com/tarcisio-marinho/GonnaCry","stars":768,"language":"Python","topics":"cryptography,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A Linux Ransomware"} +{"full_name":"taviso/ctftool","owner":"taviso","name":"ctftool","description":"Interactive CTF Exploration Tool","html_url":"https://github.com/taviso/ctftool","stars":1665,"language":"C","topics":"malware,reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Interactive CTF Exploration Tool"} +{"full_name":"techiescamp/devops-tools","owner":"techiescamp","name":"devops-tools","description":"Curated List of Best DevOps Tools","html_url":"https://github.com/techiescamp/devops-tools","stars":834,"topics":"malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Curated List of Best DevOps Tools"} +{"full_name":"termuxhackers-id/SIGIT","owner":"termuxhackers-id","name":"SIGIT","description":"SIGIT - Simple Information Gathering Toolkit","html_url":"https://github.com/termuxhackers-id/SIGIT","stars":934,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"SIGIT - Simple Information Gathering Toolkit"} +{"full_name":"th3unkn0n/osi.ig","owner":"th3unkn0n","name":"osi.ig","description":"Information Gathering Instagram.","html_url":"https://github.com/th3unkn0n/osi.ig","stars":1481,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Information Gathering Instagram."} +{"full_name":"thalesgroup-cert/Watcher","owner":"thalesgroup-cert","name":"Watcher","description":"Watcher - Open Source AI-powered Cyber Threat Intelligence \u0026 Hunting Platform. Developed with Django \u0026 React JS.","html_url":"https://github.com/thalesgroup-cert/Watcher","stars":1255,"language":"JavaScript","topics":"forensics,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Watcher - Open Source AI-powered Cyber Threat Intelligence \u0026 Hunting Platform. Developed with Django \u0026 React JS."} +{"full_name":"the-xentropy/xencrypt","owner":"the-xentropy","name":"xencrypt","description":"A PowerShell script anti-virus evasion tool","html_url":"https://github.com/the-xentropy/xencrypt","stars":1174,"language":"PowerShell","topics":"cryptography,red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A PowerShell script anti-virus evasion tool"} +{"full_name":"thehackingsage/hackdroid","owner":"thehackingsage","name":"hackdroid","description":"Security Apps for Android","html_url":"https://github.com/thehackingsage/hackdroid","stars":1047,"topics":"malware,network,cryptography,forensics,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Security Apps for Android"} +{"full_name":"thehappydinoa/awesome-censys-queries","owner":"thehappydinoa","name":"awesome-censys-queries","description":"A collection of fascinating and bizarre Censys Search Queries","html_url":"https://github.com/thehappydinoa/awesome-censys-queries","stars":1210,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A collection of fascinating and bizarre Censys Search Queries"} +{"full_name":"thewhiteh4t/FinalRecon","owner":"thewhiteh4t","name":"FinalRecon","description":"All In One Web Recon","html_url":"https://github.com/thewhiteh4t/FinalRecon","stars":2676,"language":"Python","topics":"malware,pentesting,osint,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"All In One Web Recon"} +{"full_name":"thewhiteh4t/pwnedOrNot","owner":"thewhiteh4t","name":"pwnedOrNot","description":"OSINT Tool for Finding Passwords of Compromised Email Addresses","html_url":"https://github.com/thewhiteh4t/pwnedOrNot","stars":2517,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"OSINT Tool for Finding Passwords of Compromised Email Addresses"} +{"full_name":"thezdi/PoC","owner":"thezdi","name":"PoC","description":"Proofs-of-concept","html_url":"https://github.com/thezdi/PoC","stars":828,"language":"C++","topics":"exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Proofs-of-concept"} +{"full_name":"tiagorlampert/CHAOS","owner":"tiagorlampert","name":"CHAOS","description":":fire: CHAOS is a free and open-source Remote Administration Tool that allow generate binaries to control remote operating systems.","html_url":"https://github.com/tiagorlampert/CHAOS","stars":2781,"language":"Go","topics":"malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":":fire: CHAOS is a free and open-source Remote Administration Tool that allow generate binaries to control remote operating systems."} +{"full_name":"tillson/git-hound","owner":"tillson","name":"git-hound","description":"Fast GitHub recon tool. Scans for leaked secrets across all of GitHub, not just known repos and orgs. Support for GitHub dorks.","html_url":"https://github.com/tillson/git-hound","stars":1411,"language":"Go","topics":"scanner,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Fast GitHub recon tool. Scans for leaked secrets across all of GitHub, not just known repos and orgs. Support for GitHub dorks."} +{"full_name":"tiltedphoques/TiltedEvolution","owner":"tiltedphoques","name":"TiltedEvolution","description":"Skyrim mod to play online!","html_url":"https://github.com/tiltedphoques/TiltedEvolution","stars":1152,"language":"C++","topics":"reverse-engineering,network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Skyrim mod to play online!"} +{"full_name":"timschneeb/GalaxyBudsClient","owner":"timschneeb","name":"GalaxyBudsClient","description":"Unofficial Galaxy Buds Manager for Windows, macOS, Linux, and Android","html_url":"https://github.com/timschneeb/GalaxyBudsClient","stars":4812,"language":"C#","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Unofficial Galaxy Buds Manager for Windows, macOS, Linux, and Android"} +{"full_name":"tklengyel/drakvuf","owner":"tklengyel","name":"drakvuf","description":"DRAKVUF Black-box Binary Analysis","html_url":"https://github.com/tklengyel/drakvuf","stars":1213,"language":"C++","topics":"malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"DRAKVUF Black-box Binary Analysis"} +{"full_name":"tokyoneon/Chimera","owner":"tokyoneon","name":"Chimera","description":"Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.","html_url":"https://github.com/tokyoneon/Chimera","stars":1575,"language":"PowerShell","topics":"pentesting,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions."} +{"full_name":"tom0li/collection-document","owner":"tom0li","name":"collection-document","description":"Collection of quality safety articles. Awesome articles.","html_url":"https://github.com/tom0li/collection-document","stars":2101,"topics":"web-security,pentesting,red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Collection of quality safety articles. Awesome articles."} +{"full_name":"tomchop/malcom","owner":"tomchop","name":"malcom","description":"Malcom - Malware Communications Analyzer","html_url":"https://github.com/tomchop/malcom","stars":1165,"language":"Python","topics":"forensics,osint,malware,network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Malcom - Malware Communications Analyzer"} +{"full_name":"toniblyx/my-arsenal-of-aws-security-tools","owner":"toniblyx","name":"my-arsenal-of-aws-security-tools","description":"List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.","html_url":"https://github.com/toniblyx/my-arsenal-of-aws-security-tools","stars":9415,"language":"Shell","topics":"cloud-security,forensics","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc."} +{"full_name":"topscoder/nuclei-wordfence-cve","owner":"topscoder","name":"nuclei-wordfence-cve","description":"70k+ WordPress Nuclei templates, updated daily from Wordfence intel—filter by severity/tags/CVE and scan in one line. 🚀🔒","html_url":"https://github.com/topscoder/nuclei-wordfence-cve","stars":1217,"language":"Python","topics":"pentesting,scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"70k+ WordPress Nuclei templates, updated daily from Wordfence intel—filter by severity/tags/CVE and scan in one line. 🚀🔒"} +{"full_name":"tr0uble-mAker/POC-bomber","owner":"tr0uble-mAker","name":"POC-bomber","description":"利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点","html_url":"https://github.com/tr0uble-mAker/POC-bomber","stars":2357,"language":"Python","topics":"exploit,red-team,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点"} +{"full_name":"tracelabs/tlosint-live","owner":"tracelabs","name":"tlosint-live","description":"Trace Labs OSINT Linux Distribution based on Kali.","html_url":"https://github.com/tracelabs/tlosint-live","stars":794,"language":"HTML","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Trace Labs OSINT Linux Distribution based on Kali."} +{"full_name":"trickest/cve","owner":"trickest","name":"cve","description":"Gather and update all available and newest CVEs with their PoC.","html_url":"https://github.com/trickest/cve","stars":7627,"language":"HTML","topics":"pentesting,exploit,red-team,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Gather and update all available and newest CVEs with their PoC."} +{"full_name":"trickest/inventory","owner":"trickest","name":"inventory","description":"Asset inventory of over 800 public bug bounty programs.","html_url":"https://github.com/trickest/inventory","stars":1526,"language":"Shell","topics":"red-team,malware,pentesting,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Asset inventory of over 800 public bug bounty programs."} +{"full_name":"trickest/resolvers","owner":"trickest","name":"resolvers","description":"The most exhaustive list of reliable DNS resolvers.","html_url":"https://github.com/trickest/resolvers","stars":971,"topics":"red-team,network,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"The most exhaustive list of reliable DNS resolvers."} +{"full_name":"trickest/wordlists","owner":"trickest","name":"wordlists","description":"Real-world infosec wordlists, updated regularly","html_url":"https://github.com/trickest/wordlists","stars":1725,"topics":"pentesting,osint,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Real-world infosec wordlists, updated regularly"} +{"full_name":"trimstray/htrace.sh","owner":"trimstray","name":"htrace.sh","description":"My simple Swiss Army knife for http/https troubleshooting and profiling.","html_url":"https://github.com/trimstray/htrace.sh","stars":3851,"language":"Shell","topics":"scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"My simple Swiss Army knife for http/https troubleshooting and profiling."} +{"full_name":"trimstray/sandmap","owner":"trimstray","name":"sandmap","description":"Nmap on steroids. Simple CLI with the ability to run pure Nmap engine, 31 modules with 459 scan profiles.","html_url":"https://github.com/trimstray/sandmap","stars":1820,"language":"Shell","topics":"scanner,network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Nmap on steroids. Simple CLI with the ability to run pure Nmap engine, 31 modules with 459 scan profiles."} +{"full_name":"ttlns/Selenium-Driverless","owner":"ttlns","name":"Selenium-Driverless","description":"a stealthy browser automation framework","html_url":"https://github.com/ttlns/Selenium-Driverless","stars":848,"language":"Python","topics":"exploit,reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"a stealthy browser automation framework"} +{"full_name":"tuhin1729/Bug-Bounty-Methodology","owner":"tuhin1729","name":"Bug-Bounty-Methodology","description":"These are my checklists which I use during my hunting.","html_url":"https://github.com/tuhin1729/Bug-Bounty-Methodology","stars":856,"language":"HTML","topics":"pentesting,exploit,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"These are my checklists which I use during my hunting."} +{"full_name":"twelvesec/gasmask","owner":"twelvesec","name":"gasmask","description":"Information gathering tool - OSINT","html_url":"https://github.com/twelvesec/gasmask","stars":1393,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Information gathering tool - OSINT"} +{"full_name":"ultrasecurity/Storm-Breaker","owner":"ultrasecurity","name":"Storm-Breaker","description":"Social engineering tool [Access Webcam \u0026 Microphone \u0026 Location Finder] With {Py,JS,PHP}","html_url":"https://github.com/ultrasecurity/Storm-Breaker","stars":4870,"language":"HTML","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Social engineering tool [Access Webcam \u0026 Microphone \u0026 Location Finder] With {Py,JS,PHP}"} +{"full_name":"ultrasecurity/webkiller","owner":"ultrasecurity","name":"webkiller","description":"WebKiller V2 is a Python-based tool designed for information gathering and CMS detection in web applications. Its primary use case is to aid cybersecurity professionals in identifying vulnerabilities and obtaining crucial data about target websites. Notable features include a user-friendly command-line interface, compatibility with multiple operating systems, and comprehensive installation instructions.","html_url":"https://github.com/ultrasecurity/webkiller","stars":743,"language":"Python","topics":"pentesting,malware","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"WebKiller V2 is a Python-based tool designed for information gathering and CMS detection in web applications. Its primary use case is to aid cybersecurity professionals in identifying vulnerabilities and obtaining crucial data about target websites. Notable features include a user-friendly command-line interface, compatibility with multiple operating systems, and comprehensive installation instructions."} +{"full_name":"undergroundwires/privacy.sexy","owner":"undergroundwires","name":"privacy.sexy","description":"Open-source tool to enforce privacy \u0026 security best-practices on Windows, macOS and Linux, because privacy is sexy","html_url":"https://github.com/undergroundwires/privacy.sexy","stars":5472,"language":"TypeScript","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Open-source tool to enforce privacy \u0026 security best-practices on Windows, macOS and Linux, because privacy is sexy"} +{"full_name":"unicodeveloper/globalthreatmap","owner":"unicodeveloper","name":"globalthreatmap","description":"Global threat map. Learn wars, conflicts, military bases and history of nations.","html_url":"https://github.com/unicodeveloper/globalthreatmap","stars":1366,"language":"TypeScript","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Global threat map. Learn wars, conflicts, military bases and history of nations."} +{"full_name":"unipacker/unipacker","owner":"unipacker","name":"unipacker","description":"Un{i}packer is a platform-independent tool designed for the automatic unpacking of Windows Portable Executable (PE) files that have been packed using various runtime packers, thereby facilitating malware analysis. Utilizing the Unicorn Engine for emulation, it effectively handles multiple well-known packers, including ASPack and UPX, and allows for manual input of addresses for less common packers. This tool is particularly beneficial for analysts seeking to bypass challenges posed by malware obfuscation and streamline the unpacking process without requiring a Windows environment.","html_url":"https://github.com/unipacker/unipacker","stars":745,"language":"Python","topics":"reverse-engineering","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"Un{i}packer is a platform-independent tool designed for the automatic unpacking of Windows Portable Executable (PE) files that have been packed using various runtime packers, thereby facilitating malware analysis. Utilizing the Unicorn Engine for emulation, it effectively handles multiple well-known packers, including ASPack and UPX, and allows for manual input of addresses for less common packers. This tool is particularly beneficial for analysts seeking to bypass challenges posed by malware obfuscation and streamline the unpacking process without requiring a Windows environment."} +{"full_name":"unnohwn/telegram-scraper","owner":"unnohwn","name":"telegram-scraper","description":"The Telegram Channel Scraper is a Python-based tool that enables users to scrape messages and media from Telegram channels using the Telethon library. Key features include real-time scraping, enhanced metadata capture such as message statistics and reactions, smart filtering for channel management, and data export capabilities in CSV and JSON formats. With automatic database migration and a user-friendly interactive menu, it supports efficient channel monitoring and data retrieval.","html_url":"https://github.com/unnohwn/telegram-scraper","stars":769,"language":"Python","topics":"osint","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"The Telegram Channel Scraper is a Python-based tool that enables users to scrape messages and media from Telegram channels using the Telethon library. Key features include real-time scraping, enhanced metadata capture such as message statistics and reactions, smart filtering for channel management, and data export capabilities in CSV and JSON formats. With automatic database migration and a user-friendly interactive menu, it supports efficient channel monitoring and data retrieval."} +{"full_name":"urbanadventurer/Android-PIN-Bruteforce","owner":"urbanadventurer","name":"Android-PIN-Bruteforce","description":"Unlock an Android phone (or device) by bruteforcing the lockscreen PIN. Turn your Kali Nethunter phone into a bruteforce PIN cracker for Android devices! (no root, no adb)","html_url":"https://github.com/urbanadventurer/Android-PIN-Bruteforce","stars":4584,"language":"Shell","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Unlock an Android phone (or device) by bruteforcing the lockscreen PIN. Turn your Kali Nethunter phone into a bruteforce PIN cracker for Android devices! (no root, no adb)"} +{"full_name":"urbanadventurer/username-anarchy","owner":"urbanadventurer","name":"username-anarchy","description":"Username tools for penetration testing","html_url":"https://github.com/urbanadventurer/username-anarchy","stars":1342,"language":"Ruby","topics":"red-team,malware,pentesting,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Username tools for penetration testing"} +{"full_name":"user1342/Awesome-Android-Reverse-Engineering","owner":"user1342","name":"Awesome-Android-Reverse-Engineering","description":"A curated list of awesome Android Reverse Engineering training, resources, and tools.","html_url":"https://github.com/user1342/Awesome-Android-Reverse-Engineering","stars":2125,"topics":"reverse-engineering,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A curated list of awesome Android Reverse Engineering training, resources, and tools."} +{"full_name":"utkusen/urlhunter","owner":"utkusen","name":"urlhunter","description":"a recon tool that allows searching on URLs that are exposed via shortener services","html_url":"https://github.com/utkusen/urlhunter","stars":1662,"language":"Go","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"a recon tool that allows searching on URLs that are exposed via shortener services"} +{"full_name":"utkusen/wholeaked","owner":"utkusen","name":"wholeaked","description":"a file-sharing tool that allows you to find the responsible person in case of a leakage","html_url":"https://github.com/utkusen/wholeaked","stars":1099,"language":"Go","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"a file-sharing tool that allows you to find the responsible person in case of a leakage"} +{"full_name":"uxmal/reko","owner":"uxmal","name":"reko","description":"Reko is a binary decompiler.","html_url":"https://github.com/uxmal/reko","stars":2549,"language":"C#","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Reko is a binary decompiler."} +{"full_name":"v1s1t0r1sh3r3/airgeddon","owner":"v1s1t0r1sh3r3","name":"airgeddon","description":"This is a multi-use bash script for Linux systems to audit wireless networks.","html_url":"https://github.com/v1s1t0r1sh3r3/airgeddon","stars":7580,"language":"Shell","topics":"network,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"This is a multi-use bash script for Linux systems to audit wireless networks."} +{"full_name":"v3n0m-Scanner/V3n0M-Scanner","owner":"v3n0m-Scanner","name":"V3n0M-Scanner","description":"Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns","html_url":"https://github.com/v3n0m-Scanner/V3n0M-Scanner","stars":1562,"language":"Python","topics":"web-security,pentesting,scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns"} +{"full_name":"vaguileradiaz/tinfoleak","owner":"vaguileradiaz","name":"tinfoleak","description":"The most complete open-source tool for Twitter intelligence analysis","html_url":"https://github.com/vaguileradiaz/tinfoleak","stars":1968,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"The most complete open-source tool for Twitter intelligence analysis"} +{"full_name":"vaib25vicky/awesome-mobile-security","owner":"vaib25vicky","name":"awesome-mobile-security","description":"An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners. I'm just maintaining it.","html_url":"https://github.com/vaib25vicky/awesome-mobile-security","stars":3448,"topics":"pentesting,red-team,reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners. I'm just maintaining it."} +{"full_name":"vaibhavpandeyvpz/apkstudio","owner":"vaibhavpandeyvpz","name":"apkstudio","description":"Open-source, cross platform Qt6 based IDE for reverse-engineering Android application packages. It features a friendly IDE-like layout including code editor with syntax highlighting support for *.smali code files.","html_url":"https://github.com/vaibhavpandeyvpz/apkstudio","stars":3899,"language":"C++","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Open-source, cross platform Qt6 based IDE for reverse-engineering Android application packages. It features a friendly IDE-like layout including code editor with syntax highlighting support for *.smali code files."} +{"full_name":"vanhauser-thc/thc-hydra","owner":"vanhauser-thc","name":"thc-hydra","description":"hydra","html_url":"https://github.com/vanhauser-thc/thc-hydra","stars":11733,"language":"C","topics":"malware,network,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"hydra"} +{"full_name":"vavkamil/awesome-bugbounty-tools","owner":"vavkamil","name":"awesome-bugbounty-tools","description":"A curated list of various bug bounty tools","html_url":"https://github.com/vavkamil/awesome-bugbounty-tools","stars":5852,"topics":"malware,web-security","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A curated list of various bug bounty tools"} +{"full_name":"vchinnipilli/kubestriker","owner":"vchinnipilli","name":"kubestriker","description":"A Blazing fast Security Auditing tool for Kubernetes","html_url":"https://github.com/vchinnipilli/kubestriker","stars":1005,"language":"Python","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A Blazing fast Security Auditing tool for Kubernetes"} +{"full_name":"vdjagilev/nmap-formatter","owner":"vdjagilev","name":"nmap-formatter","description":"NMAP-Formatter is a versatile tool designed to convert NMAP XML output into various formats such as HTML, CSV, JSON, Excel, and more, facilitating the analysis and reporting of network scan results. Notable features include support for output via stdin, the ability to generate diagrams using Graphviz, and options to skip down hosts, enhancing usability for security professionals and network administrators. This tool can also be utilized as a library in Golang for integration into other applications.","html_url":"https://github.com/vdjagilev/nmap-formatter","stars":726,"language":"Go","topics":"web-security,pentesting,scanner","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"NMAP-Formatter is a versatile tool designed to convert NMAP XML output into various formats such as HTML, CSV, JSON, Excel, and more, facilitating the analysis and reporting of network scan results. Notable features include support for output via stdin, the ability to generate diagrams using Graphviz, and options to skip down hosts, enhancing usability for security professionals and network administrators. This tool can also be utilized as a library in Golang for integration into other applications."} +{"full_name":"vernu/vps-audit","owner":"vernu","name":"vps-audit","description":"lightweight, dependency-free bash script for security, performance auditing and infrastructure monitoring of Linux servers.","html_url":"https://github.com/vernu/vps-audit","stars":1881,"language":"Shell","topics":"malware,red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"lightweight, dependency-free bash script for security, performance auditing and infrastructure monitoring of Linux servers."} +{"full_name":"vincentcox/bypass-firewalls-by-DNS-history","owner":"vincentcox","name":"bypass-firewalls-by-DNS-history","description":"Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.","html_url":"https://github.com/vincentcox/bypass-firewalls-by-DNS-history","stars":1275,"language":"Shell","topics":"network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters."} +{"full_name":"vitalysim/Awesome-Hacking-Resources","owner":"vitalysim","name":"Awesome-Hacking-Resources","description":"A collection of hacking / penetration testing resources to make you better!","html_url":"https://github.com/vitalysim/Awesome-Hacking-Resources","stars":16873,"topics":"exploit,reverse-engineering,malware,network,pentesting,privilege-escalation","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A collection of hacking / penetration testing resources to make you better!"} +{"full_name":"vivisect/vivisect","owner":"vivisect","name":"vivisect","description":"Vivisect is a versatile framework that integrates disassembly, static analysis, symbolic execution, and debugging capabilities, designed for use in cybersecurity tasks. Its primary use case is to facilitate in-depth analysis of binary executables, assisting researchers and security professionals in vulnerability discovery and exploitation analysis. Notable features include Python 3 compatibility, a graphical user interface, and seamless integration with documentation for enhanced usability.","html_url":"https://github.com/vivisect/vivisect","stars":990,"language":"Python","topics":"reverse-engineering","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"Vivisect is a versatile framework that integrates disassembly, static analysis, symbolic execution, and debugging capabilities, designed for use in cybersecurity tasks. Its primary use case is to facilitate in-depth analysis of binary executables, assisting researchers and security professionals in vulnerability discovery and exploitation analysis. Notable features include Python 3 compatibility, a graphical user interface, and seamless integration with documentation for enhanced usability."} +{"full_name":"vladko312/SSTImap","owner":"vladko312","name":"SSTImap","description":"Automatic SSTI detection tool with interactive interface","html_url":"https://github.com/vladko312/SSTImap","stars":1425,"language":"Python","topics":"malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Automatic SSTI detection tool with interactive interface"} +{"full_name":"vulhunt-re/vulhunt","owner":"vulhunt-re","name":"vulhunt","description":"VulHunt is a vulnerability hunting framework aimed at assisting security researchers in identifying vulnerabilities within software binaries and UEFI firmware. Built on Binarly’s BIAS, it supports large-scale vulnerability management and integrates community-developed rulepacks while offering scanning capabilities for various binary formats, including BA2 and Binary Ninja databases. Additionally, it features an MCP server for integration with AI assistants, facilitating real-time vulnerability analysis and reporting.","html_url":"https://github.com/vulhunt-re/vulhunt","stars":755,"language":"C++","topics":"reverse-engineering,exploit","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"VulHunt is a vulnerability hunting framework aimed at assisting security researchers in identifying vulnerabilities within software binaries and UEFI firmware. Built on Binarly’s BIAS, it supports large-scale vulnerability management and integrates community-developed rulepacks while offering scanning capabilities for various binary formats, including BA2 and Binary Ninja databases. Additionally, it features an MCP server for integration with AI assistants, facilitating real-time vulnerability analysis and reporting."} +{"full_name":"vxcontrol/pentagi","owner":"vxcontrol","name":"pentagi","description":"Fully autonomous AI Agents system capable of performing complex penetration testing tasks","html_url":"https://github.com/vxcontrol/pentagi","stars":11469,"language":"Go","topics":"malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Fully autonomous AI Agents system capable of performing complex penetration testing tasks"} +{"full_name":"w-digital-scanner/w13scan","owner":"w-digital-scanner","name":"w13scan","description":"Passive Security Scanner (被动式安全扫描器)","html_url":"https://github.com/w-digital-scanner/w13scan","stars":1950,"language":"Smarty","topics":"exploit,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Passive Security Scanner (被动式安全扫描器)"} +{"full_name":"w5teams/w5","owner":"w5teams","name":"w5","description":"Security Orchestration, Automation and Response (SOAR) Platform. 安全编排与自动化响应平台，无需编写代码的安全自动化，使用 SOAR 可以让团队工作更加高效","html_url":"https://github.com/w5teams/w5","stars":1544,"language":"Python","topics":"malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Security Orchestration, Automation and Response (SOAR) Platform. 安全编排与自动化响应平台，无需编写代码的安全自动化，使用 SOAR 可以让团队工作更加高效"} +{"full_name":"wagiro/BurpBounty","owner":"wagiro","name":"BurpBounty","description":"Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.","html_url":"https://github.com/wagiro/BurpBounty","stars":1789,"language":"Java","topics":"exploit,web-security,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface."} +{"full_name":"wallarm/gotestwaf","owner":"wallarm","name":"gotestwaf","description":"An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses","html_url":"https://github.com/wallarm/gotestwaf","stars":1772,"language":"Go","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses"} +{"full_name":"wazuh/wazuh","owner":"wazuh","name":"wazuh","description":"Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.","html_url":"https://github.com/wazuh/wazuh","stars":15023,"language":"C++","topics":"cloud-security,exploit,malware,forensics","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads."} +{"full_name":"wddadk/Offensive-OSINT-Tools","owner":"wddadk","name":"Offensive-OSINT-Tools","description":"OffSec OSINT Pentest/RedTeam Tools","html_url":"https://github.com/wddadk/Offensive-OSINT-Tools","stars":1141,"topics":"osint,red-team,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"OffSec OSINT Pentest/RedTeam Tools"} +{"full_name":"wecooperate/iMonitor","owner":"wecooperate","name":"iMonitor","description":"iMonitor（冰镜 - 终端行为分析系统）","html_url":"https://github.com/wecooperate/iMonitor","stars":824,"language":"C++","topics":"reverse-engineering,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"iMonitor（冰镜 - 终端行为分析系统）"} +{"full_name":"wgpsec/AboutSecurity","owner":"wgpsec","name":"AboutSecurity","description":"Everything for pentest. | 用于渗透测试的 payload 和 bypass 字典.","html_url":"https://github.com/wgpsec/AboutSecurity","stars":1079,"language":"HTML","topics":"red-team,malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Everything for pentest. | 用于渗透测试的 payload 和 bypass 字典."} +{"full_name":"wgpsec/ENScan_GO","owner":"wgpsec","name":"ENScan_GO","description":"一款基于各大企业信息API的工具，解决在遇到的各种针对国内企业信息收集难题。一键收集控股公司ICP备案、APP、小程序、微信公众号等信息聚合导出。支持MCP接入","html_url":"https://github.com/wgpsec/ENScan_GO","stars":4264,"language":"Go","topics":"red-team,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"一款基于各大企业信息API的工具，解决在遇到的各种针对国内企业信息收集难题。一键收集控股公司ICP备案、APP、小程序、微信公众号等信息聚合导出。支持MCP接入"} +{"full_name":"wgpsec/fofa_viewer","owner":"wgpsec","name":"fofa_viewer","description":"A simple FOFA client written in JavaFX. Made by WgpSec, Maintained by f1ashine.","html_url":"https://github.com/wgpsec/fofa_viewer","stars":1776,"language":"Java","topics":"red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A simple FOFA client written in JavaFX. Made by WgpSec, Maintained by f1ashine."} +{"full_name":"whoisflynn/OSCP-Exam-Report-Template","owner":"whoisflynn","name":"OSCP-Exam-Report-Template","description":"Modified template for the OSCP Exam and Labs. Used during my passing attempt","html_url":"https://github.com/whoisflynn/OSCP-Exam-Report-Template","stars":961,"topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Modified template for the OSCP Exam and Labs. Used during my passing attempt"} +{"full_name":"whwlsfb/BurpCrypto","owner":"whwlsfb","name":"BurpCrypto","description":"BurpCrypto is a collection of burpsuite encryption plug-ins, support AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite). 支持多种加密算法或直接执行JS代码的用于爆破前端加密的BurpSuite插件","html_url":"https://github.com/whwlsfb/BurpCrypto","stars":1622,"language":"Java","topics":"web-security,cryptography","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"BurpCrypto is a collection of burpsuite encryption plug-ins, support AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite). 支持多种加密算法或直接执行JS代码的用于爆破前端加密的BurpSuite插件"} +{"full_name":"whwlsfb/JDumpSpider","owner":"whwlsfb","name":"JDumpSpider","description":"HeapDump敏感信息提取工具","html_url":"https://github.com/whwlsfb/JDumpSpider","stars":1639,"language":"Java","topics":"pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"HeapDump敏感信息提取工具"} +{"full_name":"wiire-a/pixiewps","owner":"wiire-a","name":"pixiewps","description":"An offline Wi-Fi Protected Setup brute-force utility","html_url":"https://github.com/wiire-a/pixiewps","stars":1698,"language":"C","topics":"network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An offline Wi-Fi Protected Setup brute-force utility"} +{"full_name":"willin22/DetectDee","owner":"willin22","name":"DetectDee","description":"DetectDee: Hunt down social media accounts by username, email or phone across social networks.","html_url":"https://github.com/willin22/DetectDee","stars":1709,"language":"Go","topics":"red-team,network,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"DetectDee: Hunt down social media accounts by username, email or phone across social networks."} +{"full_name":"wireghoul/htshells","owner":"wireghoul","name":"htshells","description":"Self contained htaccess shells and attacks","html_url":"https://github.com/wireghoul/htshells","stars":1074,"language":"Shell","topics":"exploit,malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Self contained htaccess shells and attacks"} +{"full_name":"wisk/medusa","owner":"wisk","name":"medusa","description":"An open source interactive disassembler","html_url":"https://github.com/wisk/medusa","stars":1081,"language":"C++","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"An open source interactive disassembler"} +{"full_name":"wotschofsky/domain-digger","owner":"wotschofsky","name":"domain-digger","description":"Full Toolkit for Next-Level Domain Analysis","html_url":"https://github.com/wotschofsky/domain-digger","stars":1033,"language":"TypeScript","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Full Toolkit for Next-Level Domain Analysis"} +{"full_name":"wpscanteam/wpscan","owner":"wpscanteam","name":"wpscan","description":"WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com","html_url":"https://github.com/wpscanteam/wpscan","stars":9516,"language":"Ruby","topics":"scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com"} +{"full_name":"wux1an/wxapkg","owner":"wux1an","name":"wxapkg","description":"微信小程序反编译工具，.wxapkg 文件扫描 + 解密 + 解包工具","html_url":"https://github.com/wux1an/wxapkg","stars":3174,"language":"Go","topics":"reverse-engineering,cryptography","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"微信小程序反编译工具，.wxapkg 文件扫描 + 解密 + 解包工具"} +{"full_name":"wzhudev/reverse-linear-sync-engine","owner":"wzhudev","name":"reverse-linear-sync-engine","description":"A reverse engineering of Linear's sync engine. Endorsed by Linear CTO.","html_url":"https://github.com/wzhudev/reverse-linear-sync-engine","stars":1921,"language":"JavaScript","topics":"reverse-engineering,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A reverse engineering of Linear's sync engine. Endorsed by Linear CTO."} +{"full_name":"x0rz/phishing_catcher","owner":"x0rz","name":"phishing_catcher","description":"Phishing catcher using Certstream","html_url":"https://github.com/x0rz/phishing_catcher","stars":1794,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Phishing catcher using Certstream"} +{"full_name":"x1mdev/ReconPi","owner":"x1mdev","name":"ReconPi","description":"ReconPi is a lightweight reconnaissance tool designed for extensive domain analysis and asset discovery using a Raspberry Pi or a VPS. Its primary functionality includes resolving domain names, subdomain enumeration, vulnerability scanning using Nmap, and integrating tools like Nuclei for template-based security assessments. Notable features include automated reporting, Slack notifications, and easy installation through a straightforward script, making it accessible for cyber reconnaissance tasks.","html_url":"https://github.com/x1mdev/ReconPi","stars":727,"language":"Shell","topics":"osint,scanner","first_seen":"2026-03-30T00:00:00Z","source":"github-topic","ai_summary":"ReconPi is a lightweight reconnaissance tool designed for extensive domain analysis and asset discovery using a Raspberry Pi or a VPS. Its primary functionality includes resolving domain names, subdomain enumeration, vulnerability scanning using Nmap, and integrating tools like Nuclei for template-based security assessments. Notable features include automated reporting, Slack notifications, and easy installation through a straightforward script, making it accessible for cyber reconnaissance tasks."} +{"full_name":"x90skysn3k/brutespray","owner":"x90skysn3k","name":"brutespray","description":"Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 28 protocols.","html_url":"https://github.com/x90skysn3k/brutespray","stars":2385,"language":"Go","topics":"pentesting,scanner,red-team,malware,network","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 28 protocols."} +{"full_name":"xairy/kernel-exploits","owner":"xairy","name":"kernel-exploits","description":"My proof-of-concept exploits for the Linux kernel","html_url":"https://github.com/xairy/kernel-exploits","stars":1569,"language":"C","topics":"exploit,privilege-escalation","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"My proof-of-concept exploits for the Linux kernel"} +{"full_name":"xairy/linux-kernel-exploitation","owner":"xairy","name":"linux-kernel-exploitation","description":"A collection of links related to Linux kernel security and exploitation","html_url":"https://github.com/xairy/linux-kernel-exploitation","stars":6387,"topics":"privilege-escalation,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A collection of links related to Linux kernel security and exploitation"} +{"full_name":"xalgord/Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes","owner":"xalgord","name":"Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes","description":"A comprehensive guide for web application penetration testing and bug bounty hunting, covering methodologies, tools, and resources for identifying and exploiting vulnerabilities.","html_url":"https://github.com/xalgord/Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes","stars":1788,"topics":"exploit,malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A comprehensive guide for web application penetration testing and bug bounty hunting, covering methodologies, tools, and resources for identifying and exploiting vulnerabilities."} +{"full_name":"xiecat/goblin","owner":"xiecat","name":"goblin","description":"一款适用于红蓝对抗中的仿真钓鱼系统","html_url":"https://github.com/xiecat/goblin","stars":1537,"language":"Go","topics":"red-team","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"一款适用于红蓝对抗中的仿真钓鱼系统"} +{"full_name":"xishandong/crawlProject","owner":"xishandong","name":"crawlProject","description":"python爬虫项目合集，从基础到js逆向，包含基础篇、自动化篇、进阶篇以及验证码篇。案例涵盖各大网站(xhs douyin weibo ins boss job，jd...)，你将会学到有关爬虫以及反爬虫、自动化和验证码的各方面知识","html_url":"https://github.com/xishandong/crawlProject","stars":1677,"language":"JavaScript","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"python爬虫项目合集，从基础到js逆向，包含基础篇、自动化篇、进阶篇以及验证码篇。案例涵盖各大网站(xhs douyin weibo ins boss job，jd...)，你将会学到有关爬虫以及反爬虫、自动化和验证码的各方面知识"} +{"full_name":"xm1k3/cent","owner":"xm1k3","name":"cent","description":"Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place","html_url":"https://github.com/xm1k3/cent","stars":1039,"language":"Go","topics":"malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place"} +{"full_name":"xoreos/xoreos","owner":"xoreos","name":"xoreos","description":"A reimplementation of BioWare's Aurora engine (and derivatives). Pre-pre-alpha :P","html_url":"https://github.com/xoreos/xoreos","stars":1142,"language":"C++","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A reimplementation of BioWare's Aurora engine (and derivatives). Pre-pre-alpha :P"} +{"full_name":"xploitstech/Xteam","owner":"xploitstech","name":"Xteam","description":"Xteam All in one Instagram,Android,phishing osint and wifi hacking tool available","html_url":"https://github.com/xploitstech/Xteam","stars":1142,"language":"Python","topics":"network,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Xteam All in one Instagram,Android,phishing osint and wifi hacking tool available"} +{"full_name":"xtekky/gpt4free","owner":"xtekky","name":"gpt4free","description":"The official gpt4free repository | various collection of powerful language models | opus 4.6 gpt 5.3 kimi 2.5 deepseek v3.2 gemini 3","html_url":"https://github.com/xtekky/gpt4free","stars":65838,"language":"Python","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"The official gpt4free repository | various collection of powerful language models | opus 4.6 gpt 5.3 kimi 2.5 deepseek v3.2 gemini 3"} +{"full_name":"yaklang/yakit","owner":"yaklang","name":"yakit","description":"Cyber Security ALL-IN-ONE Platform","html_url":"https://github.com/yaklang/yakit","stars":7121,"language":"TypeScript","topics":"red-team,web-security,pentesting,scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Cyber Security ALL-IN-ONE Platform"} +{"full_name":"yashab-cyber/HackGpt","owner":"yashab-cyber","name":"HackGpt","description":"HackGPT Enterprise is a production-ready, cloud-native AI-powered penetration testing platform designed for enterprise security teams. It combines advanced AI, machine learning, microservices architecture, and comprehensive security frameworks to deliver professional-grade cybersecurity assessments.","html_url":"https://github.com/yashab-cyber/HackGpt","stars":808,"language":"Python","topics":"malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"HackGPT Enterprise is a production-ready, cloud-native AI-powered penetration testing platform designed for enterprise security teams. It combines advanced AI, machine learning, microservices architecture, and comprehensive security frameworks to deliver professional-grade cybersecurity assessments."} +{"full_name":"yassineaboukir/sublert","owner":"yassineaboukir","name":"sublert","description":"Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.","html_url":"https://github.com/yassineaboukir/sublert","stars":1026,"language":"Python","topics":"malware,pentesting,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate."} +{"full_name":"ycdxsb/PocOrExp_in_Github","owner":"ycdxsb","name":"PocOrExp_in_Github","description":"Automatically Collect POC or EXP from GitHub by CVE ID.","html_url":"https://github.com/ycdxsb/PocOrExp_in_Github","stars":1134,"language":"Python","topics":"exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Automatically Collect POC or EXP from GitHub by CVE ID."} +{"full_name":"yogeshojha/rengine","owner":"yogeshojha","name":"rengine","description":"reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.","html_url":"https://github.com/yogeshojha/rengine","stars":8522,"language":"HTML","topics":"scanner,malware,pentesting,osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless."} +{"full_name":"yogsec/Hacking-Tools","owner":"yogsec","name":"Hacking-Tools","description":"A curated list of penetration testing and ethical hacking tools, organized by category. This compilation includes tools from Kali Linux and other notable sources.","html_url":"https://github.com/yogsec/Hacking-Tools","stars":1297,"topics":"exploit,red-team,reverse-engineering,malware,web-security,forensics,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A curated list of penetration testing and ethical hacking tools, organized by category. This compilation includes tools from Kali Linux and other notable sources."} +{"full_name":"ysrc/GourdScanV2","owner":"ysrc","name":"GourdScanV2","description":"被动式漏洞扫描系统","html_url":"https://github.com/ysrc/GourdScanV2","stars":873,"language":"Python","topics":"scanner,exploit,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"被动式漏洞扫描系统"} +{"full_name":"ysrc/xunfeng","owner":"ysrc","name":"xunfeng","description":"巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。","html_url":"https://github.com/ysrc/xunfeng","stars":3595,"language":"Python","topics":"pentesting,scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。"} +{"full_name":"ytisf/theZoo","owner":"ytisf","name":"theZoo","description":"A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.","html_url":"https://github.com/ytisf/theZoo","stars":12838,"language":"Python","topics":"malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public."} +{"full_name":"z0m31en7/Uscrapper","owner":"z0m31en7","name":"Uscrapper","description":"Uscrapper Vanta: Dive deeper into the web with this powerful open-source tool. Extract valuable insights with ease and efficiency, from both surface and deep web sources. Empower your data mining and analysis with Vanta's advanced capabilities. Fast, reliable, and user-friendly, Uscrapper Vanta is the ultimate choice for researchers and analysts.","html_url":"https://github.com/z0m31en7/Uscrapper","stars":773,"language":"Python","topics":"osint","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Uscrapper Vanta: Dive deeper into the web with this powerful open-source tool. Extract valuable insights with ease and efficiency, from both surface and deep web sources. Empower your data mining and analysis with Vanta's advanced capabilities. Fast, reliable, and user-friendly, Uscrapper Vanta is the ultimate choice for researchers and analysts."} +{"full_name":"zakirkun/guardian-cli","owner":"zakirkun","name":"guardian-cli","description":"Guardian is a production-ready AI-powered penetration testing automation CLI tool that leverages Google Gemini and LangChain to orchestrate intelligent, step-by-step penetration testing workflows while maintaining ethical hacking standards.","html_url":"https://github.com/zakirkun/guardian-cli","stars":1309,"language":"Python","topics":"pentesting,malware","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Guardian is a production-ready AI-powered penetration testing automation CLI tool that leverages Google Gemini and LangChain to orchestrate intelligent, step-by-step penetration testing workflows while maintaining ethical hacking standards."} +{"full_name":"zan8in/afrog","owner":"zan8in","name":"afrog","description":"A Security Tool for Bug Bounty, Pentest and Red Teaming.","html_url":"https://github.com/zan8in/afrog","stars":4208,"language":"Go","topics":"exploit,red-team,malware,pentesting,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A Security Tool for Bug Bounty, Pentest and Red Teaming."} +{"full_name":"zeldaret/botw","owner":"zeldaret","name":"botw","description":"Decompilation of The Legend of Zelda: Breath of the Wild (Switch 1.5.0)","html_url":"https://github.com/zeldaret/botw","stars":1877,"language":"C++","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Decompilation of The Legend of Zelda: Breath of the Wild (Switch 1.5.0)"} +{"full_name":"zhzyker/dismap","owner":"zhzyker","name":"dismap","description":"Asset discovery and identification tools 快速识别 Web 指纹信息，定位资产类型。辅助红队快速定位目标资产信息，辅助蓝队发现疑似脆弱点","html_url":"https://github.com/zhzyker/dismap","stars":2139,"language":"Go","topics":"red-team,pentesting,scanner","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Asset discovery and identification tools 快速识别 Web 指纹信息，定位资产类型。辅助红队快速定位目标资产信息，辅助蓝队发现疑似脆弱点"} +{"full_name":"zhzyker/exphub","owner":"zhzyker","name":"exphub","description":"Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340","html_url":"https://github.com/zhzyker/exphub","stars":4274,"language":"Python","topics":"exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340"} +{"full_name":"zhzyker/vulmap","owner":"zhzyker","name":"vulmap","description":"Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能","html_url":"https://github.com/zhzyker/vulmap","stars":3505,"language":"Python","topics":"pentesting,scanner,exploit","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能"} +{"full_name":"zinja-coder/jadx-ai-mcp","owner":"zinja-coder","name":"jadx-ai-mcp","description":"Plugin for JADX to integrate MCP server","html_url":"https://github.com/zinja-coder/jadx-ai-mcp","stars":1521,"language":"Java","topics":"reverse-engineering,malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Plugin for JADX to integrate MCP server"} +{"full_name":"zizmorcore/zizmor","owner":"zizmorcore","name":"zizmor","description":"Static analysis for GitHub Actions","html_url":"https://github.com/zizmorcore/zizmor","stars":3824,"language":"Rust","topics":"security-tools","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Static analysis for GitHub Actions"} +{"full_name":"zladx/LADX-Disassembly","owner":"zladx","name":"LADX-Disassembly","description":"Disassembly of Legend of Zelda: Links Awakening DX","html_url":"https://github.com/zladx/LADX-Disassembly","stars":880,"language":"Assembly","topics":"reverse-engineering","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"Disassembly of Legend of Zelda: Links Awakening DX"} +{"full_name":"ztgrace/changeme","owner":"ztgrace","name":"changeme","description":"A default credential scanner.","html_url":"https://github.com/ztgrace/changeme","stars":1503,"language":"Python","topics":"scanner,malware,pentesting","first_seen":"2026-03-22T00:00:00Z","source":"github-topic","ai_summary":"A default credential scanner."} diff --git a/data/catalog.manifest.json b/data/catalog.manifest.json new file mode 100644 index 0000000..7f8740b --- /dev/null +++ b/data/catalog.manifest.json @@ -0,0 +1,5 @@ +{ + "schema_version": 1, + "records": 1070, + "sha256": "e47b4fed919a0031ff4ed57a9710d9db0dce1f5a1bff6a8a14324b7965557287" +} diff --git a/docs/recovery-journal.md b/docs/recovery-journal.md new file mode 100644 index 0000000..40d4885 --- /dev/null +++ b/docs/recovery-journal.md @@ -0,0 +1,194 @@ +# HackyFeed recovery journal + +Status: the complete local repair and verification pass is green. No commit, push, or deployment has been performed. + +This journal is the durable record of why HackyFeed failed, how it was recovered, and which design choices should carry into the eventual article and template. + +## Original intent + +HackyFeed is a GitHub Pages site that discovers security repositories, summarizes them with an LLM, and presents them as a browsable chronological feed with RSS. The desired experience is closer to a continuously updated tools publication than a raw link dump. + +The reusable core is domain-independent: + +```text +source discovery -> deduplicated catalog -> bounded enrichment -> static publication -> RSS +``` + +Cybersecurity is the first domain. LLM developer tooling is the planned second domain. + +## What was observed on 2026-08-02 + +### Deployment history + +- The repository had 81 Actions runs: 74 failed, 5 succeeded, and 2 were cancelled. +- The last successful deployment was [run 23726849514 on 2026-03-30](https://github.com/rainmana/hackyfeed/actions/runs/23726849514). +- The following 61 runs failed consecutively through [run 26645022545 on 2026-05-29](https://github.com/rainmana/hackyfeed/actions/runs/26645022545). +- The scheduled workflow was later marked `disabled_inactivity`. GitHub documents that public-repository schedules may be disabled after 60 days without repository activity: . + +The latest failed run restored the March 30 database, found 5,588 unsummarized repositories, summarized the same top 1,000 records for roughly 46 minutes, generated 2,000 pages, and then failed during Hugo minification. + +Because the cache post-save happened only after a successful job, the newly completed summaries were discarded on every failure. The next run started from the same old database and paid for the same work again. + +### The poison document + +The immediate build failure came from `filipi86/MalwareAnalysis-in-PDF`. Its README contains a raw script fragment around [line 137](https://github.com/filipi86/MalwareAnalysis-in-PDF/blob/master/README.md?plain=1#L137). HackyFeed stored that README and copied it into a generated Hugo page. Hugo raw HTML was enabled, and its JavaScript minifier eventually rejected the malformed script with an `unexpected < in expression` error. + +Removing `--minify` would have hidden the build error while leaving a worse problem: third-party repository content could become same-origin active HTML or JavaScript on the published HackyFeed site. The correct boundary is to never publish arbitrary README bodies. + +### Live RSS audit + +The existing [`feed.xml`](https://rainmana.github.io/hackyfeed/feed.xml) returned HTTP 200 and was advertised by the home page, but it was not a healthy subscription feed: + +- 1,002 items and approximately 1.17 MB; +- 1,000 tool entries sharing the same date at midnight; +- About and Disclaimer entries dated year 0001; +- 179 relative links copied from READMEs; +- 716 truncated or invalid HTML descriptions; +- seven unsafe inline-style warnings; +- no effective upper bound on future growth. + +The [W3C feed validator result](https://validator.w3.org/feed/check.cgi?url=https%3A%2F%2Frainmana.github.io%2Fhackyfeed%2Ffeed.xml) rejected the feed. The root cause was not XML serialization alone. Hugo's generic RSS template was summarizing every regular page, including transplanted README markup, while discovery timestamps had already been truncated to dates. + +## Joern code-property-graph findings + +The existing local Joern CLI, version 4.0.594, successfully parsed the Go codebase into a CPG. No additional Joern distribution was downloaded. + +The graph confirmed the top-level execution chain: + +```text +main -> fetch.Run -> summarize.Run -> generate.Run +``` + +It also made the trust-boundary failure explicit: + +```text +GitHub/raw README -> database -> RenderToolMarkdown -> os.WriteFile -> Hugo +``` + +There was no validation or sanitization boundary between attacker-controlled README input and the generated Markdown body. Error paths from directory creation, regeneration writes, and publication bookkeeping were also incomplete or ignored. + +The CPG and query scripts are local analysis artifacts rather than repository inputs. The post-fix CPG contains 27 Go files, 398 methods, and 3,659 calls. Its `Repo` model has no README member; the page renderer reads bounded summary/description and public metadata fields; every remaining `readme_raw` occurrence is confined to backward-compatible schema or explicit cleanup code/tests. With three concrete page-writer sink arguments, Joern found zero flows from `FetchReadme` returns into page writes. + +## Recovery decisions + +### 1. Publish summaries, not source documents + +READMEs are fetched only as transient LLM input. They are no longer retained after summarization or rendered into Hugo content. Opening a database remains non-destructive; legacy `readme_raw` values are removed by the explicit `purge-readmes` maintenance command, which the deployment workflow runs after restore. + +Generated tool files now contain front matter only. Titles, URLs, categories, timestamps, and summaries are quoted or normalized before Hugo sees them. Hugo raw HTML remains disabled. + +Windows Defender also blocked one historically generated filename containing a recognizable webshell signature. Stable hashed source filenames avoided signature-bearing paths, but content scanning still caught equivalent plaintext in front matter. The final generator Unicode-escapes YAML scalar contents; Hugo decodes them back to the intended text while the generated source remains inert and does not expose signature-like HTML or script fragments. + +### 2. Treat build output as a deterministic projection + +The old `published` flag was set before a successful build and made database state disagree with deployed state. Generation now selects every summarized repository and deterministically renders the complete tool collection. Write and directory errors propagate immediately. + +### 3. Separate durable catalog state from resumable work state + +Actions cache is useful for an in-progress SQLite database, but GitHub may evict caches. It cannot be the sole source of truth. + +The replacement has three layers: + +1. SQLite remains the efficient mutable work database. +2. Every successful generation publishes a sanitized `catalog.jsonl` containing public repository metadata and AI summaries plus a schema/count/SHA-256 manifest. +3. `data/catalog.jsonl` is a checked-in recovery seed reconstructed from historical generated pages. + +On a clean restore, the last published catalog is imported first and the checked-in seed fills any gaps. Existing SQLite summaries win conflicts so stale recovery data cannot overwrite newer local work. + +The first reconstruction contained 996 records, while the live site had 1,000 tool pages with only 926 overlapping. Before replacing the deployment, 74 live-only pages were recovered through their explicit AI-summary boundary. The extractor required a canonical GitHub link, matching page/RSS identity and date, one metadata block, and an `AI Summary:` block immediately followed by the README boundary. It read text content only and never copied the following README. + +The final seed contains 1,070 case-insensitively unique records, is canonically sorted by repository name, contains no README bodies, and has a verified adjacent manifest. Its current SHA-256 is: + +```text +e47b4fed919a0031ff4ed57a9710d9db0dce1f5a1bff6a8a14324b7965557287 +``` + +### 4. Give RSS its own publication contract + +The custom home RSS template is deliberately not a generic rendering of site pages. It selects only the newest 50 tool pages and emits: + +- absolute permalink links and GUIDs; +- full UTC publication timestamps; +- plain-text bounded summaries; +- categories; +- no README HTML or non-tool pages. + +The same summary field is used consistently on the home page, category pages, individual tool pages, and RSS. + +### 5. Make expensive automation explicit + +The repaired workflow distinguishes publication from catalog enrichment: + +- pushes to `main` test and publish known state without calling the LLM; +- scheduled and manually dispatched runs also fetch and summarize; +- a database cache save runs with `always()` so completed work survives a later failure; +- legacy cached README bodies are explicitly purged and the database is compacted; +- the public catalog and checked-in seed remain authoritative when the cache disappears; +- Hugo is pinned and Go follows `go.mod`; +- reusable Actions are pinned to full commit SHAs; +- CI performs a real seed import, full generation, and production Hugo build. + +The schedule cron was deliberately changed so a future commit can reactivate GitHub's inactivity-paused schedule. No remote workflow has been re-enabled yet because nothing has been pushed. + +## Implementation map + +| Area | Result | +| --- | --- | +| `internal/generate` | Deterministic summary-only pages, staged directory replacement, collision-safe routes, bounded text, full timestamps, hostile-content Hugo test. | +| `internal/db` | Explicit legacy README purge, canonical identities, bounded metadata, integrity checks, atomic catalog import, deterministic export and manifest. | +| `cmd/hackyfeed` | Restore/import/export/doctor commands and clean-state recovery orchestration. | +| Hugo theme | Tool-only home/category rendering, safe static pages, global RSS discovery, custom RSS template. | +| `data/` | Sanitized 1,070-record recovery seed and integrity manifest, including all 74 live-only records. | +| Workflows | Separate CI, safe push deployment, scheduled enrichment, explicit cleanup, SHA-pinned Actions, failure-safe cache save. | + +## Validation record + +The final verification pass should record all of the following before a commit is proposed: + +- [x] `gofmt` produces no changes. +- [x] `go test ./...` passes with `HUGO_BIN` set to Hugo Extended 0.164.0. +- [x] `go vet ./...` passes. +- [x] the CLI builds successfully. +- [x] the 1,070-record seed and manifest import into a clean SQLite database and pass `PRAGMA quick_check`. +- [x] a production Hugo 0.164.0 `--minify` build succeeds from the recovered catalog: 1,070 generated tool sources and all 1,070 public tool routes were verified. +- [x] the built feed is well-formed, has exactly 50 unique tool permalinks/GUIDs in descending order, uses absolute URLs, contains no active script content, and is 43,700 bytes. +- [x] all 74 live-only routes remain present in the clean build. +- [x] a post-fix Joern 4.0.594 CPG confirms page generation no longer depends on stored README bodies. +- [x] `actionlint` accepts both workflows; the final diff contains no generated pages, databases, secrets, or changes under the unrelated `.serena` directory. + +## Article material + +### Possible working titles + +- “The RSS Feed That Re-Summarized 1,000 Repositories Every Night” +- “How a README Broke My GitHub Pages Pipeline—and Exposed the Real Trust Boundary” +- “Caches Are Not Databases: Recovering a Static-Site Automation Pipeline” + +### Narrative spine + +1. The appealing idea: turn GitHub discovery into a small daily publication. +2. The misleading symptom: Hugo's minifier fails on one strange repository. +3. The deeper security bug: arbitrary upstream content had crossed into a same-origin site. +4. The compounding reliability bug: failed jobs threw away 46 minutes of successful enrichment. +5. The RSS audit: “it returns 200” is not the same as “feed readers can safely consume it.” +6. Code-property-graph analysis: following data rather than guessing from filenames. +7. The repair: summaries as the trust boundary, deterministic builds, explicit feed semantics, and layered state recovery. +8. The template lesson: separate domain configuration from pipeline invariants. + +### Evidence worth preserving for screenshots + +- the 61-run consecutive failure streak; +- the exact minifier error and offending upstream README line; +- the old 1.17 MB feed and W3C validator findings; +- the Joern trust-flow query result; +- before/after workflow state diagrams; +- before/after feed size, item count, and validation results; +- the first successful post-repair Pages run, once explicitly authorized and deployed. + +## Remaining decisions after local repair + +- Whether the future LLM tooling feed should share this theme or use a distinct visual identity. +- Whether to turn this repository into a GitHub template repository after the repaired deployment is proven live. +- Whether to add richer feed formats such as JSON Feed only after RSS behavior remains stable. + +The immediate rule is conservative: prove the repaired cybersecurity feed first, then extract the template from a known-good milestone rather than copying another half-working state. diff --git a/docs/template-guide.md b/docs/template-guide.md new file mode 100644 index 0000000..b3b45e9 --- /dev/null +++ b/docs/template-guide.md @@ -0,0 +1,118 @@ +# Reusing HackyFeed as a catalog template + +This guide describes how to create a new domain-specific feed from the repaired HackyFeed pipeline. It is intentionally a copy-and-specialize workflow for now; converting the repository into an official GitHub template should wait until the repaired site has completed a successful live deployment. + +## Invariants to keep + +These are pipeline safety properties, not HackyFeed branding: + +- READMEs remain transient summarizer input and never become generated page bodies. +- The LLM output is normalized, bounded, YAML-quoted, and rendered as text. +- Hugo raw HTML stays disabled. +- RSS selects a bounded tool collection and never uses automatic page summaries. +- A complete site is regenerated from summarized catalog state. +- Generated tool pages are staged as a complete directory before replacing the prior set. +- SQLite cache is resumable work state, not durable truth. +- Every durable catalog has a matching schema/count/SHA-256 manifest. +- The published public catalog contains no credentials, prompts with secrets, or raw source documents. +- A normal push does not trigger costly summarization. +- Configuration is required; unknown keys and unsafe limits fail instead of falling back silently. +- The hostile-content Hugo integration test remains enabled in CI. + +## New repository checklist + +1. Copy the repository from a proven working commit. +2. Change the module path in `go.mod` and any import paths if the project will live under a different GitHub owner or repository. +3. Replace the site identity in `hackyfeed.toml`; generation creates Hugo's identity override. +4. Replace discovery topics, awesome lists, category rules, and the summarizer prompt. +5. Rewrite the Curated Sources, About, and Disclaimer pages for the new domain. +6. Replace the cybersecurity seed with an empty or domain-appropriate catalog export and its matching manifest. Never publish HackyFeed's seed as part of an unrelated catalog. +7. Build locally and run `hackyfeed restore --allow-empty` for an empty first bootstrap. +8. Run a manual update with a deliberately small `batch_limit` before enabling the daily schedule. +9. Inspect generated pages and `feed.xml`, then deploy known state. +10. Increase the batch limit only after cost and quality are understood. + +An empty catalog is supported: the deployment workflow uses `restore --allow-empty`, so the first push can publish the site shell. Create the empty JSONL and matching manifest through the CLI rather than manually truncating one file: + +```powershell +$env:HACKYFEED_DB = Join-Path $env:TEMP ("new-feed-" + [Guid]::NewGuid() + ".db") +.\hackyfeed.exe catalog-export data/catalog.jsonl +``` + +The resulting manifest records zero entries and the SHA-256 of an empty catalog. A scheduled or manual run can then discover and enrich the first records. + +## Configuration surfaces + +### Domain behavior + +Edit `hackyfeed.toml` for: + +- GitHub topics and minimum stars; +- optional raw awesome-list URLs; +- LLM tone, prompt, input limit, and per-run batch limit; +- category keywords and fallback category; +- canonical site URL and descriptive metadata. + +An explicit `[categories.rules]` table replaces the bundled cybersecurity rule map. It does not merge with it, so a new domain does not inherit accidental security classifications. + +### Hugo identity + +`[site]` in `hackyfeed.toml` is authoritative. Generation writes the untracked `site/hackyfeed.generated.toml` override used by local, CI, and production Hugo builds. The checked-in `site/hugo.toml` holds structural settings and a deliberately generic fallback identity. + +### Automation + +Configure GitHub Pages to use Actions and add: + +- `LLM_API_BASE` as a repository secret; +- `LLM_API_KEY` as a repository secret when the endpoint requires one; +- `GH_PAT` only if the built-in Actions token is insufficient; +- `LLM_MODEL` as an optional repository variable. + +The push path intentionally restores, tests, generates, and deploys without fetching or summarizing. Manual and scheduled events perform enrichment. + +Reusable Actions are pinned to full commit SHAs. Keep the version comments and use Dependabot or an equivalent reviewed update process rather than reverting to mutable major tags. + +## Suggested LLM tooling taxonomy + +Useful discovery areas include: + +- agent frameworks and orchestration; +- Model Context Protocol clients, servers, and developer tools; +- retrieval and indexing; +- evaluation, tracing, and observability; +- inference servers and model gateways; +- structured output and tool calling; +- prompt development; +- local model runtimes; +- safety, guardrails, and red teaming. + +Start with narrower topics and a higher star threshold. Broad terms such as `ai` can return a large, noisy backlog and make the first enrichment run unnecessarily expensive. + +## First-deployment sequence + +Use this sequence for a predictable launch: + +1. Set `batch_limit` to 10–25. +2. Run the full test suite with the pinned Hugo version. +3. Bootstrap and generate the empty or imported catalog locally. +4. Inspect the home page, one category, one tool page, and `feed.xml`. +5. Push the known state so Pages infrastructure is proven without LLM calls. +6. Trigger one manual update. +7. Confirm the database cache save ran even if a later step failed. +8. Confirm the deployed `/catalog.jsonl` and `/feed.xml` are reachable. +9. Trigger a second update and verify previously summarized tools are not reprocessed. +10. Only then enable or rely on the daily schedule. + +## Extraction work after HackyFeed is proven live + +The next template milestone should consider: + +- separating the default theme from domain content; +- adding a first-run setup command that writes config and an empty seed; +- making feed length a documented domain setting; +- adding optional JSON Feed without weakening RSS tests; +- replacing project-specific names in CSS, navigation, and sample content; +- adding a small fixture catalog instead of a production-domain seed; +- enabling GitHub's “Template repository” setting only after a clean-clone smoke test. + +The template should be extracted from the successful milestone, not maintained as a second copy while recovery work is still changing core behavior. diff --git a/internal/config/config.go b/internal/config/config.go index 7c4ce14..7a23976 100644 --- a/internal/config/config.go +++ b/internal/config/config.go @@ -1,11 +1,16 @@ package config import ( + "fmt" + "net/url" "os" + "strings" "github.com/BurntSushi/toml" ) +const MaxReadmeCharsLimit = 250_000 + type Config struct { Site SiteConfig `toml:"site"` Fetch FetchConfig `toml:"fetch"` @@ -43,15 +48,67 @@ type CategoriesConfig struct { func Load(path string) (*Config, error) { data, err := os.ReadFile(path) if err != nil { - return Default(), nil // fall back to defaults if no config file + return nil, fmt.Errorf("read config %s: %w", path, err) } cfg := Default() - if err := toml.Unmarshal(data, cfg); err != nil { + metadata, err := toml.Decode(string(data), cfg) + if err != nil { + return nil, err + } + if undecoded := metadata.Undecoded(); len(undecoded) > 0 { + return nil, fmt.Errorf("unknown configuration keys: %v", undecoded) + } + if metadata.IsDefined("categories", "rules") { + var explicit struct { + Categories struct { + Rules map[string][]string `toml:"rules"` + } `toml:"categories"` + } + if _, err := toml.Decode(string(data), &explicit); err != nil { + return nil, err + } + cfg.Categories.Rules = explicit.Categories.Rules + } + if err := cfg.Validate(); err != nil { return nil, err } return cfg, nil } +func (cfg *Config) Validate() error { + if strings.TrimSpace(cfg.Site.Title) == "" { + return fmt.Errorf("site.title must not be empty") + } + if strings.TrimSpace(cfg.Site.Author) == "" { + return fmt.Errorf("site.author must not be empty") + } + baseURL, err := url.Parse(cfg.Site.BaseURL) + if err != nil || (baseURL.Scheme != "http" && baseURL.Scheme != "https") || baseURL.Host == "" || baseURL.User != nil || baseURL.RawQuery != "" || baseURL.Fragment != "" { + return fmt.Errorf("site.base_url must be an absolute HTTP(S) URL without credentials, query, or fragment") + } + if cfg.Fetch.MinStars < 0 { + return fmt.Errorf("fetch.min_stars must be zero or greater") + } + if cfg.Summarize.BatchLimit < 0 { + return fmt.Errorf("summarize.batch_limit must be zero or greater") + } + if cfg.Summarize.MaxReadmeChars <= 0 || cfg.Summarize.MaxReadmeChars > MaxReadmeCharsLimit { + return fmt.Errorf("summarize.max_readme_chars must be between 1 and %d", MaxReadmeCharsLimit) + } + if strings.TrimSpace(cfg.Categories.DefaultCategory) == "" { + return fmt.Errorf("categories.default_category must not be empty") + } + if len(cfg.Categories.Rules) == 0 { + return fmt.Errorf("categories.rules must contain at least one rule") + } + for category, keywords := range cfg.Categories.Rules { + if strings.TrimSpace(category) == "" || len(keywords) == 0 { + return fmt.Errorf("categories.rules entries require a name and at least one keyword") + } + } + return nil +} + func Default() *Config { return &Config{ Site: SiteConfig{ @@ -68,7 +125,7 @@ func Default() *Config { Enabled: true, BatchLimit: 0, Tone: "technical", - SystemPrompt: "You are a cybersecurity tools cataloger. Given a GitHub repo's README content, produce a JSON object with:\n- \"summary\": A concise 2-3 sentence description. Write in a {{.Tone}} tone.\n- \"install\": Brief installation instructions.\nRespond ONLY with valid JSON, no markdown fences.", + SystemPrompt: "You are a cybersecurity tools cataloger. Given a GitHub repo's README content, write a concise 2-3 sentence summary of what the tool does, its primary use case, and notable features. Write in a {{.Tone}} tone. Respond with ONLY the summary text, no JSON, no markdown fences.", MaxReadmeChars: 4000, }, Categories: CategoriesConfig{ diff --git a/internal/config/config_test.go b/internal/config/config_test.go index 4299b4d..fc80d3c 100644 --- a/internal/config/config_test.go +++ b/internal/config/config_test.go @@ -2,15 +2,12 @@ package config import ( "os" + "path/filepath" "testing" ) -func TestLoadDefault(t *testing.T) { - // Loading a nonexistent file should return defaults - cfg, err := Load("/nonexistent/hackyfeed.toml") - if err != nil { - t.Fatal(err) - } +func TestDefault(t *testing.T) { + cfg := Default() if cfg.Site.Title != "HackyFeed" { t.Errorf("expected default title, got %q", cfg.Site.Title) } @@ -64,4 +61,47 @@ ai = ["artificial-intelligence", "machine-learning"] if _, ok := cfg.Categories.Rules["ai"]; !ok { t.Error("expected ai category rule") } + if len(cfg.Categories.Rules) != 1 { + t.Fatalf("explicit category rules should replace domain defaults, got %d rules", len(cfg.Categories.Rules)) + } +} + +func TestLoadReturnsNonMissingReadErrors(t *testing.T) { + if _, err := Load(t.TempDir()); err == nil { + t.Fatal("expected reading a directory as config to fail") + } +} + +func TestLoadRejectsMissingPath(t *testing.T) { + if _, err := Load(filepath.Join(t.TempDir(), "typo.toml")); err == nil { + t.Fatal("expected a missing configuration path to fail") + } +} + +func TestLoadRejectsUnknownKeys(t *testing.T) { + path := filepath.Join(t.TempDir(), "unknown.toml") + if err := os.WriteFile(path, []byte("[site]\nbaseurl = 'https://wrong.example/'\n"), 0644); err != nil { + t.Fatal(err) + } + if _, err := Load(path); err == nil { + t.Fatal("expected misspelled key to fail") + } +} + +func TestLoadRejectsInvalidSemanticValues(t *testing.T) { + for name, contents := range map[string]string{ + "base URL": "[site]\nbase_url = 'javascript:alert(1)'\n", + "README limit": "[summarize]\nmax_readme_chars = -1\n", + "batch limit": "[summarize]\nbatch_limit = -1\n", + } { + t.Run(name, func(t *testing.T) { + path := filepath.Join(t.TempDir(), "invalid.toml") + if err := os.WriteFile(path, []byte(contents), 0644); err != nil { + t.Fatal(err) + } + if _, err := Load(path); err == nil { + t.Fatal("expected invalid configuration to fail") + } + }) + } } diff --git a/internal/db/catalog.go b/internal/db/catalog.go new file mode 100644 index 0000000..7911f37 --- /dev/null +++ b/internal/db/catalog.go @@ -0,0 +1,235 @@ +package db + +import ( + "bufio" + "bytes" + "crypto/sha256" + "database/sql" + "encoding/json" + "fmt" + "io" + "regexp" + "sort" + "strings" + "time" +) + +const CatalogSchemaVersion = 1 + +type CatalogManifest struct { + SchemaVersion int `json:"schema_version"` + Records int `json:"records"` + SHA256 string `json:"sha256"` +} + +func NewCatalogManifest(data []byte, records int) CatalogManifest { + digest := sha256.Sum256(data) + return CatalogManifest{ + SchemaVersion: CatalogSchemaVersion, + Records: records, + SHA256: fmt.Sprintf("%x", digest), + } +} + +func VerifyCatalogManifest(data []byte, manifest CatalogManifest) error { + if manifest.SchemaVersion != CatalogSchemaVersion { + return fmt.Errorf("unsupported catalog schema version %d", manifest.SchemaVersion) + } + if manifest.Records < 0 { + return fmt.Errorf("invalid catalog record count %d", manifest.Records) + } + expected := NewCatalogManifest(data, manifest.Records) + if !strings.EqualFold(manifest.SHA256, expected.SHA256) { + return fmt.Errorf("catalog SHA-256 mismatch") + } + actualRecords := 0 + for _, line := range bytes.Split(data, []byte{'\n'}) { + if len(bytes.TrimSpace(line)) > 0 { + actualRecords++ + } + } + if actualRecords != manifest.Records { + return fmt.Errorf("catalog record count mismatch: manifest=%d actual=%d", manifest.Records, actualRecords) + } + return nil +} + +type CatalogEntry struct { + FullName string `json:"full_name"` + Owner string `json:"owner"` + Name string `json:"name"` + Description string `json:"description,omitempty"` + HTMLURL string `json:"html_url"` + Stars int `json:"stars,omitempty"` + Language string `json:"language,omitempty"` + Topics string `json:"topics,omitempty"` + FirstSeen time.Time `json:"first_seen"` + Source string `json:"source,omitempty"` + AISummary string `json:"ai_summary"` +} + +var ( + catalogOwnerPattern = regexp.MustCompile(`^[A-Za-z0-9](?:[A-Za-z0-9-]{0,37}[A-Za-z0-9])?$`) + catalogNamePattern = regexp.MustCompile(`^[A-Za-z0-9_.-]{1,100}$`) +) + +const ( + MaxDescriptionRunes = 1000 + MaxLanguageRunes = 100 + MaxTopicsRunes = 4000 + MaxSourceRunes = 100 +) + +// CanonicalGitHubIdentity validates a GitHub repository name and returns the +// identity fields stored throughout the catalog. Keeping this check in one +// place prevents discovery sources from creating rows that a later catalog +// export cannot restore. +func CanonicalGitHubIdentity(fullName string) (owner, name, htmlURL string, err error) { + fullName = strings.TrimSpace(fullName) + parts := strings.Split(fullName, "/") + if len(parts) != 2 || !catalogOwnerPattern.MatchString(parts[0]) || !catalogNamePattern.MatchString(parts[1]) || parts[1] == "." || parts[1] == ".." { + return "", "", "", fmt.Errorf("invalid full_name %q", fullName) + } + return parts[0], parts[1], "https://github.com/" + fullName, nil +} + +func ExportCatalog(database *sql.DB, writer io.Writer) (int, error) { + repos, err := AllSummarized(database) + if err != nil { + return 0, err + } + sort.Slice(repos, func(i, j int) bool { + return repos[i].FullName < repos[j].FullName + }) + + encoder := json.NewEncoder(writer) + encoder.SetEscapeHTML(true) + for _, repo := range repos { + summary, err := NormalizeSummary(repo.AISummary) + if err != nil { + return 0, fmt.Errorf("export %s: %w", repo.FullName, err) + } + entry := CatalogEntry{ + FullName: repo.FullName, + Owner: repo.Owner, + Name: repo.Name, + Description: NormalizeMetadata(repo.Description, MaxDescriptionRunes), + HTMLURL: repo.HTMLURL, + Stars: repo.Stars, + Language: NormalizeMetadata(repo.Language, MaxLanguageRunes), + Topics: NormalizeMetadata(repo.Topics, MaxTopicsRunes), + FirstSeen: repo.FirstSeen.UTC(), + Source: NormalizeMetadata(repo.Source, MaxSourceRunes), + AISummary: summary, + } + if err := encoder.Encode(entry); err != nil { + return 0, err + } + } + return len(repos), nil +} + +func ImportCatalog(database *sql.DB, reader io.Reader) (int, error) { + transaction, err := database.Begin() + if err != nil { + return 0, err + } + defer transaction.Rollback() + + statement, err := transaction.Prepare(` + INSERT INTO repos ( + full_name, owner, name, description, html_url, stars, language, + topics, first_seen, source, ai_summary, summarized_at, published + ) + VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, CURRENT_TIMESTAMP, 0) + ON CONFLICT(full_name) DO UPDATE SET + owner=CASE WHEN TRIM(repos.owner) = '' THEN excluded.owner ELSE repos.owner END, + name=CASE WHEN TRIM(repos.name) = '' THEN excluded.name ELSE repos.name END, + description=CASE WHEN TRIM(repos.description) = '' THEN excluded.description ELSE repos.description END, + html_url=CASE WHEN TRIM(repos.html_url) = '' THEN excluded.html_url ELSE repos.html_url END, + stars=MAX(repos.stars, excluded.stars), + language=CASE WHEN TRIM(repos.language) = '' THEN excluded.language ELSE repos.language END, + topics=CASE WHEN TRIM(repos.topics) = '' THEN excluded.topics ELSE repos.topics END, + first_seen=CASE WHEN excluded.first_seen < repos.first_seen THEN excluded.first_seen ELSE repos.first_seen END, + source=CASE WHEN TRIM(repos.source) = '' THEN excluded.source ELSE repos.source END, + ai_summary=CASE WHEN TRIM(repos.ai_summary) = '' THEN excluded.ai_summary ELSE repos.ai_summary END, + summarized_at=CASE WHEN TRIM(repos.ai_summary) = '' THEN CURRENT_TIMESTAMP ELSE repos.summarized_at END + `) + if err != nil { + return 0, err + } + defer statement.Close() + + scanner := bufio.NewScanner(reader) + scanner.Buffer(make([]byte, 64*1024), 2*1024*1024) + count := 0 + lineNumber := 0 + for scanner.Scan() { + lineNumber++ + line := strings.TrimSpace(scanner.Text()) + if line == "" { + continue + } + + var entry CatalogEntry + if err := json.Unmarshal([]byte(line), &entry); err != nil { + return 0, fmt.Errorf("catalog line %d: %w", lineNumber, err) + } + if err := normalizeCatalogEntry(&entry); err != nil { + return 0, fmt.Errorf("catalog line %d: %w", lineNumber, err) + } + var existingFullName string + lookupErr := transaction.QueryRow(`SELECT full_name FROM repos WHERE LOWER(full_name)=LOWER(?) LIMIT 1`, entry.FullName).Scan(&existingFullName) + if lookupErr == nil { + entry.FullName = existingFullName + entry.Owner, entry.Name, entry.HTMLURL, err = CanonicalGitHubIdentity(existingFullName) + if err != nil { + return 0, fmt.Errorf("catalog line %d: existing identity: %w", lineNumber, err) + } + } else if lookupErr != sql.ErrNoRows { + return 0, fmt.Errorf("catalog line %d: identity lookup: %w", lineNumber, lookupErr) + } + if _, err := statement.Exec( + entry.FullName, entry.Owner, entry.Name, entry.Description, + entry.HTMLURL, entry.Stars, entry.Language, entry.Topics, + entry.FirstSeen.UTC(), entry.Source, entry.AISummary, + ); err != nil { + return 0, fmt.Errorf("catalog line %d: %w", lineNumber, err) + } + count++ + } + if err := scanner.Err(); err != nil { + return 0, err + } + if err := transaction.Commit(); err != nil { + return 0, err + } + return count, nil +} + +func normalizeCatalogEntry(entry *CatalogEntry) error { + entry.FullName = strings.TrimSpace(entry.FullName) + owner, name, htmlURL, err := CanonicalGitHubIdentity(entry.FullName) + if err != nil { + return err + } + if entry.Stars < 0 { + return fmt.Errorf("negative stars for %q", entry.FullName) + } + entry.Owner = owner + entry.Name = name + entry.HTMLURL = htmlURL + entry.Description = NormalizeMetadata(entry.Description, MaxDescriptionRunes) + entry.Language = NormalizeMetadata(entry.Language, MaxLanguageRunes) + entry.Topics = NormalizeMetadata(entry.Topics, MaxTopicsRunes) + entry.Source = NormalizeMetadata(entry.Source, MaxSourceRunes) + if entry.FirstSeen.IsZero() { + return fmt.Errorf("missing first_seen for %q", entry.FullName) + } + summary, err := NormalizeSummary(entry.AISummary) + if err != nil { + return fmt.Errorf("invalid ai_summary for %q: %w", entry.FullName, err) + } + entry.AISummary = summary + return nil +} diff --git a/internal/db/catalog_test.go b/internal/db/catalog_test.go new file mode 100644 index 0000000..fd9b51a --- /dev/null +++ b/internal/db/catalog_test.go @@ -0,0 +1,290 @@ +package db + +import ( + "bytes" + "encoding/json" + "os" + "path/filepath" + "strings" + "testing" + "time" +) + +func TestCatalogRoundTrip(t *testing.T) { + source, err := Open(t.TempDir() + "/source.db") + if err != nil { + t.Fatal(err) + } + defer source.Close() + + repo := &Repo{ + FullName: "owner/tool", Owner: "owner", Name: "tool", + Description: "A useful tool", HTMLURL: "https://github.com/owner/tool", + Stars: 42, Language: "Go", Topics: "pentesting,scanner", Source: "github-topic", + } + if err := UpsertRepo(source, repo); err != nil { + t.Fatal(err) + } + unsummarized, err := Unsummarized(source) + if err != nil { + t.Fatal(err) + } + if err := SetSummary(source, unsummarized[0].ID, "Safe summary with a newline\nand ", + Description: "fallback", + FirstSeen: time.Date(2026, 3, 21, 12, 34, 56, 0, time.UTC), + } + + md := RenderToolMarkdown(repo, testCategoriesConfig()) + parts := strings.SplitN(md, "---", 3) + if len(parts) != 3 { + t.Fatalf("expected YAML front matter, got %q", md) + } + if strings.TrimSpace(parts[2]) != "" { + t.Fatalf("untrusted content must not be emitted as Markdown body: %q", parts[2]) + } + if !strings.Contains(md, "title: "+yamlString(`bad\"name`)) { + t.Fatalf("expected YAML-safe quoted title, got %q", md) + } + if strings.Contains(strings.ToLower(md), "not executable %s", i, strings.Repeat("🛠&<>", 200)) + if i == 54 { + summary = "Use & List; keep ." + } + repo := db.Repo{ + FullName: fmt.Sprintf("owner/tool-%02d", i), + Owner: "owner", + Name: fmt.Sprintf("tool-%02d", i), + HTMLURL: fmt.Sprintf("https://github.com/owner/tool-%02d", i), + AISummary: summary, + Topics: "pentesting", + Source: "github-topic", + FirstSeen: baseTime.Add(time.Duration(i) * time.Minute), + } + path := filepath.Join(toolsDir, contentFileName(repo.FullName)) + if err := os.WriteFile(path, []byte(RenderToolMarkdown(repo, testCategoriesConfig())), 0644); err != nil { + t.Fatal(err) + } + } + + staticPage := "---\ntitle: \"About test\"\n---\n\nThis page must not enter the tool feed.\n" + if err := os.WriteFile(filepath.Join(pagesDir, "about.md"), []byte(staticPage), 0644); err != nil { + t.Fatal(err) + } + + outputDir := filepath.Join(t.TempDir(), "public") + cacheDir := filepath.Join(t.TempDir(), "cache") + siteDir := filepath.Clean(filepath.Join("..", "..", "site")) + baseConfig, err := filepath.Abs(filepath.Join(siteDir, "hugo.toml")) + if err != nil { + t.Fatal(err) + } + generatedConfig := filepath.Join(t.TempDir(), "hackyfeed.generated.toml") + generatedConfigContents, err := renderHugoConfig(&config.SiteConfig{ + Title: "HackyFeed", + BaseURL: "https://rainmana.github.io/hackyfeed/", + Description: "A cybersecurity tools aggregator", + Author: "rainmana", + Tagline: "> test", + }) + if err != nil { + t.Fatal(err) + } + if err := os.WriteFile(generatedConfig, generatedConfigContents, 0644); err != nil { + t.Fatal(err) + } + cmd := exec.Command(hugo, + "--source", siteDir, + "--config", baseConfig+","+generatedConfig, + "--contentDir", contentDir, + "--destination", outputDir, + "--cacheDir", cacheDir, + "--cleanDestinationDir", + "--noBuildLock", + "--minify", + ) + if output, err := cmd.CombinedOutput(); err != nil { + t.Fatalf("hugo build failed: %v\n%s", err, output) + } + + feedBytes, err := os.ReadFile(filepath.Join(outputDir, "feed.xml")) + if err != nil { + t.Fatal(err) + } + if len(feedBytes) > 500_000 { + t.Fatalf("feed should remain bounded, got %d bytes", len(feedBytes)) + } + + var feed rssDocument + if err := xml.Unmarshal(feedBytes, &feed); err != nil { + t.Fatalf("feed is not well-formed XML: %v", err) + } + if len(feed.Channel.Items) != 50 { + t.Fatalf("expected 50 feed items, got %d", len(feed.Channel.Items)) + } + if feed.Channel.Items[0].Title != "tool-54" { + t.Fatalf("expected newest tool first, got %q", feed.Channel.Items[0].Title) + } + firstDescription := html.UnescapeString(feed.Channel.Items[0].Description) + if firstDescription != "Use & List; keep ." { + t.Fatalf("RSS summary changed unexpectedly: %q", firstDescription) + } + + for _, item := range feed.Channel.Items { + description := html.UnescapeString(item.Description) + if item.Title == "About test" { + t.Fatal("non-tool page leaked into RSS") + } + if !strings.HasPrefix(item.Link, "https://rainmana.github.io/hackyfeed/tools/") { + t.Fatalf("expected absolute canonical item link, got %q", item.Link) + } + if item.GUID.IsPermaLink != "true" || item.GUID.Value != item.Link { + t.Fatalf("expected permalink GUID for %q", item.Title) + } + if _, err := time.Parse(time.RFC1123Z, item.PubDate); err != nil { + t.Fatalf("invalid pubDate %q: %v", item.PubDate, err) + } + if strings.Contains(strings.ToLower(item.Description), " db.MaxSummaryRunes*4 { + t.Fatalf("RSS description is unexpectedly large: %d", len(description)) + } + } + + homeBytes, err := os.ReadFile(filepath.Join(outputDir, "index.html")) + if err != nil { + t.Fatal(err) + } + if strings.Contains(string(homeBytes), "About test") { + t.Fatal("non-tool page leaked into the home feed") + } +} diff --git a/internal/summarize/summarize.go b/internal/summarize/summarize.go index 863801c..e7c9643 100644 --- a/internal/summarize/summarize.go +++ b/internal/summarize/summarize.go @@ -4,6 +4,7 @@ import ( "bytes" "database/sql" "encoding/json" + "errors" "fmt" "io" "log" @@ -43,7 +44,27 @@ type SummaryResult struct { var readmePaths = []string{"README.md", "readme.md", "README.rst", "README", "Readme.md"} +var ErrReadmeNotFound = errors.New("repository README not found") + +type llmServiceError struct { + err error +} + +func (e *llmServiceError) Error() string { return e.err.Error() } +func (e *llmServiceError) Unwrap() error { return e.err } + func Run(database *sql.DB, llm LLMConfig, cfg *config.SummarizeConfig) error { + client := &http.Client{Timeout: 60 * time.Second} + return runWithClient(database, llm, cfg, client) +} + +func runWithClient(database *sql.DB, llm LLMConfig, cfg *config.SummarizeConfig, client *http.Client) error { + if cfg.BatchLimit < 0 { + return fmt.Errorf("batch_limit must be zero or greater") + } + if cfg.MaxReadmeChars <= 0 || cfg.MaxReadmeChars > config.MaxReadmeCharsLimit { + return fmt.Errorf("max_readme_chars must be between 1 and %d", config.MaxReadmeCharsLimit) + } repos, err := db.Unsummarized(database) if err != nil { return err @@ -57,7 +78,9 @@ func Run(database *sql.DB, llm LLMConfig, cfg *config.SummarizeConfig) error { if summary == "" { summary = r.Name } - db.SetSummary(database, r.ID, summary, "") + if err := db.SetSummary(database, r.ID, summary); err != nil { + return fmt.Errorf("save fallback summary for %s: %w", r.FullName, err) + } } return nil } @@ -68,46 +91,68 @@ func Run(database *sql.DB, llm LLMConfig, cfg *config.SummarizeConfig) error { } prompt := ResolvePrompt(cfg.SystemPrompt, cfg.Tone) - client := &http.Client{Timeout: 60 * time.Second} - consecutiveErrors := 0 + consecutiveServiceErrors := 0 + serviceFailures := 0 + completed := 0 + var runErrors []error for _, r := range repos { - // Circuit breaker: stop if 3+ consecutive LLM errors (likely rate limited or down) - if consecutiveErrors >= 3 { - log.Printf("[summarize] stopping: %d consecutive LLM errors, likely rate limited", consecutiveErrors) - break - } - - readme, err := FetchReadme(client, r.FullName) + readme, err := FetchReadme(client, r.FullName, cfg.MaxReadmeChars) if err != nil { - log.Printf("[summarize] skip %s (no readme): %v", r.FullName, err) - summary := r.Description - if summary == "" { - summary = r.Name + if errors.Is(err, ErrReadmeNotFound) { + log.Printf("[summarize] %s has no README; using repository description", r.FullName) + summary := r.Description + if summary == "" { + summary = r.Name + } + if err := db.SetSummary(database, r.ID, summary); err != nil { + return fmt.Errorf("save fallback summary for %s: %w", r.FullName, err) + } + completed++ + consecutiveServiceErrors = 0 + continue + } + log.Printf("[summarize] transient README error for %s: %v", r.FullName, err) + runErrors = append(runErrors, fmt.Errorf("read README for %s: %w", r.FullName, err)) + consecutiveServiceErrors++ + serviceFailures++ + if consecutiveServiceErrors >= 3 { + return fmt.Errorf("summarization stopped after %d consecutive upstream errors: %w", consecutiveServiceErrors, errors.Join(runErrors...)) } - db.SetSummary(database, r.ID, summary, "") continue } - aiInput := readme - if len(aiInput) > cfg.MaxReadmeChars { - aiInput = aiInput[:cfg.MaxReadmeChars] - } - - summary, err := CallLLMWithRetry(client, llm, prompt, r.FullName, aiInput) + summary, err := CallLLMWithRetry(client, llm, prompt, r.FullName, readme) if err != nil { log.Printf("[summarize] LLM error %s: %v, skipping (will retry next run)", r.FullName, err) - consecutiveErrors++ + runErrors = append(runErrors, fmt.Errorf("summarize %s: %w", r.FullName, err)) + var serviceError *llmServiceError + if errors.As(err, &serviceError) { + consecutiveServiceErrors++ + serviceFailures++ + if consecutiveServiceErrors >= 3 { + return fmt.Errorf("summarization stopped after %d consecutive service errors: %w", consecutiveServiceErrors, errors.Join(runErrors...)) + } + } else { + consecutiveServiceErrors = 0 + } continue // don't save fallback — leave unsummarized so it retries next run } - consecutiveErrors = 0 - if err := db.SetSummary(database, r.ID, summary, readme); err != nil { - log.Printf("[summarize] db error %s: %v", r.FullName, err) + consecutiveServiceErrors = 0 + if err := db.SetSummary(database, r.ID, summary); err != nil { + return fmt.Errorf("save summary for %s: %w", r.FullName, err) } + completed++ log.Printf("[summarize] ✓ %s", r.FullName) time.Sleep(500 * time.Millisecond) } + if len(runErrors) > 0 { + log.Printf("[summarize] completed with %d repository-level errors; failed rows remain queued", len(runErrors)) + if completed == 0 && serviceFailures > 0 { + return fmt.Errorf("summarization failed for every attempted repository: %w", errors.Join(runErrors...)) + } + } return nil } @@ -115,19 +160,37 @@ func ResolvePrompt(template, tone string) string { return strings.ReplaceAll(template, "{{.Tone}}", tone) } -func FetchReadme(client *http.Client, fullName string) (string, error) { +func FetchReadme(client *http.Client, fullName string, maxChars int) (string, error) { + if maxChars <= 0 || maxChars > config.MaxReadmeCharsLimit { + return "", fmt.Errorf("max README characters must be between 1 and %d", config.MaxReadmeCharsLimit) + } + maxBytes := int64(maxChars)*4 + 1 for _, path := range readmePaths { resp, err := client.Get(fmt.Sprintf("https://raw.githubusercontent.com/%s/HEAD/%s", fullName, path)) if err != nil { - continue + return "", fmt.Errorf("request %s: %w", path, err) } - body, _ := io.ReadAll(resp.Body) + body, readErr := io.ReadAll(io.LimitReader(resp.Body, maxBytes)) resp.Body.Close() - if resp.StatusCode == 200 && len(body) > 0 { - return string(body), nil + if readErr != nil { + return "", fmt.Errorf("read %s: %w", path, readErr) + } + if resp.StatusCode == http.StatusNotFound { + continue + } + if resp.StatusCode != http.StatusOK { + return "", fmt.Errorf("fetch %s returned HTTP %d", path, resp.StatusCode) + } + if len(body) == 0 { + continue + } + runes := []rune(string(body)) + if len(runes) > maxChars { + runes = runes[:maxChars] } + return string(runes), nil } - return "", fmt.Errorf("no readme found") + return "", ErrReadmeNotFound } func CallLLMWithRetry(client *http.Client, llm LLMConfig, systemPrompt, repoName, readme string) (string, error) { @@ -158,15 +221,21 @@ func CallLLMWithRetry(client *http.Client, llm LLMConfig, systemPrompt, repoName } func callLLMOnce(client *http.Client, llm LLMConfig, systemPrompt, repoName, readme string) (summary string, retryable bool, err error) { - body, _ := json.Marshal(chatReq{ + body, err := json.Marshal(chatReq{ Model: llm.Model, Messages: []msg{ {Role: "system", Content: systemPrompt}, {Role: "user", Content: fmt.Sprintf("Repository: %s\n\nREADME:\n%s", repoName, readme)}, }, }) + if err != nil { + return "", false, err + } - req, _ := http.NewRequest("POST", llm.APIBase+"/chat/completions", bytes.NewReader(body)) + req, err := http.NewRequest("POST", llm.APIBase+"/chat/completions", bytes.NewReader(body)) + if err != nil { + return "", false, &llmServiceError{err: fmt.Errorf("construct LLM request: %w", err)} + } req.Header.Set("Content-Type", "application/json") if llm.APIKey != "" { req.Header.Set("Authorization", "Bearer "+llm.APIKey) @@ -174,27 +243,35 @@ func callLLMOnce(client *http.Client, llm LLMConfig, systemPrompt, repoName, rea resp, err := client.Do(req) if err != nil { - return "", true, err // network error, retryable + return "", true, &llmServiceError{err: err} // network error, retryable } defer resp.Body.Close() - respBody, _ := io.ReadAll(resp.Body) + respBody, err := io.ReadAll(io.LimitReader(resp.Body, 2*1024*1024+1)) + if err != nil { + return "", true, &llmServiceError{err: fmt.Errorf("read LLM response: %w", err)} + } + if len(respBody) > 2*1024*1024 { + return "", false, &llmServiceError{err: fmt.Errorf("LLM response exceeds 2 MiB")} + } switch { case resp.StatusCode == 429: - return "", true, fmt.Errorf("rate limited (429)") - case resp.StatusCode == 500 || resp.StatusCode == 502 || resp.StatusCode == 503: - return "", true, fmt.Errorf("server error (%d)", resp.StatusCode) + return "", true, &llmServiceError{err: fmt.Errorf("rate limited (429)")} + case resp.StatusCode >= 500: + return "", true, &llmServiceError{err: fmt.Errorf("server error (%d)", resp.StatusCode)} + case resp.StatusCode == http.StatusUnauthorized || resp.StatusCode == http.StatusForbidden || resp.StatusCode == http.StatusNotFound: + return "", false, &llmServiceError{err: fmt.Errorf("LLM API %d: %s", resp.StatusCode, string(respBody))} case resp.StatusCode != 200: - return "", false, fmt.Errorf("LLM API %d: %s", resp.StatusCode, string(respBody)) + return "", false, &llmServiceError{err: fmt.Errorf("LLM API %d: %s", resp.StatusCode, string(respBody))} } var cr chatResp if err := json.Unmarshal(respBody, &cr); err != nil { - return "", false, err + return "", false, &llmServiceError{err: fmt.Errorf("decode LLM response: %w", err)} } if len(cr.Choices) == 0 { - return "", false, fmt.Errorf("no choices returned") + return "", false, &llmServiceError{err: fmt.Errorf("no choices returned")} } s, parseErr := ParseLLMResponse(cr.Choices[0].Message.Content) @@ -204,8 +281,8 @@ func callLLMOnce(client *http.Client, llm LLMConfig, systemPrompt, repoName, rea func ParseLLMResponse(content string) (string, error) { var result SummaryResult if err := json.Unmarshal([]byte(content), &result); err != nil { - // LLM returned plain text, use as-is - return content, nil + // The configured prompt normally returns plain text. + return db.NormalizeSummary(content) } - return result.Summary, nil + return db.NormalizeSummary(result.Summary) } diff --git a/internal/summarize/summarize_test.go b/internal/summarize/summarize_test.go index 056ad00..631cb39 100644 --- a/internal/summarize/summarize_test.go +++ b/internal/summarize/summarize_test.go @@ -1,9 +1,31 @@ package summarize import ( + "errors" + "io" + "net/http" + "path/filepath" + "strings" "testing" + + "github.com/rainmana/hackyfeed/internal/config" + "github.com/rainmana/hackyfeed/internal/db" ) +type roundTripFunc func(*http.Request) (*http.Response, error) + +func (function roundTripFunc) RoundTrip(request *http.Request) (*http.Response, error) { + return function(request) +} + +func testResponse(status int, body string) *http.Response { + return &http.Response{ + StatusCode: status, + Body: io.NopCloser(strings.NewReader(body)), + Header: make(http.Header), + } +} + func TestParseLLMResponseValidJSON(t *testing.T) { input := `{"summary": "A tool for scanning networks."}` summary, err := ParseLLMResponse(input) @@ -26,6 +48,24 @@ func TestParseLLMResponsePlainText(t *testing.T) { } } +func TestParseLLMResponseRejectsEmptySummary(t *testing.T) { + for _, input := range []string{" \n\t", `{"summary":" "}`} { + if _, err := ParseLLMResponse(input); err == nil { + t.Fatalf("expected empty response %q to fail", input) + } + } +} + +func TestParseLLMResponseNormalizesWhitespace(t *testing.T) { + summary, err := ParseLLMResponse("first line\n\nsecond line") + if err != nil { + t.Fatal(err) + } + if summary != "first line second line" { + t.Fatalf("unexpected normalized summary %q", summary) + } +} + func TestResolvePrompt(t *testing.T) { got := ResolvePrompt("Write in a {{.Tone}} tone.", "casual") if got != "Write in a casual tone." { @@ -39,3 +79,159 @@ func TestResolvePromptNoPlaceholder(t *testing.T) { t.Error("should be unchanged") } } + +func TestRunRejectsInvalidReadmeLimit(t *testing.T) { + database, err := db.Open(filepath.Join(t.TempDir(), "invalid-limit.db")) + if err != nil { + t.Fatal(err) + } + defer database.Close() + if err := runWithClient(database, LLMConfig{}, &config.SummarizeConfig{Enabled: true, MaxReadmeChars: -1}, http.DefaultClient); err == nil { + t.Fatal("expected a negative max_readme_chars value to fail") + } +} + +func TestFetchReadmeClassifiesNotFoundAndTransientResponses(t *testing.T) { + status := http.StatusNotFound + client := &http.Client{Transport: roundTripFunc(func(*http.Request) (*http.Response, error) { + return testResponse(status, ""), nil + })} + if _, err := FetchReadme(client, "owner/tool", 100); !errors.Is(err, ErrReadmeNotFound) { + t.Fatalf("expected typed not-found error, got %v", err) + } + status = http.StatusTooManyRequests + if _, err := FetchReadme(client, "owner/tool", 100); err == nil || errors.Is(err, ErrReadmeNotFound) { + t.Fatalf("expected transient 429 error, got %v", err) + } + status = http.StatusServiceUnavailable + if _, err := FetchReadme(client, "owner/tool", 100); err == nil || errors.Is(err, ErrReadmeNotFound) { + t.Fatalf("expected transient 503 error, got %v", err) + } +} + +func TestFetchReadmeBoundsContentByRunes(t *testing.T) { + client := &http.Client{Transport: roundTripFunc(func(*http.Request) (*http.Response, error) { + return testResponse(http.StatusOK, strings.Repeat("é", 100)), nil + })} + readme, err := FetchReadme(client, "owner/tool", 10) + if err != nil { + t.Fatal(err) + } + if len([]rune(readme)) != 10 { + t.Fatalf("expected 10 runes, got %d", len([]rune(readme))) + } +} + +func TestMalformedLLMBaseReturnsErrorInsteadOfPanicking(t *testing.T) { + _, err := CallLLMWithRetry(http.DefaultClient, LLMConfig{APIBase: "://bad", Model: "test"}, "prompt", "owner/tool", "readme") + if err == nil { + t.Fatal("expected malformed LLM API base to fail") + } +} + +func TestTransientReadmeFailureRemainsQueuedAndCanRecover(t *testing.T) { + database, err := db.Open(filepath.Join(t.TempDir(), "recovery.db")) + if err != nil { + t.Fatal(err) + } + defer database.Close() + if err := db.UpsertRepo(database, &db.Repo{FullName: "owner/tool", Description: "fallback", Source: "github-topic"}); err != nil { + t.Fatal(err) + } + readmeAvailable := false + client := &http.Client{Transport: roundTripFunc(func(request *http.Request) (*http.Response, error) { + if request.URL.Host == "raw.githubusercontent.com" { + if !readmeAvailable { + return testResponse(http.StatusServiceUnavailable, "temporary outage"), nil + } + return testResponse(http.StatusOK, "real README"), nil + } + return testResponse(http.StatusOK, `{"choices":[{"message":{"role":"assistant","content":"Recovered summary"}}]}`), nil + })} + cfg := &config.SummarizeConfig{Enabled: true, MaxReadmeChars: 100, BatchLimit: 10} + llm := LLMConfig{APIBase: "https://llm.invalid/v1", Model: "test"} + if err := runWithClient(database, llm, cfg, client); err == nil { + t.Fatal("expected an all-upstream-failure run to report an error") + } + if count, _ := db.SummarizedCount(database); count != 0 { + t.Fatalf("transient README failure was persisted as a fallback summary") + } + readmeAvailable = true + if err := runWithClient(database, llm, cfg, client); err != nil { + t.Fatal(err) + } + if count, _ := db.SummarizedCount(database); count != 1 { + t.Fatalf("expected repository to recover on the next run, got %d summaries", count) + } +} + +func TestPerRepositoryErrorsDoNotStarveLaterRows(t *testing.T) { + database, err := db.Open(filepath.Join(t.TempDir(), "queue.db")) + if err != nil { + t.Fatal(err) + } + defer database.Close() + for index := 1; index <= 4; index++ { + if err := db.UpsertRepo(database, &db.Repo{ + FullName: "owner/tool" + string(rune('0'+index)), Stars: 5 - index, Source: "github-topic", + }); err != nil { + t.Fatal(err) + } + } + client := &http.Client{Transport: roundTripFunc(func(request *http.Request) (*http.Response, error) { + if request.URL.Host == "raw.githubusercontent.com" { + return testResponse(http.StatusOK, "README"), nil + } + body, err := io.ReadAll(request.Body) + if err != nil { + return nil, err + } + if !strings.Contains(string(body), "owner/tool4") { + return testResponse(http.StatusOK, `{"choices":[{"message":{"role":"assistant","content":" "}}]}`), nil + } + return testResponse(http.StatusOK, `{"choices":[{"message":{"role":"assistant","content":"fourth row succeeded"}}]}`), nil + })} + cfg := &config.SummarizeConfig{Enabled: true, MaxReadmeChars: 100, BatchLimit: 10} + if err := runWithClient(database, LLMConfig{APIBase: "https://llm.invalid/v1", Model: "test"}, cfg, client); err != nil { + t.Fatal(err) + } + if count, _ := db.SummarizedCount(database); count != 1 { + t.Fatalf("expected the fourth row to be processed, got %d summaries", count) + } + if err := runWithClient(database, LLMConfig{APIBase: "https://llm.invalid/v1", Model: "test"}, cfg, client); err != nil { + t.Fatal(err) + } + if count, _ := db.SummarizedCount(database); count != 1 { + t.Fatalf("persistent bad rows changed completed state, got %d summaries", count) + } +} + +func TestServiceWideLLMFailureTripsCircuit(t *testing.T) { + database, err := db.Open(filepath.Join(t.TempDir(), "circuit.db")) + if err != nil { + t.Fatal(err) + } + defer database.Close() + for index := 1; index <= 4; index++ { + if err := db.UpsertRepo(database, &db.Repo{FullName: "owner/fail" + string(rune('0'+index)), Stars: 5 - index}); err != nil { + t.Fatal(err) + } + } + llmCalls := 0 + client := &http.Client{Transport: roundTripFunc(func(request *http.Request) (*http.Response, error) { + if request.URL.Host == "raw.githubusercontent.com" { + return testResponse(http.StatusOK, "README"), nil + } + llmCalls++ + return testResponse(http.StatusUnauthorized, "bad key"), nil + })} + err = runWithClient(database, LLMConfig{APIBase: "https://llm.invalid/v1", Model: "test"}, &config.SummarizeConfig{ + Enabled: true, MaxReadmeChars: 100, BatchLimit: 10, + }, client) + if err == nil { + t.Fatal("expected service-wide authentication failures to stop the run") + } + if llmCalls != 3 { + t.Fatalf("expected circuit breaker after 3 calls, got %d", llmCalls) + } +} diff --git a/site/content/awesome/_index.md b/site/content/awesome/_index.md index 24863dd..53278d5 100644 --- a/site/content/awesome/_index.md +++ b/site/content/awesome/_index.md @@ -1,10 +1,10 @@ --- -title: "Awesome List" +title: "Curated Sources" layout: "single" --- -## awesome-rainmana +## Curated repository lists -Tools sourced from [rainmana's awesome list](https://github.com/rainmana/awesome-rainmana) — a curated collection of starred GitHub repositories covering cybersecurity, reverse engineering, development tools, and more. +In addition to GitHub topic searches, this catalog can discover repositories from the curated Markdown lists configured by the site maintainer. -Browse tools from this source by visiting the [awesome-list category](/hackyfeed/categories/awesome-list/). +When curated lists are enabled, browse their entries in the [awesome-list category](../categories/awesome-list/). The upstream repository link on every tool page remains the authoritative source. diff --git a/site/hugo.toml b/site/hugo.toml index c40d45b..293db9c 100644 --- a/site/hugo.toml +++ b/site/hugo.toml @@ -1,12 +1,14 @@ -baseURL = "https://rainmana.github.io/hackyfeed/" -languageCode = "en-us" -title = "HackyFeed" +baseURL = "https://example.invalid/" +locale = "en-US" +title = "Catalog" theme = "hackyfeed-theme" +timeZone = "UTC" [params] - description = "A cybersecurity tools aggregator — discover the latest pentesting, red team, and offensive security tools from GitHub." - author = "rainmana" - tagline = "> cat /dev/github | grep security-tools" + description = "A generated GitHub tools catalog. Run hackyfeed generate to apply project branding." + author = "" + tagline = "> catalog" + rssLimit = 50 [taxonomies] category = "categories" @@ -20,10 +22,10 @@ theme = "hackyfeed-theme" baseName = "feed" [markup.goldmark.renderer] - unsafe = true + unsafe = false [services.rss] - limit = -1 + limit = 50 [pagination] pagerSize = 25 diff --git a/site/themes/hackyfeed-theme/layouts/_default/baseof.html b/site/themes/hackyfeed-theme/layouts/_default/baseof.html index ada5045..2671c4b 100644 --- a/site/themes/hackyfeed-theme/layouts/_default/baseof.html +++ b/site/themes/hackyfeed-theme/layouts/_default/baseof.html @@ -8,7 +8,7 @@ - {{ with .OutputFormats.Get "RSS" }}{{ end }} + {{ with .Site.Home.OutputFormats.Get "RSS" }}{{ end }} {{ partial "header.html" . }} diff --git a/site/themes/hackyfeed-theme/layouts/_default/list.html b/site/themes/hackyfeed-theme/layouts/_default/list.html index e89ed50..4d93926 100644 --- a/site/themes/hackyfeed-theme/layouts/_default/list.html +++ b/site/themes/hackyfeed-theme/layouts/_default/list.html @@ -1,6 +1,6 @@ {{ define "main" }}
-

~/hackyfeed $

+

~/{{ .Site.Title | urlize }} $

{{ .Site.Params.description }}

@@ -13,9 +13,11 @@

~/hackyfeed

- {{ range .Paginator.Pages }} + {{ $tools := where .Site.RegularPages "Section" "tools" }} + {{ $paginator := .Paginate $tools.ByDate.Reverse }} + {{ range $paginator.Pages }}
@@ -24,7 +26,7 @@

~/hackyfeed {{ with .Params.stars }}★ {{ . }}{{ end }}

{{ .Title }}

-
{{ .Summary }}
+
{{ .Params.summary | default .Description }}
{{ range .Params.categories }}{{ . }}{{ end }} diff --git a/site/themes/hackyfeed-theme/layouts/_default/single.html b/site/themes/hackyfeed-theme/layouts/_default/single.html index f239bfb..9e6dbe2 100644 --- a/site/themes/hackyfeed-theme/layouts/_default/single.html +++ b/site/themes/hackyfeed-theme/layouts/_default/single.html @@ -1,4 +1,5 @@ {{ define "main" }} +{{ if eq .Section "tools" }}
discovered {{ .Date.Format "02 Jan 2006" }}

{{ .Title }}

@@ -10,11 +11,17 @@

{{ .Title }}

{{ with .Params.github_url }}→ View on GitHub{{ end }} -
{{ .Content }}
+
{{ .Params.summary | default .Description }}
{{ range .Params.categories }}{{ . }} {{ end }} {{ range .Params.tags }}{{ . }} {{ end }}
+{{ else }} +
+

{{ .Title }}

+
{{ .Content }}
+
+{{ end }} {{ end }} diff --git a/site/themes/hackyfeed-theme/layouts/_default/taxonomy.html b/site/themes/hackyfeed-theme/layouts/_default/taxonomy.html index 6db1962..be59892 100644 --- a/site/themes/hackyfeed-theme/layouts/_default/taxonomy.html +++ b/site/themes/hackyfeed-theme/layouts/_default/taxonomy.html @@ -8,7 +8,7 @@

{{ .Title }}

{{ with .Params.language }}{{ . }}{{ end }} {{ with .Params.stars }}★ {{ . }}{{ end }}
-
{{ .Summary }}
+
{{ .Params.summary | default .Description }}
{{ end }} {{ end }} diff --git a/site/themes/hackyfeed-theme/layouts/home.rss.xml b/site/themes/hackyfeed-theme/layouts/home.rss.xml new file mode 100644 index 0000000..183dbd4 --- /dev/null +++ b/site/themes/hackyfeed-theme/layouts/home.rss.xml @@ -0,0 +1,28 @@ +{{- $limit := int (.Site.Params.rssLimit | default 50) -}} +{{- $pages := where .Site.RegularPages.ByDate.Reverse "Section" "tools" -}} +{{- $pages = first $limit $pages -}} +{{- printf "" | safeHTML }} + + + {{ .Site.Title }} + {{ .Site.BaseURL }} + {{ .Site.Params.description }} + Hugo + {{ .Site.Language.Locale }} + {{- with .OutputFormats.Get "RSS" }} + + {{- end }} + {{- range $pages }} + + {{ .Title }} + {{ .Permalink }} + {{ .Permalink }} + {{ .Date.Format "Mon, 02 Jan 2006 15:04:05 -0700" }} + {{ .Params.summary | default .Description | htmlEscape }} + {{- range .Params.categories }} + {{ . }} + {{- end }} + + {{- end }} + + diff --git a/site/themes/hackyfeed-theme/layouts/partials/footer.html b/site/themes/hackyfeed-theme/layouts/partials/footer.html index 378d2d6..6fe9c72 100644 --- a/site/themes/hackyfeed-theme/layouts/partials/footer.html +++ b/site/themes/hackyfeed-theme/layouts/partials/footer.html @@ -1,6 +1,6 @@
-

HackyFeed © {{ now.Year }} rainmana · MIT Licensed · Disclaimer

-

Tools listed are for educational purposes only. RSS Feed

+

{{ .Site.Title }} © {{ now.Year }}{{ with .Site.Params.author }} · {{ . }}{{ end }} · MIT Licensed · Disclaimer

+

Catalog entries are automated summaries; verify upstream sources. RSS Feed

diff --git a/site/themes/hackyfeed-theme/layouts/partials/header.html b/site/themes/hackyfeed-theme/layouts/partials/header.html index 924645c..82dcdec 100644 --- a/site/themes/hackyfeed-theme/layouts/partials/header.html +++ b/site/themes/hackyfeed-theme/layouts/partials/header.html @@ -1,13 +1,13 @@
-
~/hackyfeed
+
~/{{ .Site.Title | urlize }}
{{ .Site.Params.tagline }}