9.3k repos tracked
updated 2d ago
Most starred

Security

Offensive and defensive tooling, auditing and hardening.

Trending New Most starred 779 repositories · topics: security, cybersecurity, pentesting, security-tools
  1. 701
    Safely run your agents using any coding harness
    Python created 10d ago pushed 3d ago harnessharness-aisecurity
    +5.0/day
    measured
    ★ 79
    35
  2. 702
    Step-by-step handbook for building autonomous security agents with clear limits, runnable lessons, diagrams, and honest evidence.
    Python created 2mo ago pushed 44d ago ai-agentscybersecurityharness
    —
    stale
    ★ 75
    17
  3. 703
    PHP 7.4 / 8.0 / 8.1 Docker images with the CVE-2026-109618 / CVE-2026-109619 fix backported
    Dockerfile created 17d ago pushed 17d ago backportcvecve-2026-109618
    +3.0/wk
    measured
    ★ 75
    22
  4. 704
    AI 自主渗透测试 · 红队作战平台 | 多 Agent 自主推进 · 漏洞情报运营 · 后渗透与 C2 | LLM 三通道轮询 | 全程证据留痕 | 原百度攻防赛冠军项目独立演进版
    Go created 29d ago pushed 2d ago ai-agentautonomous-agentsautonomous-pentest
    +2.8/day
    lifetime avg
    ★ 75
    32
  5. 705
    Every hack, exploit and breach, live: new vulnerabilities, active exploits and breaches on one globe, with sources and one-click fixes.
    TypeScript created 5d ago pushed 4d ago cvecybersecuritymapbox
    +27/day
    lifetime avg
    ★ 75
    48
  6. 706
    💩 Defensive agent that finds what your frontend leaks: exposed keys, source maps, API maps and debug globals. Chrome extension + CLI.
    JavaScript created 27d ago pushed 23d ago chrome-extensionclidevtools
    —
    stale
    ★ 74
    19
  7. 707
    Autonomous agentic network penetration-testing tool (authorized use only)
    Python created 5d ago pushed 3d ago agentai-agentcli
    +25/day
    lifetime avg
    ★ 73
    47
  8. 708
    Mini decentralised auth. Gives an existing auth system a key nobody holds, with governance over who can decrypt.
    Java created 2mo ago pushed 51d ago access-controlauth0authorization
    —
    stale
    ★ 72
    16
  9. 709
    Evidence-driven Java security review workbench
    Python created 40d ago pushed 27d ago code-auditcodeqldeveloper-tools
    +1.0/wk
    measured
    ★ 72
    20
  10. 710
    Lab-RATS is a powerful and lightweight Android Remote Administration Tool full of features that enables remote monitoring, management and interaction through a sleek web interface and supports the newest modern Android releases.
    Java created 2mo ago pushed 19d ago 2026androidapk
    —
    stale
    ★ 72
    19
  11. 711
    Open-Source Apple T1 Chip Linux Driver Bridge 2026: Touch ID, Camera and Sensor Support
    HTML created 46d ago pushed 3d ago androidatom-feedbot
    flat
    measured
    ★ 71
    20
  12. 712
    Passive Bluetooth neighbourhood monitor for Raspberry Pi and Linux: a live radar, device triage, categories and alerts for new devices.
    Python created 58d ago pushed 18d ago aiohttpblebluetooth
    —
    stale
    ★ 71
    19
  13. 713
    Go http.Client redirect policy that drops caller-set headers such as X-Api-Key when a redirect changes origin.
    Go created 40d ago pushed 40d ago gogolanghttp-client
    flat
    measured
    ★ 70
    17
  14. 714
    Automated Roblox Badge Bulk Deletion Tool 2026 Python Script with Token and Rate Limit Manager
    HTML created 46d ago pushed 2d ago badgesbulkcookie
    flat
    measured
    ★ 70
    20
  15. 715
    Roblox Session Guard 2026: Anti Cookie Stealer Token Cleaner for Safe Gaming
    HTML created 46d ago pushed 3d ago incident-responseinfostealerpowershell
    flat
    measured
    ★ 70
    20
  16. 716
    RoboForm Password Manager Setup Guide for Windows 11 and 10 in 2026
    HTML created 46d ago pushed 2d ago autofillcomplete-versiondownload
    flat
    measured
    ★ 70
    20
  17. 717
    A fetch wrapper that drops your custom auth headers when a redirect crosses to another origin.
    TypeScript created 40d ago pushed 32d ago fetchhttpnodejs
    flat
    measured
    ★ 70
    18
  18. 718
    SOC Automation Security Suite Installer and Update Hub 2026
    HTML created 46d ago pushed 3d ago cybersecurityfull-installergemini
    flat
    measured
    ★ 70
    20
  19. 719
    Rebuild the JavaScript GitHub Actions your workflows pin and check that their committed dist matches the source.
    TypeScript created 40d ago pushed 40d ago github-actionsnodejsreproducible-builds
    flat
    measured
    ★ 69
    17
  20. 720
    Comodo Internet Security 2026 Setup Guide for Windows 11 and 10
    HTML created 46d ago pushed 3d ago antiviruscomodocomodo-2026
    flat
    measured
    ★ 68
    20
  21. 721
    Dr.Web Security Space Setup Guide 2026 for Windows 11 and 10
    HTML created 46d ago pushed 3d ago antiviruscomplete-versiondownload
    flat
    measured
    ★ 68
    20
  22. 722
    Open Source Safe Roblox Account Manager 2026 Secure Clean Alt Manager
    HTML created 46d ago pushed 2d ago account-managerelectronroblox
    flat
    measured
    ★ 68
    20
  23. 723
    Fast Roblox Lua Obfuscator VM 2026 Custom Bytecode CFF High Performance
    HTML created 46d ago pushed 2d ago anti-tamperbytecode-compilercontrol-flow-flattening
    flat
    measured
    ★ 68
    20
  24. 724
    G Data Total Security 2026 Setup Guide for Windows 11 and 10 Install Steps
    HTML created 46d ago pushed 3d ago antiviruscomplete-versiondownload
    flat
    measured
    ★ 68
    20
  25. 725
    AI Web Solutions and Python Automation Projects by Krish Sharma 2026
    HTML created 46d ago pushed 3d ago artificial-intelligencecybersecurityfrontend
    flat
    measured
    ★ 68
    20
  26. 726
    🛡️ Official AI Security Tool module for CVE-2026-20817 (Windows Error Reporting WER ALPC Local Privilege Escalation PoC).
    created 40d ago pushed 19d ago ai-hackingai-pentestingai-security
    flat
    measured
    ★ 67
    19
  27. 727
    CWE-602 客户端鉴权脆弱性白盒审计方法论与纵深防御加固研究框架
    created 37d ago pushed 8d ago appsecclient-side-securitycwe-602
    +1.6/day
    measured
    ★ 66
    31
  28. 728
    SOC, incident response and SecOps for Linux servers in one agent: learns each host, watches it with zero-token sensors, triages with a small model, and contains attacks under a root-owned policy. Optional hub for fleets.
    Go created 13d ago pushed 5d ago ai-agentsblue-teamgo
    +6.0/day
    lifetime avg
    ★ 66
    36
  29. 729
    CVE-2026-41089 Netlogon RCE PoC — security research, vulnerability validation & defensive testing.
    created 58d ago pushed 57d ago active-directoryactive-directory-securitycve
    —
    stale
    ★ 65
    16
  30. 730
    Track the lifetime of leaked secrets through git history - detect credential-shaped strings offline and report how long each stayed exposed.
    Python created 2mo ago pushed 58d ago clicredentialsentropy
    —
    stale
    ★ 64
    16
  31. 731
    Claude Code Monitor : Monitor & audit every action Claude Code takes on your computer.
    JavaScript created 56d ago pushed 41d ago aiai-edranthropic
    —
    stale
    ★ 64
    17
  32. 732
    High-speed web security auditor & DevSecOps dashboard for SSL, HTTP headers, DNS defenses, and port exposure.
    TypeScript created 33d ago pushed 29d ago devsecopsreact19security
    flat
    measured
    ★ 64
    18
  33. 733
    Elden Ring Cheat 2026 — Single-player modding and gameplay toolkit concept featuring character build optimization, rune planning, weapon upgrades, boss strategies, save management and offline trainer research.
    HTML created 10d ago pushed 10d ago dear-imguilibsodiumsecurity
    —
    stale
    ★ 64
    20
  34. 734
    Privacy focused NixOS pentesting environment with a customizable desktop and security tools.
    CSS created 19d ago pushed 15d ago active-directorydotfileshome-manager
    +3.0/wk
    measured
    ★ 63
    22
  35. 735
    A honeypot and guestbook for AI agents that land on a machine they weren't invited to
    PowerShell created 15d ago pushed 15d ago ai-agentsflaghoneypot
    +1.4/day
    measured
    ★ 63
    27
  36. 736
    Umbrella Spoofer v2.0.4 scans hwid reset beside hwid checker. hwid ban tally, smbios board, volume label, nic oui, snapshot pair, disk serial, caller id, device fingerprint, webgl canvases.
    created 10d ago pushed 10d ago battleye-bancaller-idcybersecurity
    —
    stale
    ★ 63
    20
  37. 737
    Alice 集成技能包 · 放进去就能用 · Drop-in skill suite for AI coding agents
    Python created 46d ago pushed 39d ago agent-skillsai-agentclaude-code
    +6.0/wk
    measured
    ★ 62
    25
  38. 738
    Agentshield is open source defense for Kubernetes and AWS. It learns how your workloads really talk, flags lateral movement with evidence, and proposes fixes you approve.
    Go created 17d ago pushed 3d ago agentsartificial-intelligencedefense
    +4.0/wk
    measured
    ★ 62
    24
  39. 739
    Self-hosted threat intelligence platform — feed aggregation, AI triage, MITRE ATT&CK coverage, and Sentinel-integrated detection engineering. Runs standalone or fully Azure-integrated.
    Python created 55d ago pushed 23d ago fastapimitre-attacknextjs
    —
    stale
    ★ 60
    18
  40. 740
    The curated hub for migrating to Rust and eliminating memory-safety vulnerabilities: AI-assisted rewrites, C2Rust case studies, production adoptions at scale, interop tooling, and the evidence behind it. Originally based on malisper/awesome-ai-rust-rewrites (CC0).
    created 2mo ago pushed 21d ago awesomeawesome-listc2rust
    —
    stale
    ★ 59
    19
  41. 741
    Native red, blue, and purple security-agent harness for CYBER-FROST
    Python created 33d ago pushed 33d ago blue-teamcybergymcybersecurity
    +3.0/wk
    measured
    ★ 59
    24
  42. 742
    Local-first credential manager & validator for red teams / pentest:致力于 ALL IN ONE 的本地凭据管理与验证平台。 允许将红队渗透测试中获取的散落在各处的 API Key、云厂商 AK/SK、机器人 Token、邮箱授权码、登录态等集中加密保管、便捷验证与快速利用。多插件多类别,单条·批量·定时验证,内置 MCP Server;AES-256-GCM 字段级加密,每凭据可选代理出口,加密/明文备份可跨库还原;数据只存本机、不联网同步,Windows / macOS / Linux。
    Python created 28d ago pushed 3d ago api-keyapi-key-validatorcloud-security
    +1.7/day
    measured
    ★ 59
    28
  43. 743
    AI-driven malware analysis framework with 30+ integrated tools, web REPL, and MCP server
    Rust created 24d ago pushed 23d ago aicybersecuritydynamic-analysis
    +4.0/wk
    measured
    ★ 58
    22
  44. 744
    Evidence-based PHP security assessment: patch verification, intrusion tracing, and offline reports.
    Go created 17d ago pushed 16d ago golangincident-responsephp
    flat
    measured
    ★ 57
    19
  45. 745
    SmuggleMyPayload generates HTML pages that embed and reconstruct files client-side using JavaScript. The toolkit offers multiple HTML Smuggling techniques, payload encoding options, JavaScript variations, and pre-built HTML templates.
    Python created 53d ago pushed 26d ago adversarial-attacksc2-frameworkcybersecurity
    —
    stale
    ★ 56
    18
  46. 746
    WireGuard, AmneziaWG, Cisco AnyConnect and Tailscale in one native, free and open-source macOS VPN client: SwiftUI app, Network Extension, kill switch, on-demand, and a wombat CLI
    Swift created 24d ago pushed 5d ago amneziawganyconnectcensorship-circumvention
    +1.0/wk
    measured
    ★ 56
    21
  47. 747
    Get correct Kahoot answers instantly and free—no limits, fees, or subscriptions. Boost your quiz scores now.
    HTML created 19d ago pushed 19d ago ai-integrationcyberseccybersecurity
    —
    stale
    ★ 55
    19
  48. 748
    MCP server for Frida.
    Go created 2mo ago pushed 24d ago application-securityfridaios-security
    —
    stale
    ★ 54
    18
  49. 749
    Audit AI agent tool-call transcripts: hash-chain sealing, deterministic replay, and scope overreach checks. Dependency-free Python CLI.
    Python created 55d ago pushed 54d ago ai-agentsauditcli
    —
    stale
    ★ 53
    16
  50. 750
    Observe AI agent runs and control consequential actions. Signed policies, exact-action approvals, AuthZEN API vetoes and evidence. MCP gateway today; connected-channel supervision and scoped reactions toward 1.0. Experimental alpha.
    Go created 45d ago pushed 25d ago agent-observabilityagent-securityagentic-ai
    —
    stale
    ★ 53
    18
← previous page 15 of 16 next →