Most starred
Security
Offensive and defensive tooling, auditing and hardening.
Trending
New
Most starred
779 repositories ·
topics: security, cybersecurity, pentesting, security-tools
-
701Safely run your agents using any coding harness+5.0/daymeasured★ 7935
-
702Step-by-step handbook for building autonomous security agents with clear limits, runnable lessons, diagrams, and honest evidence.—stale★ 7517
-
703PHP 7.4 / 8.0 / 8.1 Docker images with the CVE-2026-109618 / CVE-2026-109619 fix backported+3.0/wkmeasured★ 7522
-
704AI 自主渗透测试 · 红队作战平台 | 多 Agent 自主推进 · 漏洞情报运营 · 后渗透与 C2 | LLM 三通道轮询 | 全程证据留痕 | 原百度攻防赛冠军项目独立演进版+2.8/daylifetime avg★ 7532
-
705Every hack, exploit and breach, live: new vulnerabilities, active exploits and breaches on one globe, with sources and one-click fixes.+27/daylifetime avg★ 7548
-
706💩 Defensive agent that finds what your frontend leaks: exposed keys, source maps, API maps and debug globals. Chrome extension + CLI.—stale★ 7419
-
707Autonomous agentic network penetration-testing tool (authorized use only)+25/daylifetime avg★ 7347
-
708Mini decentralised auth. Gives an existing auth system a key nobody holds, with governance over who can decrypt.—stale★ 7216
-
709Evidence-driven Java security review workbench+1.0/wkmeasured★ 7220
-
710Lab-RATS is a powerful and lightweight Android Remote Administration Tool full of features that enables remote monitoring, management and interaction through a sleek web interface and supports the newest modern Android releases.—stale★ 7219
-
711Open-Source Apple T1 Chip Linux Driver Bridge 2026: Touch ID, Camera and Sensor Supportflatmeasured★ 7120
-
712Passive Bluetooth neighbourhood monitor for Raspberry Pi and Linux: a live radar, device triage, categories and alerts for new devices.—stale★ 7119
-
713Go http.Client redirect policy that drops caller-set headers such as X-Api-Key when a redirect changes origin.flatmeasured★ 7017
-
714Automated Roblox Badge Bulk Deletion Tool 2026 Python Script with Token and Rate Limit Managerflatmeasured★ 7020
-
715Roblox Session Guard 2026: Anti Cookie Stealer Token Cleaner for Safe Gamingflatmeasured★ 7020
-
716RoboForm Password Manager Setup Guide for Windows 11 and 10 in 2026flatmeasured★ 7020
-
717A fetch wrapper that drops your custom auth headers when a redirect crosses to another origin.flatmeasured★ 7018
-
718SOC Automation Security Suite Installer and Update Hub 2026flatmeasured★ 7020
-
719Rebuild the JavaScript GitHub Actions your workflows pin and check that their committed dist matches the source.flatmeasured★ 6917
-
720Comodo Internet Security 2026 Setup Guide for Windows 11 and 10flatmeasured★ 6820
-
721Dr.Web Security Space Setup Guide 2026 for Windows 11 and 10flatmeasured★ 6820
-
722Open Source Safe Roblox Account Manager 2026 Secure Clean Alt Managerflatmeasured★ 6820
-
723Fast Roblox Lua Obfuscator VM 2026 Custom Bytecode CFF High Performanceflatmeasured★ 6820
-
724G Data Total Security 2026 Setup Guide for Windows 11 and 10 Install Stepsflatmeasured★ 6820
-
725AI Web Solutions and Python Automation Projects by Krish Sharma 2026flatmeasured★ 6820
-
726🛡️ Official AI Security Tool module for CVE-2026-20817 (Windows Error Reporting WER ALPC Local Privilege Escalation PoC).flatmeasured★ 6719
-
727CWE-602 客户端鉴权脆弱性白盒审计方法论与纵深防御加固研究框架+1.6/daymeasured★ 6631
-
728SOC, incident response and SecOps for Linux servers in one agent: learns each host, watches it with zero-token sensors, triages with a small model, and contains attacks under a root-owned policy. Optional hub for fleets.+6.0/daylifetime avg★ 6636
-
729CVE-2026-41089 Netlogon RCE PoC — security research, vulnerability validation & defensive testing.—stale★ 6516
-
730Track the lifetime of leaked secrets through git history - detect credential-shaped strings offline and report how long each stayed exposed.—stale★ 6416
-
731Claude Code Monitor : Monitor & audit every action Claude Code takes on your computer.—stale★ 6417
-
732High-speed web security auditor & DevSecOps dashboard for SSL, HTTP headers, DNS defenses, and port exposure.flatmeasured★ 6418
-
733Elden Ring Cheat 2026 — Single-player modding and gameplay toolkit concept featuring character build optimization, rune planning, weapon upgrades, boss strategies, save management and offline trainer research.—stale★ 6420
-
734Privacy focused NixOS pentesting environment with a customizable desktop and security tools.+3.0/wkmeasured★ 6322
-
735A honeypot and guestbook for AI agents that land on a machine they weren't invited to+1.4/daymeasured★ 6327
-
736Umbrella Spoofer v2.0.4 scans hwid reset beside hwid checker. hwid ban tally, smbios board, volume label, nic oui, snapshot pair, disk serial, caller id, device fingerprint, webgl canvases.—stale★ 6320
-
737Alice 集成技能包 · 放进去就能用 · Drop-in skill suite for AI coding agents+6.0/wkmeasured★ 6225
-
738Agentshield is open source defense for Kubernetes and AWS. It learns how your workloads really talk, flags lateral movement with evidence, and proposes fixes you approve.+4.0/wkmeasured★ 6224
-
739Self-hosted threat intelligence platform — feed aggregation, AI triage, MITRE ATT&CK coverage, and Sentinel-integrated detection engineering. Runs standalone or fully Azure-integrated.—stale★ 6018
-
740The curated hub for migrating to Rust and eliminating memory-safety vulnerabilities: AI-assisted rewrites, C2Rust case studies, production adoptions at scale, interop tooling, and the evidence behind it. Originally based on malisper/awesome-ai-rust-rewrites (CC0).—stale★ 5919
-
741Native red, blue, and purple security-agent harness for CYBER-FROST+3.0/wkmeasured★ 5924
-
742Local-first credential manager & validator for red teams / pentest:致力于 ALL IN ONE 的本地凭据管理与验证平台。 允许将红队渗透测试中获取的散落在各处的 API Key、云厂商 AK/SK、机器人 Token、邮箱授权码、登录态等集中加密保管、便捷验证与快速利用。多插件多类别,单条·批量·定时验证,内置 MCP Server;AES-256-GCM 字段级加密,每凭据可选代理出口,加密/明文备份可跨库还原;数据只存本机、不联网同步,Windows / macOS / Linux。+1.7/daymeasured★ 5928
-
743AI-driven malware analysis framework with 30+ integrated tools, web REPL, and MCP server+4.0/wkmeasured★ 5822
-
744Evidence-based PHP security assessment: patch verification, intrusion tracing, and offline reports.flatmeasured★ 5719
-
745SmuggleMyPayload generates HTML pages that embed and reconstruct files client-side using JavaScript. The toolkit offers multiple HTML Smuggling techniques, payload encoding options, JavaScript variations, and pre-built HTML templates.—stale★ 5618
-
746WireGuard, AmneziaWG, Cisco AnyConnect and Tailscale in one native, free and open-source macOS VPN client: SwiftUI app, Network Extension, kill switch, on-demand, and a wombat CLI+1.0/wkmeasured★ 5621
-
747Get correct Kahoot answers instantly and free—no limits, fees, or subscriptions. Boost your quiz scores now.—stale★ 5519
-
748MCP server for Frida.—stale★ 5418
-
749Audit AI agent tool-call transcripts: hash-chain sealing, deterministic replay, and scope overreach checks. Dependency-free Python CLI.—stale★ 5316
-
750Observe AI agent runs and control consequential actions. Signed policies, exact-action approvals, AuthZEN API vetoes and evidence. MCP gateway today; connected-channel supervision and scoped reactions toward 1.0. Experimental alpha.—stale★ 5318