Skip to content

Latest commit

ย 

History

History
1852 lines (1548 loc) ยท 198 KB

topics.md

File metadata and controls

1852 lines (1548 loc) ยท 198 KB
Raw

Awesome Stars Awesome

A curated list of my GitHub stars! Generated by starred.

Contents

ai

  • Renset/macai - Swift powered native macOS client for Ollama, ChatGPT and compatible API-backends
  • plandex-ai/plandex - AI driven development in your terminal. Designed for large, real-world tasks.
  • dhammon/ai-goat - Learn AI security through a series of vulnerable LLM CTF challenges. No sign ups, no cloud fees, run everything locally on your system.
  • reorproject/reor - Private & local AI personal knowledge management app.
  • danielmiessler/fabric - fabric is an open-source framework for augmenting humans using AI. It provides a modular framework for solving specific problems using a crowdsourced set of AI prompts that can be used anywhere.
  • wasp-lang/open-saas - A free, open-source SaaS app starter for React & Node.js with superpowers. Production-ready. Community-driven.
  • latiotech/LAST - Use AI to Scan Your Code from the Command Line for security and code smells. Bring your own keys. Supports OpenAI and Gemini
  • projectdiscovery/nuclei-ai-extension - Nuclei AI - Browser Extension for Rapid Nuclei Template Generation
  • k8sgpt-ai/k8sgpt - Giving Kubernetes Superpowers to everyone
  • AiGptCode/Ai-Security-URL - functions to exploit common web application vulnerabilities such as SQL Injection, Cross-Site Scripting (XSS), Server-Side Request Forgery (SSRF), and Path Traversal.
  • Pythagora-io/gpt-pilot - The first real AI developer
  • s0md3v/roop - one-click face swap
  • sweepai/sweep - Sweep: open-source AI-powered Software Developer for small features and bug fixes.
  • continuedev/continue - โฉ Continue is the leading open-source AI code assistant. You can connect any models and any context to build custom autocomplete and chat experiences inside VS Code and JetBrains
  • narenmanoharan/gpt-code-assistant - gpt-code-assistant is an open-source coding assistant leveraging language models to search, retrieve, explore and understand any codebase.
  • gpt-engineer-org/gpt-engineer - Specify what you want it to build, the AI asks for clarification, and then builds it.
  • Significant-Gravitas/AutoGPT - AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.
  • builtbybel/Winpilot - The manic cousin of Microsoft Copilot

algorithm

android

  • sensepost/objection - ๐Ÿ“ฑ objection - runtime mobile exploration
  • ax/apk.sh - apk.sh makes reverse engineering Android apps easier, automating some repetitive tasks like pulling, decoding, rebuilding and patching an APK.
  • oppsec/Apepe - ๐Ÿ“ฒ Enumerate information from an app based on the APK file
  • mvt-project/mvt - MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.

ansible

api

  • erev0s/VAmPI - Vulnerable REST API with OWASP top 10 vulnerabilities for security testing
  • adegans/Goosle - The best Meta Search engine running on simple PHP servers that keeps privacy and ease of use in mind!
  • zigzap/zap - blazingly fast backends in zig
  • unkeyed/unkey - Open source API management platform
  • MrEmpy/mantra - ใ€Œ๐Ÿ”‘ใ€A tool used to hunt down API key leaks in JS files and pages

artificial-intelligence

  • twinnydotdev/twinny - The most no-nonsense, locally or API-hosted AI code completion plugin for Visual Studio Code - like GitHub Copilot but completely free and 100% private.
  • OpenDevin/OpenDevin - ๐Ÿš OpenDevin: Code Less, Make More
  • taranis-ai/taranis-ai - Taranis AI is an advanced Open-Source Intelligence (OSINT) tool, leveraging Artificial Intelligence to revolutionize information gathering and situational analysis.
  • Significant-Gravitas/AutoGPT - AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.
  • Ciphey/Ciphey - โšก Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes โšก

automation

awesome

awesome-list

aws

  • prowler-cloud/prowler - Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness.
  • gabrielsoltz/metahub - MetaHub is an automated contextual security findings enrichment and impact evaluation tool for vulnerability management.
  • rootcathacking/catspin - Catspin rotates the IP address of HTTP requests making IP based blocks or slowdown measures ineffective. It is based on AWS API Gateway and deployed via AWS Cloudformation.
  • RhinoSecurityLabs/pacu - The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
  • cado-security/varc - Volatile Artifact Collector collects a snapshot of volatile data from a system. It tells you what is happening on a system, and is of particular use when investigating a security incident.
  • Zeus-Labs/ZeusCloud - Open Source Cloud Security
  • padok-team/yatas - ๐Ÿฆ‰๐Ÿ”Ž A simple tool to audit your AWS/GCP infrastructure for misconfiguration or potential security issues with plugins integration

azure

  • prowler-cloud/prowler - Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness.

backend

  • Dokploy/dokploy - Open Source Alternative to Vercel, Netlify and Heroku.
  • TailAdmin/tailadmin-free-tailwind-dashboard-template - Free and Open-source Tailwind CSS Dashboard Admin Template that comes with all essential dashboard UI components, pages and elements
  • LeCoupa/awesome-cheatsheets - ๐Ÿ‘ฉโ€๐Ÿ’ป๐Ÿ‘จโ€๐Ÿ’ป Awesome cheatsheets for popular programming languages, frameworks and development tools. They include everything you should know in one single file.

bash

  • junegunn/fzf - ๐ŸŒธ A command-line fuzzy finder
  • v1s1t0r1sh3r3/airgeddon - This is a multi-use bash script for Linux systems to audit wireless networks.
  • MegaManSec/SSH-Snake - SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.
  • Trevohack/DynastyPersist - A Linux persistence tool!
  • LeCoupa/awesome-cheatsheets - ๐Ÿ‘ฉโ€๐Ÿ’ป๐Ÿ‘จโ€๐Ÿ’ป Awesome cheatsheets for popular programming languages, frameworks and development tools. They include everything you should know in one single file.
  • microsoft/inshellisense - IDE style command line auto complete

bot

  • Renset/macai - Swift powered native macOS client for Ollama, ChatGPT and compatible API-backends

bugbounty

  • blacklanternsecurity/bbot - A recursive internet scanner for hackers.
  • TupleType/awesome-cicd-attacks - Practical resources for offensive CI/CD security research. Curated the best resources I've seen since 2021.
  • RevoltSecurities/Subdominator - SubDominator helps you discover subdomains associated with a target domain efficiently and with minimal impact for your Bug Bounty
  • projectdiscovery/httpx - httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
  • chiasmod0n/chiasmodon - Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves around searching for domain-related data, including do
  • Azathothas/Arsenal - Hastly written Tools & Scripts for Personal Use Cases & Bug Bounties
  • projectdiscovery/subfinder - Fast passive subdomain enumeration tool.
  • devploit/nomore403 - Tool to bypass 403/40X response codes.
  • six2dez/reconftw - reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
  • yogeshojha/rengine - reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous mon
  • justakazh/DockerExploit - Docker Remote API Scanner and Exploit
  • i5nipe/nipejs - Simplify your life with leak detection in JavaScript. NipeJS streamlines the use of regex, making it effortless to uncover potential leaks.
  • trickest/inventory - Asset inventory of over 800 public bug bounty programs.
  • psbelin/ip_widget - Taskbar IP widget for kali linux (or any distro running XFCE)
  • codingo/NoSQLMap - Automated NoSQL database enumeration and web application exploitation tool.
  • swisskyrepo/PayloadsAllTheThings - A list of useful payloads and bypass for Web Application Security and Pentest/CTF
  • gotr00t0day/Gsec - Web Security Scanner
  • h4r5h1t/webcopilot - An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities.
  • cosad3s/postleaks - Search for sensitive data in Postman public library.
  • redhuntlabs/BucketLoot - BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-exp
  • Anof-cyber/ParaForge - A BurpSuite extension to create a custom word-list of endpoint and parameters for enumeration and fuzzing
  • GhostTroops/scan4all - Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( อกยฐ อœส– อกยฐ)...
  • commixproject/commix - Automated All-in-One OS Command Injection Exploitation Tool.
  • pikpikcu/nodesub - Nodesub is a command-line tool for finding subdomains in bug bounty programs
  • iknowjason/edge - Recon tool for cloud provider attribution. Supports AWS, Azure, Google, Cloudflare, and Digital Ocean.
  • Zeus-Labs/ZeusCloud - Open Source Cloud Security
  • j3ssie/metabigor - OSINT tools and more but without API key
  • MrEmpy/mantra - ใ€Œ๐Ÿ”‘ใ€A tool used to hunt down API key leaks in JS files and pages
  • RapidDNS/Afuzz - Afuzz is an automated web path fuzzing tool for the Bug Bounty projects.

c

chatgpt

  • Renset/macai - Swift powered native macOS client for Ollama, ChatGPT and compatible API-backends
  • paul-gauthier/aider - aider is AI pair programming in your terminal
  • wasp-lang/open-saas - A free, open-source SaaS app starter for React & Node.js with superpowers. Production-ready. Community-driven.
  • morpheuslord/GPT_Vuln-analyzer - Uses ChatGPT API, Bard API, and Llama2, Python-Nmap, DNS Recon, PCAP and JWT recon modules and uses the GPT3 model to create vulnerability reports based on Nmap scan data, and DNS scan information. It
  • continuedev/continue - โฉ Continue is the leading open-source AI code assistant. You can connect any models and any context to build custom autocomplete and chat experiences inside VS Code and JetBrains
  • ramon-victor/freegpt-webui - GPT 3.5/4 with a Chat Web UI. No API key required.
  • steven-tey/novel - Notion-style WYSIWYG editor with AI-powered autocompletion.
  • mlc-ai/web-llm - High-performance In-browser LLM Inference Engine

chatgpt-api

  • Renset/macai - Swift powered native macOS client for Ollama, ChatGPT and compatible API-backends
  • wasp-lang/open-saas - A free, open-source SaaS app starter for React & Node.js with superpowers. Production-ready. Community-driven.
  • morpheuslord/GPT_Vuln-analyzer - Uses ChatGPT API, Bard API, and Llama2, Python-Nmap, DNS Recon, PCAP and JWT recon modules and uses the GPT3 model to create vulnerability reports based on Nmap scan data, and DNS scan information. It
  • ramon-victor/freegpt-webui - GPT 3.5/4 with a Chat Web UI. No API key required.

chrome

chrome-extension

  • zdhenard42/SOC-Multitool - A powerful and user-friendly browser extension that streamlines investigations for security professionals.
  • LasCC/HackTools - The all-in-one browser extension for offensive security professionals ๐Ÿ› 

cli

  • blacklanternsecurity/bbot - A recursive internet scanner for hackers.
  • paul-gauthier/aider - aider is AI pair programming in your terminal
  • junegunn/fzf - ๐ŸŒธ A command-line fuzzy finder
  • plandex-ai/plandex - AI driven development in your terminal. Designed for large, real-world tasks.
  • projectdiscovery/httpx - httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
  • dvcoolarun/web2pdf - ๐Ÿ”„ CLI to convert Webpages to PDFs ๐Ÿš€
  • JoshuaKasa/van-gonography - Hide ๐Ÿ•ต๏ธโ€โ™‚๏ธ your files of any type inside a image of your choice using steganography
  • microsoft/inshellisense - IDE style command line auto complete
  • redhuntlabs/BucketLoot - BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-exp
  • antonmedv/walk - Terminal file manager
  • Infisical/infisical - โ™พ Infisical is the open-source secret management platform: Sync secrets across your team/infrastructure, prevent secret leaks, and manage internal PKI
  • nosarthur/gita - Manage many git repos with sanity ไปŽๅฎน็ฎก็†ๅคšไธชgitๅบ“
  • padok-team/yatas - ๐Ÿฆ‰๐Ÿ”Ž A simple tool to audit your AWS/GCP infrastructure for misconfiguration or potential security issues with plugins integration
  • sherlock-project/sherlock - Hunt down social media accounts by username across social networks

code

  • GitGuardian/ggshield - Find and fix 360+ types of hardcoded secrets and 70+ types of infrastructure-as-code misconfigurations.
  • narenmanoharan/gpt-code-assistant - gpt-code-assistant is an open-source coding assistant leveraging language models to search, retrieve, explore and understand any codebase.

code-quality

  • tcosolutions/betterscan-ce - Code Scanning/SAST/Static Analysis/Linting using many tools/Scanners + OpenAI GPT with One Report (Code, IaC) - Betterscan Community Edition (CE)

compiler

  • wasp-lang/wasp - The fastest way to develop full-stack web apps with React & Node.js.

config

cpp

  • Idov31/Nidhogg - Nidhogg is an all-in-one simple to use rootkit.
  • x64dbg/x64dbg - An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
  • Ciphey/Ciphey - โšก Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes โšก

cryptocurrency

  • MetaOSINT/MetaOSINT.github.io - A tool to quickly identify relevant, publicly-available open source intelligence ("OSINT") tools and resources, saving valuable time during investigations, research, and analysis.

cryptography

  • devploit/awesome-ctf-resources - A list of Capture The Flag (CTF) frameworks, libraries, resources and software for started/experienced CTF players ๐Ÿšฉ
  • PrivateBin/PrivateBin - A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.
  • samuel-lucas6/Cryptography-Guidelines - Guidance on implementing cryptography as a developer.
  • Ciphey/Ciphey - โšก Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes โšก
  • KuroLabs/stegcloak - Hide secrets with invisible characters in plain text securely using passwords ๐Ÿง™๐Ÿปโ€โ™‚๏ธโญ

crystal

  • owasp-noir/noir - Attack surface detector that identifies endpoints by static analysis

csharp

css

  • sveltecult/franken-ui - Franken UI is an HTML-first, open-source library of UI components that works as a standalone or as a Tailwind CSS plugin. It is compatible with UIkit 3. The design is influenced by shadcn/ui.
  • adegans/Goosle - The best Meta Search engine running on simple PHP servers that keeps privacy and ease of use in mind!
  • jjranalli/nightwind - An automatic, customisable, overridable Tailwind dark mode plugin
  • biomejs/biome - A toolchain for web projects, aimed to provide functionalities to maintain them. Biome offers formatter and linter, usable via CLI and LSP.
  • chakra-ui/panda - ๐Ÿผ Universal, Type-Safe, CSS-in-JS Framework for Product Teams โšก๏ธ

cybersecurity

  • chaitin/SafeLine - A web security gateway, serve as a reverse proxy to protect your websites from attacks and exploits.
  • mitre/caldera - Automated Adversary Emulation Platform
  • MetaOSINT/MetaOSINT.github.io - A tool to quickly identify relevant, publicly-available open source intelligence ("OSINT") tools and resources, saving valuable time during investigations, research, and analysis.
  • projectdiscovery/httpx - httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
  • danieldurnea/FBI-tools - ๐Ÿ•ต๏ธ OSINT Tools for gathering information and actions forensics ๐Ÿ•ต๏ธ
  • Geeoon/DNS-Tunnel-Keylogger - Keylogging server and client that uses DNS tunneling/exfiltration to transmit keystrokes through firewalls.
  • noraj/haiti - ๐Ÿ”‘ Hash type identifier (CLI & lib)
  • Lissy93/personal-security-checklist - ๐Ÿ”’ A compiled checklist of 300+ tips for protecting digital security and privacy in 2024
  • fkkarakurt/reconic - A Powerful Network Reconnaissance Tool for Security Professionals
  • justakazh/DockerExploit - Docker Remote API Scanner and Exploit
  • freelabz/secator - secator - the pentester's swiss knife
  • HalilDeniz/PacketSpy - PacketSpy
  • future-architect/vuls - Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
  • MegaManSec/SSH-Snake - SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.
  • gbiagomba/Sherlock - This script is designed to help expedite a web application assessment by automating some of the assessment steps (e.g., running nmap, sublist3r, metasploit, etc.)
  • taranis-ai/taranis-ai - Taranis AI is an advanced Open-Source Intelligence (OSINT) tool, leveraging Artificial Intelligence to revolutionize information gathering and situational analysis.
  • AleksaMCode/Preferred-Network-List-Sniffer - A reconnaissance tool for capturing and displaying SSIDs from device's Preferred Network List.
  • OpenCTI-Platform/opencti - Open Cyber Threat Intelligence Platform
  • dragonked2/Egyscan - Egyscan The Best web vulnerability scanner; it's a multifaceted security powerhouse designed to fortify your web applications against malicious threats. Let's delve into the tasks and functions that m
  • devXprite/infoooze - A OSINT tool which helps you to quickly find information effectively. All you need is to input and it will take take care of rest.
  • rfc-st/humble - A humble, and ๐—ณ๐—ฎ๐˜€๐˜, security-oriented HTTP headers analyzer.
  • lewiswigmore/Virus.xcheck - Virus.xcheck is a Python tool designed to bulk verify the existence of file hashes in the Virus Exchange database and fetch download URLs for malware analysis.
  • Idov31/Nidhogg - Nidhogg is an all-in-one simple to use rootkit.
  • HalilDeniz/NetworkAssessment - NetworkAssessment: Network Compromise Assessment Tool
  • HalilDeniz/TrafficWatch - TrafficWatch, a packet sniffer tool, allows you to monitor and analyze network traffic from PCAP files
  • cisagov/LME - Logging Made Easy (LME) is a no-cost and open logging and protective monitoring solution serving all organizations.
  • fr0gger/Awesome-GPT-Agents - A curated list of GPT agents for cybersecurity
  • franckferman/MetaDetective - ๐Ÿ•ต๏ธ Unleash Metadata Intelligence with MetaDetective. Your Assistant Beyond Metagoofil.
  • gotr00t0day/Gsec - Web Security Scanner
  • redhuntlabs/Octopii - An AI-powered Personal Identifiable Information (PII) scanner.
  • MattKeeley/Spoofy - Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records.
  • redhuntlabs/BucketLoot - BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-exp
  • D00Movenok/BounceBack - โ†•๏ธ๐Ÿคซ Stealth redirector for your red team operation security
  • Anof-cyber/ParaForge - A BurpSuite extension to create a custom word-list of endpoint and parameters for enumeration and fuzzing
  • x64dbg/x64dbg - An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
  • Fundacio-i2CAT/InfoHound - InfoHound is an OSINT to extract a large amount of data given a web domain name.
  • D00Movenok/HTMLSmuggler - โœ‰๏ธ HTML Smuggling generator&obfuscator for your Red Team operations
  • t3l3machus/Villain - Villain is a high level stage 0/1 C2 framework that can handle multiple TCP socket & HoaxShell-based reverse shells, enhance their functionality with additional features (commands, utilities) and shar
  • 3nock/OTE - OSINT Template Engine
  • Fadi002/unshackle - Open-source tool to bypass windows and linux passwords from bootable usb
  • Zeus-Labs/ZeusCloud - Open Source Cloud Security
  • zdhenard42/SOC-Multitool - A powerful and user-friendly browser extension that streamlines investigations for security professionals.
  • p1ngul1n0/blackbird - An OSINT tool to search for accounts by username and email in social networks.
  • Drew-Alleman/DataSurgeon - Quickly Extracts IP's, Email Addresses, Hashes, Files, Credit Cards, Social Security Numbers and a lot More From Text
  • sherlock-project/sherlock - Hunt down social media accounts by username across social networks

data

data-visualization

  • Abhinandan-Kushwaha/react-native-gifted-charts - The most complete library for Bar, Line, Area, Pie, Donut, Stacked Bar and Population Pyramid charts in React Native. Allows 2D, 3D, gradient, animations and live data updates.
  • jerlendds/osintbuddy - Node graphs, OSINT data mining, and plugins. Connect unstructured and public data for transformative insights

database

  • brocoders/nestjs-boilerplate - NestJS boilerplate. Auth, TypeORM, Mongoose, Postgres, MongoDB, Mailing, I18N, Docker.
  • teableio/teable - โœจ The Next Gen Airtable Alternative: No-Code Postgres
  • JoelGMSec/LeakSearch - Search & Parse Password Leaks
  • adaptive-scale/dbchaos - Stress-test your database with pre-defined queries. Generate synthetic data and events statically or with GPT.
  • LeCoupa/awesome-cheatsheets - ๐Ÿ‘ฉโ€๐Ÿ’ป๐Ÿ‘จโ€๐Ÿ’ป Awesome cheatsheets for popular programming languages, frameworks and development tools. They include everything you should know in one single file.
  • porsager/postgres - Postgres.js - The Fastest full featured PostgreSQL client for Node.js, Deno, Bun and CloudFlare
  • authzed/spicedb - Open Source, Google Zanzibar-inspired permissions database to enable fine-grained authorization for customer applications
  • eosphoros-ai/DB-GPT - AI Native Data App Development framework with AWEL(Agentic Workflow Expression Language) and Agents

deep-learning

deno

  • porsager/postgres - Postgres.js - The Fastest full featured PostgreSQL client for Node.js, Deno, Bun and CloudFlare

deployment

devops

  • Dokploy/dokploy - Open Source Alternative to Vercel, Netlify and Heroku.
  • awesome-foss/awesome-sysadmin - A curated list of amazingly awesome open-source sysadmin resources.
  • serversideup/spin - ๐Ÿš€ Replicate your production environment locally using Docker. Just run "spin up". It's really that easy.
  • tcosolutions/betterscan-ce - Code Scanning/SAST/Static Analysis/Linting using many tools/Scanners + OpenAI GPT with One Report (Code, IaC) - Betterscan Community Edition (CE)
  • k8sgpt-ai/k8sgpt - Giving Kubernetes Superpowers to everyone
  • trimstray/the-book-of-secret-knowledge - A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
  • cuber-cloud/cuber-gem - An automation tool that simplify the deployment of your apps on Kubernetes.
  • CISOfy/lynis - Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
  • cider-security-research/cicd-goat - A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

django

  • LeCoupa/awesome-cheatsheets - ๐Ÿ‘ฉโ€๐Ÿ’ป๐Ÿ‘จโ€๐Ÿ’ป Awesome cheatsheets for popular programming languages, frameworks and development tools. They include everything you should know in one single file.
  • makeplane/plane - ๐Ÿ”ฅ ๐Ÿ”ฅ ๐Ÿ”ฅ Open Source JIRA, Linear and Asana Alternative. Plane helps you track your issues, epics, and product roadmaps in the simplest way possible.

docker

  • brocoders/nestjs-boilerplate - NestJS boilerplate. Auth, TypeORM, Mongoose, Postgres, MongoDB, Mailing, I18N, Docker.
  • Stirling-Tools/Stirling-PDF - #1 Locally hosted web application that allows you to perform various operations on PDF files
  • Dokploy/dokploy - Open Source Alternative to Vercel, Netlify and Heroku.
  • veggiemonk/awesome-docker - ๐Ÿณ A curated list of Docker resources and projects
  • justakazh/DockerExploit - Docker Remote API Scanner and Exploit
  • oppsec/tomcter - ๐Ÿ˜น Tomcter is a python tool developed to bruteforce Apache Tomcat manager login with default credentials.
  • serversideup/spin - ๐Ÿš€ Replicate your production environment locally using Docker. Just run "spin up". It's really that easy.
  • dani-garcia/vaultwarden - Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs
  • oppsec/juumla - ๐Ÿฆ Juumla is a python tool created to identify Joomla version, scan for vulnerabilities and sensitive files
  • goodwithtech/dockle - Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start
  • LeCoupa/awesome-cheatsheets - ๐Ÿ‘ฉโ€๐Ÿ’ป๐Ÿ‘จโ€๐Ÿ’ป Awesome cheatsheets for popular programming languages, frameworks and development tools. They include everything you should know in one single file.
  • searxng/searxng-docker - The docker-compose files for setting up a SearXNG instance with docker.
  • deepfence/SecretScanner - ๐Ÿ”“ ๐Ÿ”“ Find secrets and passwords in container images and file systems ๐Ÿ”“ ๐Ÿ”“
  • cuber-cloud/cuber-gem - An automation tool that simplify the deployment of your apps on Kubernetes.
  • makeplane/plane - ๐Ÿ”ฅ ๐Ÿ”ฅ ๐Ÿ”ฅ Open Source JIRA, Linear and Asana Alternative. Plane helps you track your issues, epics, and product roadmaps in the simplest way possible.

dotfiles

  • keidarcy/dotfiles - Robust & colorful dot configuration and utilities files with CI check ๐Ÿฆ„๐Ÿฆ„.
  • jayharris/dotfiles-windows - dotfiles for Windows, including Developer-minded system defaults. Built in PowerShell

education

ethereum

firefox

flask

framework

  • sveltecult/franken-ui - Franken UI is an HTML-first, open-source library of UI components that works as a standalone or as a Tailwind CSS plugin. It is compatible with UIkit 3. The design is influenced by shadcn/ui.
  • sensepost/objection - ๐Ÿ“ฑ objection - runtime mobile exploration
  • redeye-framework/Redeye - Redeye is a tool intended to help you manage your data during a pentest operation
  • PhoenixC2/PhoenixC2 - Command & Control-Framework created for collaboration in python3

frontend

  • Dokploy/dokploy - Open Source Alternative to Vercel, Netlify and Heroku.
  • LeCoupa/awesome-cheatsheets - ๐Ÿ‘ฉโ€๐Ÿ’ป๐Ÿ‘จโ€๐Ÿ’ป Awesome cheatsheets for popular programming languages, frameworks and development tools. They include everything you should know in one single file.

git

  • plandex-ai/plandex - AI driven development in your terminal. Designed for large, real-world tasks.
  • nosarthur/gita - Manage many git repos with sanity ไปŽๅฎน็ฎก็†ๅคšไธชgitๅบ“
  • commitizen/cz-cli - The commitizen command line utility. #BlackLivesMatter
  • gitleaks/gitleaks - Protect and discover secrets using Gitleaks ๐Ÿ”‘

github

  • powerexploit/Ashok - Ashok is a OSINT Recon Tool , a.k.a ๐Ÿ˜ Swiss Army knife .
  • dolmen/github-keygen - Easy creation of secure SSH configuration for your GitHub account(s)
  • devXprite/infoooze - A OSINT tool which helps you to quickly find information effectively. All you need is to input and it will take take care of rest.
  • synacktiv/nord-stream - Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently supports Azure DevOps, GitHub and GitLab.
  • carlospolop/PurplePanda - Identify privilege escalation paths within and across different clouds

github-config

  • BEPb/BEPb - Config files for my GitHub profile.

go

  • ollama/ollama - Get up and running with Llama 3, Mistral, Gemma 2, and other large language models.
  • smallstep/certificates - ๐Ÿ›ก๏ธ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.
  • junegunn/fzf - ๐ŸŒธ A command-line fuzzy finder
  • OJ/gobuster - Directory/File, DNS and VHost busting tool written in Go
  • future-architect/vuls - Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
  • goodwithtech/dockle - Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start
  • DedSecInside/TorBot - Dark Web OSINT Tool
  • semgrep/semgrep - Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
  • nodauf/Girsh - Automatically spawn a reverse shell fully interactive for Linux or Windows victim
  • Infisical/infisical - โ™พ Infisical is the open-source secret management platform: Sync secrets across your team/infrastructure, prevent secret leaks, and manage internal PKI
  • PhoenixC2/PhoenixC2 - Command & Control-Framework created for collaboration in python3
  • gitleaks/gitleaks - Protect and discover secrets using Gitleaks ๐Ÿ”‘

golang

  • ollama/ollama - Get up and running with Llama 3, Mistral, Gemma 2, and other large language models.
  • plandex-ai/plandex - AI driven development in your terminal. Designed for large, real-world tasks.
  • future-architect/vuls - Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
  • 0x4D31/galah - Galah: An LLM-powered web honeypot. Wasting attackers' time with faker-than-ever HTTP responses!
  • gophish/gophish - Open-Source Phishing Toolkit
  • goodwithtech/dockle - Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start
  • AdguardTeam/AdGuardHome - Network-wide ads & trackers blocking DNS server
  • BishopFox/sliver - Adversary Emulation Framework
  • GhostTroops/scan4all - Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( อกยฐ อœส– อกยฐ)...
  • seekr-osint/seekr - A multi-purpose OSINT toolkit with a neat web-interface.
  • nodauf/Girsh - Automatically spawn a reverse shell fully interactive for Linux or Windows victim
  • Infisical/infisical - โ™พ Infisical is the open-source secret management platform: Sync secrets across your team/infrastructure, prevent secret leaks, and manage internal PKI
  • jpillora/chisel - A fast TCP/UDP tunnel over HTTP
  • gitleaks/gitleaks - Protect and discover secrets using Gitleaks ๐Ÿ”‘

graphql

hacking

  • blacklanternsecurity/bbot - A recursive internet scanner for hackers.
  • adeptex/whispers - Identify hardcoded secrets in static structured text (version 2)
  • CleasbyCode/jdvrif - Hide data within JPG images using this steganography-like privacy tool. Post images on Mastodon and other hosting sites.
  • FLOCK4H/Freeway - WiFi Penetration Testing & Auditing Tool
  • TupleType/awesome-cicd-attacks - Practical resources for offensive CI/CD security research. Curated the best resources I've seen since 2021.
  • mitre/caldera - Automated Adversary Emulation Platform
  • wddadk/Offensive-OSINT-Tools - OffSec OSINT Pentest/RedTeam Tools
  • diego-treitos/linux-smart-enumeration - Linux enumeration tool for pentesting and CTFs with verbosity levels
  • samratashok/nishang - Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
  • Azathothas/Arsenal - Hastly written Tools & Scripts for Personal Use Cases & Bug Bounties
  • danieldurnea/FBI-tools - ๐Ÿ•ต๏ธ OSINT Tools for gathering information and actions forensics ๐Ÿ•ต๏ธ
  • noraj/haiti - ๐Ÿ”‘ Hash type identifier (CLI & lib)
  • projectdiscovery/subfinder - Fast passive subdomain enumeration tool.
  • six2dez/reconftw - reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
  • devploit/awesome-ctf-resources - A list of Capture The Flag (CTF) frameworks, libraries, resources and software for started/experienced CTF players ๐Ÿšฉ
  • v1s1t0r1sh3r3/airgeddon - This is a multi-use bash script for Linux systems to audit wireless networks.
  • yogeshojha/rengine - reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous mon
  • freelabz/secator - secator - the pentester's swiss knife
  • MegaManSec/SSH-Snake - SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.
  • AleksaMCode/Preferred-Network-List-Sniffer - A reconnaissance tool for capturing and displaying SSIDs from device's Preferred Network List.
  • trickest/inventory - Asset inventory of over 800 public bug bounty programs.
  • Frissi0n/GTFONow - Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins.
  • infosecn1nja/Red-Teaming-Toolkit - This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.
  • rootcathacking/catspin - Catspin rotates the IP address of HTTP requests making IP based blocks or slowdown measures ineffective. It is based on AWS API Gateway and deployed via AWS Cloudformation.
  • devXprite/infoooze - A OSINT tool which helps you to quickly find information effectively. All you need is to input and it will take take care of rest.
  • codingo/NoSQLMap - Automated NoSQL database enumeration and web application exploitation tool.
  • swisskyrepo/PayloadsAllTheThings - A list of useful payloads and bypass for Web Application Security and Pentest/CTF
  • Trevohack/DynastyPersist - A Linux persistence tool!
  • factionsecurity/faction - Pen Test Report Generation and Assessment Collaboration
  • t3l3machus/BabelStrike - The purpose of this tool is: 1. to transliterate and generate possible usernames out of a full names list that may include names written in multiple (non-English) languages, common problem occurring f
  • DedSecInside/TorBot - Dark Web OSINT Tool
  • AiGptCode/Ai-Security-URL - functions to exploit common web application vulnerabilities such as SQL Injection, Cross-Site Scripting (XSS), Server-Side Request Forgery (SSRF), and Path Traversal.
  • trickest/find-gh-poc - Find CVE PoCs on GitHub
  • trickest/cve - Gather and update all available and newest CVEs with their PoC.
  • gotr00t0day/Gsec - Web Security Scanner
  • trimstray/the-book-of-secret-knowledge - A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
  • The-Viper-One/PsMapExec - A PowerShell tool that takes strong inspiration from CrackMapExec / NetExec
  • Pennyw0rth/NetExec - The Network Execution Tool
  • x64dbg/x64dbg - An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
  • t3l3machus/Villain - Villain is a high level stage 0/1 C2 framework that can handle multiple TCP socket & HoaxShell-based reverse shells, enhance their functionality with additional features (commands, utilities) and shar
  • 3nock/OTE - OSINT Template Engine
  • Fadi002/unshackle - Open-source tool to bypass windows and linux passwords from bootable usb
  • PhoenixC2/PhoenixC2 - Command & Control-Framework created for collaboration in python3
  • MrEmpy/mantra - ใ€Œ๐Ÿ”‘ใ€A tool used to hunt down API key leaks in JS files and pages
  • LasCC/HackTools - The all-in-one browser extension for offensive security professionals ๐Ÿ› 
  • Ciphey/Ciphey - โšก Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes โšก
  • Drew-Alleman/DataSurgeon - Quickly Extracts IP's, Email Addresses, Hashes, Files, Credit Cards, Social Security Numbers and a lot More From Text
  • jaykali/maskphish - Introducing "URL Making Technology" to the world for the very FIRST TIME. Give a Mask to Phishing URL like a PRO.. A MUST have tool for Phishing.
  • KuroLabs/stegcloak - Hide secrets with invisible characters in plain text securely using passwords ๐Ÿง™๐Ÿปโ€โ™‚๏ธโญ
  • t3l3machus/psudohash - Generates millions of keyword-based password mutations in seconds.

hacking-tool

  • powerexploit/Ashok - Ashok is a OSINT Recon Tool , a.k.a ๐Ÿ˜ Swiss Army knife .
  • adeptex/whispers - Identify hardcoded secrets in static structured text (version 2)
  • CleasbyCode/jdvrif - Hide data within JPG images using this steganography-like privacy tool. Post images on Mastodon and other hosting sites.
  • The-Z-Labs/linux-exploit-suggester - Linux privilege escalation auditing tool
  • AleksaMCode/Preferred-Network-List-Sniffer - A reconnaissance tool for capturing and displaying SSIDs from device's Preferred Network List.
  • codingo/NoSQLMap - Automated NoSQL database enumeration and web application exploitation tool.
  • AiGptCode/Ai-Security-URL - functions to exploit common web application vulnerabilities such as SQL Injection, Cross-Site Scripting (XSS), Server-Side Request Forgery (SSRF), and Path Traversal.
  • t3l3machus/Villain - Villain is a high level stage 0/1 C2 framework that can handle multiple TCP socket & HoaxShell-based reverse shells, enhance their functionality with additional features (commands, utilities) and shar
  • Fadi002/unshackle - Open-source tool to bypass windows and linux passwords from bootable usb
  • jaykali/maskphish - Introducing "URL Making Technology" to the world for the very FIRST TIME. Give a Mask to Phishing URL like a PRO.. A MUST have tool for Phishing.
  • KuroLabs/stegcloak - Hide secrets with invisible characters in plain text securely using passwords ๐Ÿง™๐Ÿปโ€โ™‚๏ธโญ
  • t3l3machus/psudohash - Generates millions of keyword-based password mutations in seconds.

hacking-tools

  • MegaManSec/SSH-Snake - SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.
  • AleksaMCode/Preferred-Network-List-Sniffer - A reconnaissance tool for capturing and displaying SSIDs from device's Preferred Network List.
  • morpheuslord/GPT_Vuln-analyzer - Uses ChatGPT API, Bard API, and Llama2, Python-Nmap, DNS Recon, PCAP and JWT recon modules and uses the GPT3 model to create vulnerability reports based on Nmap scan data, and DNS scan information. It
  • Fadi002/unshackle - Open-source tool to bypass windows and linux passwords from bootable usb
  • jaykali/maskphish - Introducing "URL Making Technology" to the world for the very FIRST TIME. Give a Mask to Phishing URL like a PRO.. A MUST have tool for Phishing.
  • KuroLabs/stegcloak - Hide secrets with invisible characters in plain text securely using passwords ๐Ÿง™๐Ÿปโ€โ™‚๏ธโญ

hacktoberfest

  • projectdiscovery/httpx - httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
  • noraj/haiti - ๐Ÿ”‘ Hash type identifier (CLI & lib)
  • Lissy93/personal-security-checklist - ๐Ÿ”’ A compiled checklist of 300+ tips for protecting digital security and privacy in 2024
  • konstruktoid/ansible-role-hardening - Ansible role to apply a security baseline. Systemd edition.
  • Cvar1984/sussyfinder - Single PHP file to detect potentially malicious threats based on token and hash with web interface and VirusTotal integrations. Contact me for premium apps fully integrated with VirusTotal and 10+ mor
  • oppsec/tomcter - ๐Ÿ˜น Tomcter is a python tool developed to bruteforce Apache Tomcat manager login with default credentials.
  • wasp-lang/wasp - The fastest way to develop full-stack web apps with React & Node.js.
  • dani-garcia/vaultwarden - Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs
  • konstruktoid/hardening - Hardening Ubuntu. Systemd edition.
  • tamjid0x01/SmartContracts-audit-checklist - A checklist of things to look for when auditing Solidity smart contracts.
  • eraser-dev/eraser - ๐Ÿงน Cleaning up images from Kubernetes nodes
  • oppsec/juumla - ๐Ÿฆ Juumla is a python tool created to identify Joomla version, scan for vulnerabilities and sensitive files
  • codingo/NoSQLMap - Automated NoSQL database enumeration and web application exploitation tool.
  • swisskyrepo/PayloadsAllTheThings - A list of useful payloads and bypass for Web Application Security and Pentest/CTF
  • swisskyrepo/InternalAllTheThings - Active Directory and Internal Pentest Cheatsheets
  • DedSecInside/TorBot - Dark Web OSINT Tool
  • cloudcommunity/Free-Certifications - A curated list of free courses & certifications.
  • aquasecurity/kube-bench - Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
  • searxng/searxng - SearXNG is a free internet metasearch engine which aggregates results from various search services and databases. Users are neither tracked nor profiled.
  • secdev/scapy - Scapy: the Python-based interactive packet manipulation program & library.
  • deepfence/SecretScanner - ๐Ÿ”“ ๐Ÿ”“ Find secrets and passwords in container images and file systems ๐Ÿ”“ ๐Ÿ”“
  • globocom/secDevLabs - A laboratory for learning secure web and mobile development in a practical manner.
  • oppsec/Pinkerton - ๐Ÿ•ต๏ธ Pinkerton is an JavaScript file crawler and secret finder tool developed in Python
  • cado-security/varc - Volatile Artifact Collector collects a snapshot of volatile data from a system. It tells you what is happening on a system, and is of particular use when investigating a security incident.
  • logto-io/logto - ๐Ÿง‘โ€๐Ÿš€ The better identity infrastructure for developers and the open-source alternative to Auth0.
  • projectdiscovery/nuclei - Fast and customizable vulnerability scanner based on simple YAML based DSL.
  • akto-api-security/akto - Proactive, Open source API security โ†’ API discovery, Testing in CI/CD, Test Library with 150+ Tests, Add custom tests, Sensitive data exposure
  • intel/cve-bin-tool - The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 200 common, vulnerable components (openssl, libpng, libxml2, expat and others), or
  • owasp-noir/noir - Attack surface detector that identifies endpoints by static analysis
  • React95/React95 - A React components library with Win95 UI
  • BC-SECURITY/Empire - Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.
  • projectdiscovery/naabu - A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests
  • trufflesecurity/trufflehog - Find and verify secrets
  • Ciphey/Ciphey - โšก Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes โšก
  • gitleaks/gitleaks - Protect and discover secrets using Gitleaks ๐Ÿ”‘
  • sherlock-project/sherlock - Hunt down social media accounts by username across social networks
  • jaykali/maskphish - Introducing "URL Making Technology" to the world for the very FIRST TIME. Give a Mask to Phishing URL like a PRO.. A MUST have tool for Phishing.

haskell

  • wasp-lang/wasp - The fastest way to develop full-stack web apps with React & Node.js.

homebrew

html

http

  • projectdiscovery/httpx - httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
  • rfc-st/humble - A humble, and ๐—ณ๐—ฎ๐˜€๐˜, security-oriented HTTP headers analyzer.
  • BishopFox/sliver - Adversary Emulation Framework
  • santoru/shcheck - A basic tool to check security headers of a website
  • zigzap/zap - blazingly fast backends in zig
  • jpillora/chisel - A fast TCP/UDP tunnel over HTTP

image-processing

ios

iot

java

javascript

  • drawdb-io/drawdb - Free, simple, and intuitive online database design tool and SQL generator.
  • formkit/tempo - ๐Ÿ“† Parse, format, manipulate, and internationalize dates and times in JavaScript and TypeScript.
  • wasp-lang/wasp - The fastest way to develop full-stack web apps with React & Node.js.
  • LeCoupa/awesome-cheatsheets - ๐Ÿ‘ฉโ€๐Ÿ’ป๐Ÿ‘จโ€๐Ÿ’ป Awesome cheatsheets for popular programming languages, frameworks and development tools. They include everything you should know in one single file.
  • imgly/background-removal-js - Remove backgrounds from images directly in the browser environment with ease and no additional costs or privacy concerns. Explore an interactive demo.
  • semgrep/semgrep - Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
  • cockpit-project/cockpit - Cockpit is a web-based graphical interface for servers.
  • biomejs/biome - A toolchain for web projects, aimed to provide functionalities to maintain them. Biome offers formatter and linter, usable via CLI and LSP.
  • oppsec/Pinkerton - ๐Ÿ•ต๏ธ Pinkerton is an JavaScript file crawler and secret finder tool developed in Python
  • logto-io/logto - ๐Ÿง‘โ€๐Ÿš€ The better identity infrastructure for developers and the open-source alternative to Auth0.
  • MrEmpy/mantra - ใ€Œ๐Ÿ”‘ใ€A tool used to hunt down API key leaks in JS files and pages
  • puffinsoft/jscanify - Open-source Javascript mobile document scanner.
  • commitizen/cz-cli - The commitizen command line utility. #BlackLivesMatter
  • KuroLabs/stegcloak - Hide secrets with invisible characters in plain text securely using passwords ๐Ÿง™๐Ÿปโ€โ™‚๏ธโญ

jekyll

jekyll-theme

js

  • Kalabasa/htmz - html with targeted manipulation zones
  • MrEmpy/mantra - ใ€Œ๐Ÿ”‘ใ€A tool used to hunt down API key leaks in JS files and pages
  • puffinsoft/jscanify - Open-source Javascript mobile document scanner.

json

  • biomejs/biome - A toolchain for web projects, aimed to provide functionalities to maintain them. Biome offers formatter and linter, usable via CLI and LSP.
  • ozlerhakan/mongodb-json-files - ๐Ÿ“ฆ A curated list of JSON / BSON datasets from the web in order to practice / use in MongoDB

kubernetes

  • yannh/kubeconform - A FAST Kubernetes manifests validator, with support for Custom Resources!
  • eraser-dev/eraser - ๐Ÿงน Cleaning up images from Kubernetes nodes
  • k8sgpt-ai/k8sgpt - Giving Kubernetes Superpowers to everyone
  • goodwithtech/dockle - Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start
  • LeCoupa/awesome-cheatsheets - ๐Ÿ‘ฉโ€๐Ÿ’ป๐Ÿ‘จโ€๐Ÿ’ป Awesome cheatsheets for popular programming languages, frameworks and development tools. They include everything you should know in one single file.
  • aquasecurity/kube-bench - Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
  • DataDog/KubeHound - Kubernetes Attack Graph
  • deepfence/SecretScanner - ๐Ÿ”“ ๐Ÿ”“ Find secrets and passwords in container images and file systems ๐Ÿ”“ ๐Ÿ”“
  • cuber-cloud/cuber-gem - An automation tool that simplify the deployment of your apps on Kubernetes.
  • authzed/spicedb - Open Source, Google Zanzibar-inspired permissions database to enable fine-grained authorization for customer applications
  • carlospolop/PurplePanda - Identify privilege escalation paths within and across different clouds

language

  • LeCoupa/awesome-cheatsheets - ๐Ÿ‘ฉโ€๐Ÿ’ป๐Ÿ‘จโ€๐Ÿ’ป Awesome cheatsheets for popular programming languages, frameworks and development tools. They include everything you should know in one single file.

laravel

  • serversideup/spin - ๐Ÿš€ Replicate your production environment locally using Docker. Just run "spin up". It's really that easy.

learning

linux

  • chainguard-dev/bincapz - detect malicious program behaviors
  • v1s1t0r1sh3r3/airgeddon - This is a multi-use bash script for Linux systems to audit wireless networks.
  • future-architect/vuls - Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
  • vm32/Digital-Forensics-Script-for-Linux - Advanced Bash script designed for conducting digital forensics on Linux systems
  • Aditya-dom/moonwalk-back - Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps.
  • Trevohack/DynastyPersist - A Linux persistence tool!
  • GyulyVGC/sniffnet - Comfortably monitor your Internet traffic ๐Ÿ•ต๏ธโ€โ™‚๏ธ
  • microsoft/inshellisense - IDE style command line auto complete
  • trimstray/the-book-of-secret-knowledge - A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
  • XDeadHackerX/NetRadar - NetRadar is a Networking tool focused on mapping local and WiFi networks. It provides detailed information about connected devices, open ports, servers and automated scans for WiFi networks.NetRadar e
  • Fadi002/unshackle - Open-source tool to bypass windows and linux passwords from bootable usb
  • CISOfy/lynis - Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
  • mesquidar/ForensicsTools - A list of free and open forensics analysis tools and other resources
  • nyxiereal/XToolbox - XToolBox - A collection of 150+ Windows 10/11 optimization and tweaking apps!
  • sherlock-project/sherlock - Hunt down social media accounts by username across social networks
  • jaykali/maskphish - Introducing "URL Making Technology" to the world for the very FIRST TIME. Give a Mask to Phishing URL like a PRO.. A MUST have tool for Phishing.

llm

  • Renset/macai - Swift powered native macOS client for Ollama, ChatGPT and compatible API-backends
  • ollama/ollama - Get up and running with Llama 3, Mistral, Gemma 2, and other large language models.
  • plandex-ai/plandex - AI driven development in your terminal. Designed for large, real-world tasks.
  • OpenDevin/OpenDevin - ๐Ÿš OpenDevin: Code Less, Make More
  • dhammon/ai-goat - Learn AI security through a series of vulnerable LLM CTF challenges. No sign ups, no cloud fees, run everything locally on your system.
  • 0x4D31/galah - Galah: An LLM-powered web honeypot. Wasting attackers' time with faker-than-ever HTTP responses!
  • fr0gger/Awesome-GPT-Agents - A curated list of GPT agents for cybersecurity
  • GreyDGL/PentestGPT - A GPT-empowered penetration testing tool
  • continuedev/continue - โฉ Continue is the leading open-source AI code assistant. You can connect any models and any context to build custom autocomplete and chat experiences inside VS Code and JetBrains
  • narenmanoharan/gpt-code-assistant - gpt-code-assistant is an open-source coding assistant leveraging language models to search, retrieve, explore and understand any codebase.
  • eosphoros-ai/DB-GPT - AI Native Data App Development framework with AWEL(Agentic Workflow Expression Language) and Agents
  • mlc-ai/web-llm - High-performance In-browser LLM Inference Engine

low-code

  • teableio/teable - โœจ The Next Gen Airtable Alternative: No-Code Postgres

mac

machine-learning

macos

markdown

mastodon

  • CleasbyCode/jdvrif - Hide data within JPG images using this steganography-like privacy tool. Post images on Mastodon and other hosting sites.

microsoft

mobile

  • sensepost/objection - ๐Ÿ“ฑ objection - runtime mobile exploration
  • oppsec/Apepe - ๐Ÿ“ฒ Enumerate information from an app based on the APK file
  • mvt-project/mvt - MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.

mongodb

mongoose

monitoring

  • openstatusHQ/openstatus - ๐Ÿ“ The open-source synthetic monitoring platform ๐Ÿ“
  • Security-Onion-Solutions/securityonion - Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, a

mysql

natural-language-processing

  • Ciphey/Ciphey - โšก Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes โšก

neovim

  • junegunn/fzf - ๐ŸŒธ A command-line fuzzy finder
  • keidarcy/dotfiles - Robust & colorful dot configuration and utilities files with CI check ๐Ÿฆ„๐Ÿฆ„.

nestjs

nextjs

  • openstatusHQ/openstatus - ๐Ÿ“ The open-source synthetic monitoring platform ๐Ÿ“
  • Dokploy/dokploy - Open Source Alternative to Vercel, Netlify and Heroku.
  • sadmann7/shadcn-table - A shadcn table component with server-side sorting, filtering, and pagination.
  • diogocapela/flatdraw - A simple canvas drawing web app with responsive UI. Made with TypeScript, React, and Next.js.
  • tatethurston/nextjs-routes - Type safe routing for Next.js
  • Infisical/infisical - โ™พ Infisical is the open-source secret management platform: Sync secrets across your team/infrastructure, prevent secret leaks, and manage internal PKI
  • steven-tey/novel - Notion-style WYSIWYG editor with AI-powered autocompletion.
  • makeplane/plane - ๐Ÿ”ฅ ๐Ÿ”ฅ ๐Ÿ”ฅ Open Source JIRA, Linear and Asana Alternative. Plane helps you track your issues, epics, and product roadmaps in the simplest way possible.

nlp

  • taranis-ai/taranis-ai - Taranis AI is an advanced Open-Source Intelligence (OSINT) tool, leveraging Artificial Intelligence to revolutionize information gathering and situational analysis.
  • redhuntlabs/Octopii - An AI-powered Personal Identifiable Information (PII) scanner.

node

  • wasp-lang/wasp - The fastest way to develop full-stack web apps with React & Node.js.
  • logto-io/logto - ๐Ÿง‘โ€๐Ÿš€ The better identity infrastructure for developers and the open-source alternative to Auth0.
  • commitizen/cz-cli - The commitizen command line utility. #BlackLivesMatter

nodejs

  • brocoders/nestjs-boilerplate - NestJS boilerplate. Auth, TypeORM, Mongoose, Postgres, MongoDB, Mailing, I18N, Docker.
  • wasp-lang/open-saas - A free, open-source SaaS app starter for React & Node.js with superpowers. Production-ready. Community-driven.
  • serversideup/spin - ๐Ÿš€ Replicate your production environment locally using Docker. Just run "spin up". It's really that easy.
  • devXprite/infoooze - A OSINT tool which helps you to quickly find information effectively. All you need is to input and it will take take care of rest.
  • LeCoupa/awesome-cheatsheets - ๐Ÿ‘ฉโ€๐Ÿ’ป๐Ÿ‘จโ€๐Ÿ’ป Awesome cheatsheets for popular programming languages, frameworks and development tools. They include everything you should know in one single file.
  • porsager/postgres - Postgres.js - The Fastest full featured PostgreSQL client for Node.js, Deno, Bun and CloudFlare
  • Infisical/infisical - โ™พ Infisical is the open-source secret management platform: Sync secrets across your team/infrastructure, prevent secret leaks, and manage internal PKI
  • puffinsoft/jscanify - Open-source Javascript mobile document scanner.

nosql

  • codingo/NoSQLMap - Automated NoSQL database enumeration and web application exploitation tool.

npm

  • devXprite/infoooze - A OSINT tool which helps you to quickly find information effectively. All you need is to input and it will take take care of rest.

open-source

  • openstatusHQ/openstatus - ๐Ÿ“ The open-source synthetic monitoring platform ๐Ÿ“
  • sadmann7/shadcn-table - A shadcn table component with server-side sorting, filtering, and pagination.
  • Lissy93/personal-security-checklist - ๐Ÿ”’ A compiled checklist of 300+ tips for protecting digital security and privacy in 2024
  • wasp-lang/open-saas - A free, open-source SaaS app starter for React & Node.js with superpowers. Production-ready. Community-driven.
  • wasp-lang/wasp - The fastest way to develop full-stack web apps with React & Node.js.
  • latiotech/LAST - Use AI to Scan Your Code from the Command Line for security and code smells. Bring your own keys. Supports OpenAI and Gemini
  • devXprite/infoooze - A OSINT tool which helps you to quickly find information effectively. All you need is to input and it will take take care of rest.
  • imgly/background-removal-js - Remove backgrounds from images directly in the browser environment with ease and no additional costs or privacy concerns. Explore an interactive demo.
  • AdguardTeam/AdGuardHome - Network-wide ads & trackers blocking DNS server
  • commixproject/commix - Automated All-in-One OS Command Injection Exploitation Tool.
  • t3l3machus/Villain - Villain is a high level stage 0/1 C2 framework that can handle multiple TCP socket & HoaxShell-based reverse shells, enhance their functionality with additional features (commands, utilities) and shar
  • continuedev/continue - โฉ Continue is the leading open-source AI code assistant. You can connect any models and any context to build custom autocomplete and chat experiences inside VS Code and JetBrains
  • Infisical/infisical - โ™พ Infisical is the open-source secret management platform: Sync secrets across your team/infrastructure, prevent secret leaks, and manage internal PKI
  • unkeyed/unkey - Open source API management platform
  • mesquidar/ForensicsTools - A list of free and open forensics analysis tools and other resources
  • t3l3machus/psudohash - Generates millions of keyword-based password mutations in seconds.

osint

  • blacklanternsecurity/bbot - A recursive internet scanner for hackers.
  • powerexploit/Ashok - Ashok is a OSINT Recon Tool , a.k.a ๐Ÿ˜ Swiss Army knife .
  • elceef/dnstwist - Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
  • wddadk/Offensive-OSINT-Tools - OffSec OSINT Pentest/RedTeam Tools
  • spyboy-productions/omnisci3nt - Unveiling the Hidden Layers of the Web โ€“ A Comprehensive Web Reconnaissance Tool
  • MetaOSINT/MetaOSINT.github.io - A tool to quickly identify relevant, publicly-available open source intelligence ("OSINT") tools and resources, saving valuable time during investigations, research, and analysis.
  • AnonCatalyst/Ominis-OSINT - This Python application is an OSINT (Open Source Intelligence) tool called "Ominis OSINT - Web Hunter." It performs online information gathering by querying Google for search results related to a user
  • projectdiscovery/httpx - httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
  • chiasmod0n/chiasmodon - Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves around searching for domain-related data, including do
  • danieldurnea/FBI-tools - ๐Ÿ•ต๏ธ OSINT Tools for gathering information and actions forensics ๐Ÿ•ต๏ธ
  • projectdiscovery/subfinder - Fast passive subdomain enumeration tool.
  • six2dez/reconftw - reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
  • yogeshojha/rengine - reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous mon
  • freelabz/secator - secator - the pentester's swiss knife
  • s0md3v/Photon - Incredibly fast crawler designed for OSINT.
  • taranis-ai/taranis-ai - Taranis AI is an advanced Open-Source Intelligence (OSINT) tool, leveraging Artificial Intelligence to revolutionize information gathering and situational analysis.
  • N0rz3/Phunter - Phunter is an osint tool allowing you to find various information via a phone number ๐Ÿ”Ž๐Ÿ“ž
  • mitchmoser/sputnik - Open Source Intelligence Browser Extension
  • trickest/inventory - Asset inventory of over 800 public bug bounty programs.
  • OpenCTI-Platform/opencti - Open Cyber Threat Intelligence Platform
  • devXprite/infoooze - A OSINT tool which helps you to quickly find information effectively. All you need is to input and it will take take care of rest.
  • SherlockLinux/SherlockLinux - Distribuciรณn para OSINT basada en Debian 12 / OSINT Distribution based in Debian 12
  • MandConsultingGroup/porch-pirate - Porch Pirate is the most comprehensive Postman recon / OSINT client and framework that facilitates the automated discovery and exploitation of API endpoints and secrets committed to workspaces, collec
  • m8sec/CrossLinked - LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping
  • Josue87/MetaFinder - Search for documents in a domain through Search Engines (Google, Bing and Baidu). The objective is to extract metadata
  • Alb-310/Geogramint - An OSINT Geolocalization tool for Telegram that find nearby users and groups ๐Ÿ“ก๐ŸŒ๐Ÿ”
  • DedSecInside/TorBot - Dark Web OSINT Tool
  • franckferman/MetaDetective - ๐Ÿ•ต๏ธ Unleash Metadata Intelligence with MetaDetective. Your Assistant Beyond Metagoofil.
  • cosad3s/postleaks - Search for sensitive data in Postman public library.
  • saeeddhqan/Maryam - Maryam: Open-source Intelligence(OSINT) Framework
  • redhuntlabs/BucketLoot - BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-exp
  • jerlendds/osintbuddy - Node graphs, OSINT data mining, and plugins. Connect unstructured and public data for transformative insights
  • KawaCoder/GhostRecon - Popular OSINT framework. Works fine with kali linux and other Debian-based systems. Coded this as a teen, so not really reliable for real researches.
  • Fundacio-i2CAT/InfoHound - InfoHound is an OSINT to extract a large amount of data given a web domain name.
  • seekr-osint/seekr - A multi-purpose OSINT toolkit with a neat web-interface.
  • 3nock/OTE - OSINT Template Engine
  • Lissy93/web-check - ๐Ÿ•ต๏ธโ€โ™‚๏ธ All-in-one OSINT tool for analysing any website
  • jakecreps/poastal - Poastal - the Email OSINT tool
  • j3ssie/metabigor - OSINT tools and more but without API key
  • p1ngul1n0/blackbird - An OSINT tool to search for accounts by username and email in social networks.
  • initstring/cloud_enum - Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.
  • Drew-Alleman/DataSurgeon - Quickly Extracts IP's, Email Addresses, Hashes, Files, Credit Cards, Social Security Numbers and a lot More From Text
  • sherlock-project/sherlock - Hunt down social media accounts by username across social networks

others

penetration-testing

  • powerexploit/Ashok - Ashok is a OSINT Recon Tool , a.k.a ๐Ÿ˜ Swiss Army knife .
  • TupleType/awesome-cicd-attacks - Practical resources for offensive CI/CD security research. Curated the best resources I've seen since 2021.
  • sgxgsx/BlueToolkit - BlueToolkit is an extensible Bluetooth Classic vulnerability testing framework that helps uncover new and old vulnerabilities in Bluetooth-enabled devices. Could be used in the vulnerability research,
  • samratashok/nishang - Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
  • Syslifters/HackTheBox-Reporting - Hack The Box CPTS, CBBH Exam and Lab Reporting / Note-Taking Tool
  • danieldurnea/FBI-tools - ๐Ÿ•ต๏ธ OSINT Tools for gathering information and actions forensics ๐Ÿ•ต๏ธ
  • six2dez/reconftw - reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
  • ByteSnipers/awesome-pentest-cheat-sheets - Collection of cheat sheets useful for pentesting
  • fkkarakurt/reconic - A Powerful Network Reconnaissance Tool for Security Professionals
  • yogeshojha/rengine - reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous mon
  • trickest/inventory - Asset inventory of over 800 public bug bounty programs.
  • codingo/NoSQLMap - Automated NoSQL database enumeration and web application exploitation tool.
  • swisskyrepo/PayloadsAllTheThings - A list of useful payloads and bypass for Web Application Security and Pentest/CTF
  • factionsecurity/faction - Pen Test Report Generation and Assessment Collaboration
  • 0xsyr0/OSCP - OSCP Cheat Sheet
  • trickest/find-gh-poc - Find CVE PoCs on GitHub
  • trickest/cve - Gather and update all available and newest CVEs with their PoC.
  • GreyDGL/PentestGPT - A GPT-empowered penetration testing tool
  • gotr00t0day/Gsec - Web Security Scanner
  • MattKeeley/Spoofy - Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records.
  • RhinoSecurityLabs/pacu - The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
  • praetorian-inc/noseyparker - Nosey Parker is a command-line program that finds secrets and sensitive information in textual data and Git history.
  • t3l3machus/Villain - Villain is a high level stage 0/1 C2 framework that can handle multiple TCP socket & HoaxShell-based reverse shells, enhance their functionality with additional features (commands, utilities) and shar
  • redeye-framework/Redeye - Redeye is a tool intended to help you manage your data during a pentest operation
  • mandiant/commando-vm - Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]
  • Syslifters/sysreptor - Fully customisable, offensive security reporting solution designed for pentesters, red teamers and other security-related people alike.
  • GhostManager/Ghostwriter - The SpecterOps project management and reporting engine
  • initstring/cloud_enum - Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.
  • t3l3machus/psudohash - Generates millions of keyword-based password mutations in seconds.

pentesting

  • blacklanternsecurity/bbot - A recursive internet scanner for hackers.
  • wddadk/Offensive-OSINT-Tools - OffSec OSINT Pentest/RedTeam Tools
  • diego-treitos/linux-smart-enumeration - Linux enumeration tool for pentesting and CTFs with verbosity levels
  • sgxgsx/BlueToolkit - BlueToolkit is an extensible Bluetooth Classic vulnerability testing framework that helps uncover new and old vulnerabilities in Bluetooth-enabled devices. Could be used in the vulnerability research,
  • Syslifters/offsec-tools - Compiled tools for internal assessments
  • OJ/gobuster - Directory/File, DNS and VHost busting tool written in Go
  • ffuf/ffuf - Fast web fuzzer written in Go
  • danieldurnea/FBI-tools - ๐Ÿ•ต๏ธ OSINT Tools for gathering information and actions forensics ๐Ÿ•ต๏ธ
  • noraj/haiti - ๐Ÿ”‘ Hash type identifier (CLI & lib)
  • devploit/nomore403 - Tool to bypass 403/40X response codes.
  • six2dez/reconftw - reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
  • ByteSnipers/awesome-pentest-cheat-sheets - Collection of cheat sheets useful for pentesting
  • fkkarakurt/reconic - A Powerful Network Reconnaissance Tool for Security Professionals
  • v1s1t0r1sh3r3/airgeddon - This is a multi-use bash script for Linux systems to audit wireless networks.
  • yogeshojha/rengine - reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous mon
  • justakazh/DockerExploit - Docker Remote API Scanner and Exploit
  • freelabz/secator - secator - the pentester's swiss knife
  • MegaManSec/SSH-Snake - SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.
  • i5nipe/nipejs - Simplify your life with leak detection in JavaScript. NipeJS streamlines the use of regex, making it effortless to uncover potential leaks.
  • trickest/inventory - Asset inventory of over 800 public bug bounty programs.
  • Frissi0n/GTFONow - Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins.
  • casterbyte/MITMonster - A monster cheatsheet on MITM attacks
  • emrekybs/AD-AssessmentKit - Contains a collection of Bash scripts designed for comprehensive security audits and network mapping of Active Directory (AD) environments. The scripts automate various tasks including LDAP querying,
  • psbelin/ip_widget - Taskbar IP widget for kali linux (or any distro running XFCE)
  • NH-RED-TEAM/RustHound - Active Directory data collector for BloodHound written in Rust. ๐Ÿฆ€
  • infosecn1nja/Red-Teaming-Toolkit - This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.
  • rootcathacking/catspin - Catspin rotates the IP address of HTTP requests making IP based blocks or slowdown measures ineffective. It is based on AWS API Gateway and deployed via AWS Cloudformation.
  • Leo4j/Amnesiac - Amnesiac is a post-exploitation framework entirely written in PowerShell and designed to assist with lateral movement within Active Directory environments
  • casterbyte/Above - Invisible network protocol sniffer
  • factionsecurity/faction - Pen Test Report Generation and Assessment Collaboration
  • t3l3machus/BabelStrike - The purpose of this tool is: 1. to transliterate and generate possible usernames out of a full names list that may include names written in multiple (non-English) languages, common problem occurring f
  • 0xsyr0/OSCP - OSCP Cheat Sheet
  • trickest/find-gh-poc - Find CVE PoCs on GitHub
  • trickest/cve - Gather and update all available and newest CVEs with their PoC.
  • gotr00t0day/Gsec - Web Security Scanner
  • The-Viper-One/PsMapExec - A PowerShell tool that takes strong inspiration from CrackMapExec / NetExec
  • MattKeeley/Spoofy - Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records.
  • redhuntlabs/BucketLoot - BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-exp
  • Pennyw0rth/NetExec - The Network Execution Tool
  • D00Movenok/BounceBack - โ†•๏ธ๐Ÿคซ Stealth redirector for your red team operation security
  • Anof-cyber/ParaForge - A BurpSuite extension to create a custom word-list of endpoint and parameters for enumeration and fuzzing
  • D00Movenok/HTMLSmuggler - โœ‰๏ธ HTML Smuggling generator&obfuscator for your Red Team operations
  • commixproject/commix - Automated All-in-One OS Command Injection Exploitation Tool.
  • t3l3machus/Villain - Villain is a high level stage 0/1 C2 framework that can handle multiple TCP socket & HoaxShell-based reverse shells, enhance their functionality with additional features (commands, utilities) and shar
  • owasp-noir/noir - Attack surface detector that identifies endpoints by static analysis
  • iknowjason/edge - Recon tool for cloud provider attribution. Supports AWS, Azure, Google, Cloudflare, and Digital Ocean.
  • thewhiteh4t/FinalRecon - All In One Web Recon
  • Zeus-Labs/ZeusCloud - Open Source Cloud Security
  • CERT-Polska/Artemis - A modular vulnerability scanner with automatic report generation capabilities.
  • PhoenixC2/PhoenixC2 - Command & Control-Framework created for collaboration in python3
  • j3ssie/metabigor - OSINT tools and more but without API key
  • RapidDNS/Afuzz - Afuzz is an automated web path fuzzing tool for the Bug Bounty projects.
  • p1ngul1n0/blackbird - An OSINT tool to search for accounts by username and email in social networks.
  • Ciphey/Ciphey - โšก Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes โšก
  • Drew-Alleman/DataSurgeon - Quickly Extracts IP's, Email Addresses, Hashes, Files, Credit Cards, Social Security Numbers and a lot More From Text
  • sherlock-project/sherlock - Hunt down social media accounts by username across social networks
  • byt3bl33d3r/CrackMapExec - A swiss army knife for pentesting networks
  • t3l3machus/psudohash - Generates millions of keyword-based password mutations in seconds.

php

  • Cvar1984/sussyfinder - Single PHP file to detect potentially malicious threats based on token and hash with web interface and VirusTotal integrations. Contact me for premium apps fully integrated with VirusTotal and 10+ mor
  • adegans/Goosle - The best Meta Search engine running on simple PHP servers that keeps privacy and ease of use in mind!
  • PrivateBin/PrivateBin - A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.
  • LeCoupa/awesome-cheatsheets - ๐Ÿ‘ฉโ€๐Ÿ’ป๐Ÿ‘จโ€๐Ÿ’ป Awesome cheatsheets for popular programming languages, frameworks and development tools. They include everything you should know in one single file.

postgresql

  • Dokploy/dokploy - Open Source Alternative to Vercel, Netlify and Heroku.
  • teableio/teable - โœจ The Next Gen Airtable Alternative: No-Code Postgres
  • drawdb-io/drawdb - Free, simple, and intuitive online database design tool and SQL generator.
  • wasp-lang/open-saas - A free, open-source SaaS app starter for React & Node.js with superpowers. Production-ready. Community-driven.
  • porsager/postgres - Postgres.js - The Fastest full featured PostgreSQL client for Node.js, Deno, Bun and CloudFlare
  • logto-io/logto - ๐Ÿง‘โ€๐Ÿš€ The better identity infrastructure for developers and the open-source alternative to Auth0.
  • makeplane/plane - ๐Ÿ”ฅ ๐Ÿ”ฅ ๐Ÿ”ฅ Open Source JIRA, Linear and Asana Alternative. Plane helps you track your issues, epics, and product roadmaps in the simplest way possible.

powershell

privacy

project-management

  • makeplane/plane - ๐Ÿ”ฅ ๐Ÿ”ฅ ๐Ÿ”ฅ Open Source JIRA, Linear and Asana Alternative. Plane helps you track your issues, epics, and product roadmaps in the simplest way possible.

python

  • blacklanternsecurity/bbot - A recursive internet scanner for hackers.
  • FLOCK4H/Freeway - WiFi Penetration Testing & Auditing Tool
  • prowler-cloud/prowler - Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness.
  • otsaloma/catapult - App launcher for Linux
  • RevoltSecurities/Subdominator - SubDominator helps you discover subdomains associated with a target domain efficiently and with minimal impact for your Bug Bounty
  • sarperavci/GoogleRecaptchaBypass - Solve Google reCAPTCHA in less than 5 seconds! ๐Ÿš€
  • AnonCatalyst/Ominis-OSINT - This Python application is an OSINT (Open Source Intelligence) tool called "Ominis OSINT - Web Hunter." It performs online information gathering by querying Google for search results related to a user
  • epogrebnyak/justpath - Inspect and refine PATH environment variable on Windows, Linux and MacOS.
  • dvcoolarun/web2pdf - ๐Ÿ”„ CLI to convert Webpages to PDFs ๐Ÿš€
  • fkkarakurt/reconic - A Powerful Network Reconnaissance Tool for Security Professionals
  • fortra/impacket - Impacket is a collection of Python classes for working with network protocols.
  • oppsec/tomcter - ๐Ÿ˜น Tomcter is a python tool developed to bruteforce Apache Tomcat manager login with default credentials.
  • s0md3v/Photon - Incredibly fast crawler designed for OSINT.
  • latiotech/LAST - Use AI to Scan Your Code from the Command Line for security and code smells. Bring your own keys. Supports OpenAI and Gemini
  • oppsec/juumla - ๐Ÿฆ Juumla is a python tool created to identify Joomla version, scan for vulnerabilities and sensitive files
  • dragonked2/Egyscan - Egyscan The Best web vulnerability scanner; it's a multifaceted security powerhouse designed to fortify your web applications against malicious threats. Let's delve into the tasks and functions that m
  • lewiswigmore/Virus.xcheck - Virus.xcheck is a Python tool designed to bulk verify the existence of file hashes in the Virus Exchange database and fetch download URLs for malware analysis.
  • JoshuaKasa/van-gonography - Hide ๐Ÿ•ต๏ธโ€โ™‚๏ธ your files of any type inside a image of your choice using steganography
  • bellingcat/wayback-google-analytics - A lightweight tool for scraping current and historic Google Analytics data
  • Alb-310/Geogramint - An OSINT Geolocalization tool for Telegram that find nearby users and groups ๐Ÿ“ก๐ŸŒ๐Ÿ”
  • DedSecInside/TorBot - Dark Web OSINT Tool
  • AiGptCode/Ai-Security-URL - functions to exploit common web application vulnerabilities such as SQL Injection, Cross-Site Scripting (XSS), Server-Side Request Forgery (SSRF), and Path Traversal.
  • franckferman/MetaDetective - ๐Ÿ•ต๏ธ Unleash Metadata Intelligence with MetaDetective. Your Assistant Beyond Metagoofil.
  • GreyDGL/PentestGPT - A GPT-empowered penetration testing tool
  • redhuntlabs/Octopii - An AI-powered Personal Identifiable Information (PII) scanner.
  • searxng/searxng - SearXNG is a free internet metasearch engine which aggregates results from various search services and databases. Users are neither tracked nor profiled.
  • MattKeeley/Spoofy - Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records.
  • semgrep/semgrep - Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
  • secdev/scapy - Scapy: the Python-based interactive packet manipulation program & library.
  • Pennyw0rth/NetExec - The Network Execution Tool
  • RhinoSecurityLabs/pacu - The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
  • Anof-cyber/ParaForge - A BurpSuite extension to create a custom word-list of endpoint and parameters for enumeration and fuzzing
  • bsilverthorn/maccarone - AI-managed code blocks in Python โชโฉ
  • oppsec/Apepe - ๐Ÿ“ฒ Enumerate information from an app based on the APK file
  • oppsec/Pinkerton - ๐Ÿ•ต๏ธ Pinkerton is an JavaScript file crawler and secret finder tool developed in Python
  • commixproject/commix - Automated All-in-One OS Command Injection Exploitation Tool.
  • fox-it/dissect - Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part
  • intel/cve-bin-tool - The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 200 common, vulnerable components (openssl, libpng, libxml2, expat and others), or
  • PhoenixC2/PhoenixC2 - Command & Control-Framework created for collaboration in python3
  • jakecreps/poastal - Poastal - the Email OSINT tool
  • gpt-engineer-org/gpt-engineer - Specify what you want it to build, the AI asks for clarification, and then builds it.
  • makeplane/plane - ๐Ÿ”ฅ ๐Ÿ”ฅ ๐Ÿ”ฅ Open Source JIRA, Linear and Asana Alternative. Plane helps you track your issues, epics, and product roadmaps in the simplest way possible.
  • Significant-Gravitas/AutoGPT - AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.
  • p1ngul1n0/blackbird - An OSINT tool to search for accounts by username and email in social networks.
  • nyxiereal/XToolbox - XToolBox - A collection of 150+ Windows 10/11 optimization and tweaking apps!
  • Ciphey/Ciphey - โšก Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes โšก
  • sherlock-project/sherlock - Hunt down social media accounts by username across social networks
  • byt3bl33d3r/CrackMapExec - A swiss army knife for pentesting networks

python3

qt

raspberry-pi

react

  • drawdb-io/drawdb - Free, simple, and intuitive online database design tool and SQL generator.
  • pmndrs/uikit - ๐ŸŽจ user interfaces for react-three-fiber
  • wasp-lang/open-saas - A free, open-source SaaS app starter for React & Node.js with superpowers. Production-ready. Community-driven.
  • wasp-lang/wasp - The fastest way to develop full-stack web apps with React & Node.js.
  • albingroen/react-cmdk - A fast, accessible, and pretty command palette for React
  • lmsqueezy/wedges - An ever-expanding, open-source React UI library built with the Wedges Design System, Radix primitives, and Tailwind CSS.
  • nick-keller/react-datasheet-grid - An Airtable-like / Excel-like component to create beautiful spreadsheets.
  • react-dnd/react-dnd - Drag and Drop for React
  • diogocapela/flatdraw - A simple canvas drawing web app with responsive UI. Made with TypeScript, React, and Next.js.
  • Infisical/infisical - โ™พ Infisical is the open-source secret management platform: Sync secrets across your team/infrastructure, prevent secret leaks, and manage internal PKI
  • React95/React95 - A React components library with Win95 UI
  • makeplane/plane - ๐Ÿ”ฅ ๐Ÿ”ฅ ๐Ÿ”ฅ Open Source JIRA, Linear and Asana Alternative. Plane helps you track your issues, epics, and product roadmaps in the simplest way possible.

react-native

rest-api

  • makeplane/plane - ๐Ÿ”ฅ ๐Ÿ”ฅ ๐Ÿ”ฅ Open Source JIRA, Linear and Asana Alternative. Plane helps you track your issues, epics, and product roadmaps in the simplest way possible.

reverse-engineering

  • chainguard-dev/bincapz - detect malicious program behaviors
  • ax/apk.sh - apk.sh makes reverse engineering Android apps easier, automating some repetitive tasks like pulling, decoding, rebuilding and patching an APK.
  • mentebinaria/retoolkit - Reverse Engineer's Toolkit
  • x64dbg/x64dbg - An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
  • ReagentX/imessage-exporter - Export iMessage data + run iMessage Diagnostics
  • mandiant/flare-vm - A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

ruby

  • semgrep/semgrep - Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

rust

  • dani-garcia/vaultwarden - Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs
  • NH-RED-TEAM/RustHound - Active Directory data collector for BloodHound written in Rust. ๐Ÿฆ€
  • GyulyVGC/sniffnet - Comfortably monitor your Internet traffic ๐Ÿ•ต๏ธโ€โ™‚๏ธ
  • cea-sec/usbsas - Tool and framework for securely reading untrusted USB mass storage devices.
  • praetorian-inc/noseyparker - Nosey Parker is a command-line program that finds secrets and sensitive information in textual data and Git history.
  • build-trust/ockam - Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications โ€“ at massive scale.
  • Drew-Alleman/DataSurgeon - Quickly Extracts IP's, Email Addresses, Hashes, Files, Credit Cards, Social Security Numbers and a lot More From Text

security

  • chaitin/SafeLine - A web security gateway, serve as a reverse proxy to protect your websites from attacks and exploits.
  • prowler-cloud/prowler - Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness.
  • smallstep/certificates - ๐Ÿ›ก๏ธ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.
  • sgxgsx/BlueToolkit - BlueToolkit is an extensible Bluetooth Classic vulnerability testing framework that helps uncover new and old vulnerabilities in Bluetooth-enabled devices. Could be used in the vulnerability research,
  • MetaOSINT/MetaOSINT.github.io - A tool to quickly identify relevant, publicly-available open source intelligence ("OSINT") tools and resources, saving valuable time during investigations, research, and analysis.
  • securityjoes/MasterParser - MasterParser is a powerful DFIR tool designed for analyzing and parsing Linux logs
  • samratashok/nishang - Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
  • Azathothas/Arsenal - Hastly written Tools & Scripts for Personal Use Cases & Bug Bounties
  • danieldurnea/FBI-tools - ๐Ÿ•ต๏ธ OSINT Tools for gathering information and actions forensics ๐Ÿ•ต๏ธ
  • cddmp/enum4linux-ng - A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.
  • dhammon/ai-goat - Learn AI security through a series of vulnerable LLM CTF challenges. No sign ups, no cloud fees, run everything locally on your system.
  • noraj/haiti - ๐Ÿ”‘ Hash type identifier (CLI & lib)
  • six2dez/reconftw - reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
  • devploit/awesome-ctf-resources - A list of Capture The Flag (CTF) frameworks, libraries, resources and software for started/experienced CTF players ๐Ÿšฉ
  • Lissy93/personal-security-checklist - ๐Ÿ”’ A compiled checklist of 300+ tips for protecting digital security and privacy in 2024
  • Escape-Technologies/awesome-graphql-security - A curated list of awesome GraphQL Security frameworks, libraries, software and resources
  • v1s1t0r1sh3r3/airgeddon - This is a multi-use bash script for Linux systems to audit wireless networks.
  • ShellCode33/CredSLayer - Extract credentials and other useful info from network captures
  • konstruktoid/ansible-role-hardening - Ansible role to apply a security baseline. Systemd edition.
  • justakazh/DockerExploit - Docker Remote API Scanner and Exploit
  • sensepost/objection - ๐Ÿ“ฑ objection - runtime mobile exploration
  • freelabz/secator - secator - the pentester's swiss knife
  • future-architect/vuls - Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
  • MegaManSec/SSH-Snake - SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.
  • gbiagomba/Sherlock - This script is designed to help expedite a web application assessment by automating some of the assessment steps (e.g., running nmap, sublist3r, metasploit, etc.)
  • AleksaMCode/Preferred-Network-List-Sniffer - A reconnaissance tool for capturing and displaying SSIDs from device's Preferred Network List.
  • trickest/inventory - Asset inventory of over 800 public bug bounty programs.
  • 0x4D31/galah - Galah: An LLM-powered web honeypot. Wasting attackers' time with faker-than-ever HTTP responses!
  • OpenCTI-Platform/opencti - Open Cyber Threat Intelligence Platform
  • Frissi0n/GTFONow - Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins.
  • konstruktoid/hardening - Hardening Ubuntu. Systemd edition.
  • Aditya-dom/moonwalk-back - Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps.
  • gabrielsoltz/metahub - MetaHub is an automated contextual security findings enrichment and impact evaluation tool for vulnerability management.
  • tamjid0x01/SmartContracts-audit-checklist - A checklist of things to look for when auditing Solidity smart contracts.
  • gophish/gophish - Open-Source Phishing Toolkit
  • xlab-si/iac-scan-runner - Service that scans your Infrastructure as Code for common vulnerabilities
  • MandConsultingGroup/porch-pirate - Porch Pirate is the most comprehensive Postman recon / OSINT client and framework that facilitates the automated discovery and exploitation of API endpoints and secrets committed to workspaces, collec
  • rfc-st/humble - A humble, and ๐—ณ๐—ฎ๐˜€๐˜, security-oriented HTTP headers analyzer.
  • PrivateBin/PrivateBin - A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.
  • liamg/furious - ๐Ÿ˜  Go IP/port scanner with SYN (stealth) scanning and device manufacturer identification
  • troennes/private-secure-windows - Privacy and security baseline for personal Windows 10 and Windows 11
  • swisskyrepo/PayloadsAllTheThings - A list of useful payloads and bypass for Web Application Security and Pentest/CTF
  • swisskyrepo/InternalAllTheThings - Active Directory and Internal Pentest Cheatsheets
  • factionsecurity/faction - Pen Test Report Generation and Assessment Collaboration
  • goodwithtech/dockle - Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start
  • HalilDeniz/NetworkAssessment - NetworkAssessment: Network Compromise Assessment Tool
  • cisagov/LME - Logging Made Easy (LME) is a no-cost and open logging and protective monitoring solution serving all organizations.
  • HalilDeniz/PathFinder - Web Path Finder
  • andresriancho/w3af - w3af: web application attack and audit framework, the open source web vulnerability scanner.
  • LucasPDiniz/403-Bypass - Bypass 403 pages
  • maxgoedjen/secretive - Store SSH keys in the Secure Enclave
  • spark1security/n0s1 - Secret Scanner for Jira, Confluence, Asana, Wrike and Linear
  • 0xsyr0/OSCP - OSCP Cheat Sheet
  • DedSecInside/TorBot - Dark Web OSINT Tool
  • GyulyVGC/sniffnet - Comfortably monitor your Internet traffic ๐Ÿ•ต๏ธโ€โ™‚๏ธ
  • CycodeLabs/raven - CI/CD Security Analyzer
  • franckferman/MetaDetective - ๐Ÿ•ต๏ธ Unleash Metadata Intelligence with MetaDetective. Your Assistant Beyond Metagoofil.
  • ElectronicCats/CatSniffer - CatSniffer is an original multiprotocol and multiband board for sniffing, communicating, and attacking IoT (Internet of Things) devices using the latest radio IoT protocols. It is a highly portable US
  • trickest/find-gh-poc - Find CVE PoCs on GitHub
  • trickest/cve - Gather and update all available and newest CVEs with their PoC.
  • gotr00t0day/Gsec - Web Security Scanner
  • trimstray/the-book-of-secret-knowledge - A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
  • cea-sec/usbsas - Tool and framework for securely reading untrusted USB mass storage devices.
  • GitGuardian/ggshield - Find and fix 360+ types of hardcoded secrets and 70+ types of infrastructure-as-code misconfigurations.
  • santoru/shcheck - A basic tool to check security headers of a website
  • google/gcp_scanner - A comprehensive scanner for Google Cloud
  • MattKeeley/Spoofy - Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records.
  • secdev/scapy - Scapy: the Python-based interactive packet manipulation program & library.
  • mschwager/route-detect - Find authentication (authn) and authorization (authz) security bugs in web application routes.
  • jtesta/ssh-audit - SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
  • Pennyw0rth/NetExec - The Network Execution Tool
  • Security-Onion-Solutions/securityonion - Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, a
  • RhinoSecurityLabs/pacu - The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
  • K3V1991/Disable-Firefox-Telemetry-and-Data-Collection - How to disable Firefox Telemetry and Data Collection
  • D00Movenok/BounceBack - โ†•๏ธ๐Ÿคซ Stealth redirector for your red team operation security
  • deepfence/SecretScanner - ๐Ÿ”“ ๐Ÿ”“ Find secrets and passwords in container images and file systems ๐Ÿ”“ ๐Ÿ”“
  • globocom/secDevLabs - A laboratory for learning secure web and mobile development in a practical manner.
  • x64dbg/x64dbg - An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
  • praetorian-inc/noseyparker - Nosey Parker is a command-line program that finds secrets and sensitive information in textual data and Git history.
  • D00Movenok/HTMLSmuggler - โœ‰๏ธ HTML Smuggling generator&obfuscator for your Red Team operations
  • cado-security/varc - Volatile Artifact Collector collects a snapshot of volatile data from a system. It tells you what is happening on a system, and is of particular use when investigating a security incident.
  • projectdiscovery/nuclei - Fast and customizable vulnerability scanner based on simple YAML based DSL.
  • akto-api-security/akto - Proactive, Open source API security โ†’ API discovery, Testing in CI/CD, Test Library with 150+ Tests, Add custom tests, Sensitive data exposure
  • authzed/spicedb - Open Source, Google Zanzibar-inspired permissions database to enable fine-grained authorization for customer applications
  • intel/cve-bin-tool - The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 200 common, vulnerable components (openssl, libpng, libxml2, expat and others), or
  • owasp-noir/noir - Attack surface detector that identifies endpoints by static analysis
  • build-trust/ockam - Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications โ€“ at massive scale.
  • Infisical/infisical - โ™พ Infisical is the open-source secret management platform: Sync secrets across your team/infrastructure, prevent secret leaks, and manage internal PKI
  • Lissy93/web-check - ๐Ÿ•ต๏ธโ€โ™‚๏ธ All-in-one OSINT tool for analysing any website
  • Zeus-Labs/ZeusCloud - Open Source Cloud Security
  • padok-team/yatas - ๐Ÿฆ‰๐Ÿ”Ž A simple tool to audit your AWS/GCP infrastructure for misconfiguration or potential security issues with plugins integration
  • CERT-Polska/Artemis - A modular vulnerability scanner with automatic report generation capabilities.
  • j3ssie/metabigor - OSINT tools and more but without API key
  • eosphoros-ai/DB-GPT - AI Native Data App Development framework with AWEL(Agentic Workflow Expression Language) and Agents
  • mvt-project/mvt - MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
  • MrEmpy/mantra - ใ€Œ๐Ÿ”‘ใ€A tool used to hunt down API key leaks in JS files and pages
  • nyxiereal/XToolbox - XToolBox - A collection of 150+ Windows 10/11 optimization and tweaking apps!
  • trufflesecurity/trufflehog - Find and verify secrets
  • cider-security-research/cicd-goat - A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
  • gitleaks/gitleaks - Protect and discover secrets using Gitleaks ๐Ÿ”‘
  • KuroLabs/stegcloak - Hide secrets with invisible characters in plain text securely using passwords ๐Ÿง™๐Ÿปโ€โ™‚๏ธโญ
  • drduh/macOS-Security-and-Privacy-Guide - Guide to securing and improving privacy on macOS

self-hosted

  • chaitin/SafeLine - A web security gateway, serve as a reverse proxy to protect your websites from attacks and exploits.
  • Dokploy/dokploy - Open Source Alternative to Vercel, Netlify and Heroku.
  • awesome-foss/awesome-sysadmin - A curated list of amazingly awesome open-source sysadmin resources.
  • PrivateBin/PrivateBin - A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.
  • awesome-selfhosted/awesome-selfhosted - A list of Free Software network services and web applications which can be hosted on your own servers

server

shell

  • MegaManSec/SSH-Snake - SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.
  • konstruktoid/hardening - Hardening Ubuntu. Systemd edition.
  • CISOfy/lynis - Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

software

solidity

sql

  • drawdb-io/drawdb - Free, simple, and intuitive online database design tool and SQL generator.

sql-server

  • drawdb-io/drawdb - Free, simple, and intuitive online database design tool and SQL generator.

sqlite

  • teableio/teable - โœจ The Next Gen Airtable Alternative: No-Code Postgres
  • drawdb-io/drawdb - Free, simple, and intuitive online database design tool and SQL generator.

storybook

swift

  • Renset/macai - Swift powered native macOS client for Ollama, ChatGPT and compatible API-backends

swiftui

  • Renset/macai - Swift powered native macOS client for Ollama, ChatGPT and compatible API-backends

telegram

  • Alb-310/Geogramint - An OSINT Geolocalization tool for Telegram that find nearby users and groups ๐Ÿ“ก๐ŸŒ๐Ÿ”

terminal

  • plandex-ai/plandex - AI driven development in your terminal. Designed for large, real-world tasks.
  • JoshuaKasa/van-gonography - Hide ๐Ÿ•ต๏ธโ€โ™‚๏ธ your files of any type inside a image of your choice using steganography
  • microsoft/inshellisense - IDE style command line auto complete
  • antonmedv/walk - Terminal file manager
  • morpheuslord/GPT_Vuln-analyzer - Uses ChatGPT API, Bard API, and Llama2, Python-Nmap, DNS Recon, PCAP and JWT recon modules and uses the GPT3 model to create vulnerability reports based on Nmap scan data, and DNS scan information. It
  • nosarthur/gita - Manage many git repos with sanity ไปŽๅฎน็ฎก็†ๅคšไธชgitๅบ“

termux

  • devXprite/infoooze - A OSINT tool which helps you to quickly find information effectively. All you need is to input and it will take take care of rest.
  • jaykali/maskphish - Introducing "URL Making Technology" to the world for the very FIRST TIME. Give a Mask to Phishing URL like a PRO.. A MUST have tool for Phishing.

termux-hacking

  • jaykali/maskphish - Introducing "URL Making Technology" to the world for the very FIRST TIME. Give a Mask to Phishing URL like a PRO.. A MUST have tool for Phishing.

testing

twitter

  • MetaOSINT/MetaOSINT.github.io - A tool to quickly identify relevant, publicly-available open source intelligence ("OSINT") tools and resources, saving valuable time during investigations, research, and analysis.

typescript

  • brocoders/nestjs-boilerplate - NestJS boilerplate. Auth, TypeORM, Mongoose, Postgres, MongoDB, Mailing, I18N, Docker.
  • pmndrs/uikit - ๐ŸŽจ user interfaces for react-three-fiber
  • formkit/tempo - ๐Ÿ“† Parse, format, manipulate, and internationalize dates and times in JavaScript and TypeScript.
  • wasp-lang/open-saas - A free, open-source SaaS app starter for React & Node.js with superpowers. Production-ready. Community-driven.
  • albingroen/react-cmdk - A fast, accessible, and pretty command palette for React
  • imgly/background-removal-js - Remove backgrounds from images directly in the browser environment with ease and no additional costs or privacy concerns. Explore an interactive demo.
  • semgrep/semgrep - Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
  • jerlendds/osintbuddy - Node graphs, OSINT data mining, and plugins. Connect unstructured and public data for transformative insights
  • biomejs/biome - A toolchain for web projects, aimed to provide functionalities to maintain them. Biome offers formatter and linter, usable via CLI and LSP.
  • logto-io/logto - ๐Ÿง‘โ€๐Ÿš€ The better identity infrastructure for developers and the open-source alternative to Auth0.
  • seekr-osint/seekr - A multi-purpose OSINT toolkit with a neat web-interface.
  • diogocapela/flatdraw - A simple canvas drawing web app with responsive UI. Made with TypeScript, React, and Next.js.
  • tatethurston/nextjs-routes - Type safe routing for Next.js
  • Infisical/infisical - โ™พ Infisical is the open-source secret management platform: Sync secrets across your team/infrastructure, prevent secret leaks, and manage internal PKI
  • chakra-ui/panda - ๐Ÿผ Universal, Type-Safe, CSS-in-JS Framework for Product Teams โšก๏ธ
  • makeplane/plane - ๐Ÿ”ฅ ๐Ÿ”ฅ ๐Ÿ”ฅ Open Source JIRA, Linear and Asana Alternative. Plane helps you track your issues, epics, and product roadmaps in the simplest way possible.

ubuntu

vagrant

vim

  • junegunn/fzf - ๐ŸŒธ A command-line fuzzy finder
  • keidarcy/dotfiles - Robust & colorful dot configuration and utilities files with CI check ๐Ÿฆ„๐Ÿฆ„.
  • LeCoupa/awesome-cheatsheets - ๐Ÿ‘ฉโ€๐Ÿ’ป๐Ÿ‘จโ€๐Ÿ’ป Awesome cheatsheets for popular programming languages, frameworks and development tools. They include everything you should know in one single file.

visual-studio-code

  • viatsko/awesome-vscode - ๐ŸŽจ A curated list of delightful VS Code packages and resources.
  • continuedev/continue - โฉ Continue is the leading open-source AI code assistant. You can connect any models and any context to build custom autocomplete and chat experiences inside VS Code and JetBrains

vue

  • nuxt/ui - A UI Library for Modern Web Apps, powered by Vue & Tailwind CSS.

vuejs

  • LeCoupa/awesome-cheatsheets - ๐Ÿ‘ฉโ€๐Ÿ’ป๐Ÿ‘จโ€๐Ÿ’ป Awesome cheatsheets for popular programming languages, frameworks and development tools. They include everything you should know in one single file.

web

  • AnonCatalyst/Ominis-OSINT - This Python application is an OSINT (Open Source Intelligence) tool called "Ominis OSINT - Web Hunter." It performs online information gathering by querying Google for search results related to a user
  • OJ/gobuster - Directory/File, DNS and VHost busting tool written in Go
  • ffuf/ffuf - Fast web fuzzer written in Go
  • devploit/awesome-ctf-resources - A list of Capture The Flag (CTF) frameworks, libraries, resources and software for started/experienced CTF players ๐Ÿšฉ
  • HalilDeniz/PathFinder - Web Path Finder
  • gotr00t0day/Gsec - Web Security Scanner
  • biomejs/biome - A toolchain for web projects, aimed to provide functionalities to maintain them. Biome offers formatter and linter, usable via CLI and LSP.

website

  • AiGptCode/Ai-Security-URL - functions to exploit common web application vulnerabilities such as SQL Injection, Cross-Site Scripting (XSS), Server-Side Request Forgery (SSRF), and Path Traversal.
  • ramon-victor/freegpt-webui - GPT 3.5/4 with a Chat Web UI. No API key required.

windows

xcode

  • LeCoupa/awesome-cheatsheets - ๐Ÿ‘ฉโ€๐Ÿ’ป๐Ÿ‘จโ€๐Ÿ’ป Awesome cheatsheets for popular programming languages, frameworks and development tools. They include everything you should know in one single file.

zig

License

CC0

To the extent possible under law, dkadev has waived all copyright and related or neighboring rights to this work.