NationalSecurityAgency / ghidra
Ghidra is a software reverse engineering (SRE) framework
NationalSecurityAgency / ghidra
Lakr233 / vphone-cli
Run a virtual iPhone on an Apple Silicon Mac.
martin-olivier / airgorah
A WiFi security auditing software
RikkaApps / Shizuku
Using system APIs directly with adb/root privileges from normal apps through a Java process started with app_process.
tiann / KernelSU
A Kernel based root solution for Android
gitleaks / gitleaks
Find secrets with Gitleaks 🔑
caddyserver / caddy
Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
rawfilejson / awesome-osint-arsenal
OSINT & recon toolkit // 100+ tools, one-command installer, SOCMINT, GEOINT, network recon, dark web, forensics & more.
aquasecurity / trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
chaitin / SafeLine
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
topjohnwu / Magisk
The Magic Mask for Android
Autumn-27 / ScopeSentry
ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes
YuKongA / ghostlock-app
GhostLock One-Tap Execution App (CVE-2026-43499)
getlantern / lantern
Open-source VPN for speed, privacy, and censorship circumvention. Free to download on Android, iOS, Windows, macOS, and Linux.
keepassxreboot / keepassxc
KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.
stalwartlabs / stalwart
All-in-one Mail & Collaboration server. Secure, scalable and fluent in every protocol (IMAP, JMAP, SMTP, CalDAV, CardDAV, WebDAV).
danielmiessler / SecLists
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
SimoneAvogadro / android-reverse-engineering-skill
Claude Code skill to support Android app's reverse engineering
openbao / openbao
OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.
projectdiscovery / nuclei-templates
Community curated list of templates for the nuclei engine to find security vulnerabilities.
hiddify / hiddify-app
Multi-platform auto-proxy client, supporting Sing-box, X-ray, TUIC, Hysteria, Reality, Trojan, SSH etc. It’s an open-source, secure and ad-free.
trufflesecurity / trufflehog
Find, verify, and analyze leaked credentials
KernelSU-Next / KernelSU-Next
An advanced Kernel based root solution for Android
SukiSU-Ultra / SukiSU-Ultra
Kernel-based Android Root Solution & KPM
LadybirdBrowser / ladybird
Truly independent web browser
rapid7 / metasploit-framework
Metasploit Framework
openssl / openssl
General purpose TLS and crypto library
microsoft / mxc
Policy-driven, layered isolation and containment
opa334 / TrollStore
Jailed iOS app that can install IPAs permanently with arbitary entitlements and root helpers because it trolls Apple
mailcow / mailcow-dockerized
mailcow: dockerized - 🐮 + 🐋 = 💕
edoardottt / awesome-hacker-search-engines
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
PatchMon / PatchMon
Linux Patch Management & Automation Platform
objective-see / LuLu
LuLu is the free open-source macOS firewall
V4bel / dirtyfrag
Linux local privilege escalation exploit chaining two page-cache write kernel bugs (xfrm-ESP and RxRPC) to gain root.
OWASP / wstg
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
docker-mailserver / docker-mailserver
Production-ready fullstack but simple mail server (SMTP, IMAP, LDAP, Antispam, Antivirus, etc.) running inside a container.
vulhub / vulhub
Pre-Built Vulnerable Environments Based on Docker-Compose
simplex-chat / simplex-chat
SimpleX - the first messaging network operating without user identifiers of any kind - 100% private by design! iOS, Android and desktop apps 📱!
OWASP / Top10
Official OWASP Top 10 Document Repository
ShiftLeftSecurity / codepropertygraph
Code Property Graph: specification, query language, and utilities
vxunderground / MalwareSourceCode
Collection of malware source code for a variety of platforms in an array of different programming languages.
fleetdm / fleet
Open device management
digininja / DVWA
Damn Vulnerable Web Application (DVWA)
EchoStretch / kstuff-lite
Modified kstuff-lite PS4 kernel-exploit toolkit (1.11-opt) that optimizes UELF/KELF transitions, FPU/CR0 handling, and adds opt-in diagnostics.
opengrep / opengrep
🔎 Static code analysis engine to find security issues in code.
PrivateBin / PrivateBin
A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.
sleep3r / mtproto.zig
Keep the people you love connected — a tiny self-hosted Telegram proxy that hides in plain HTTPS
UnboundTechCo / defyxVPN
A modern, secure VPN application built with Flutter that provides internet freedom and privacy protection.
dhicoc / dsh-reverse-skill
Complete reverse-skill (88 SKILL.md) as a DeepSeek Harness (dsh) Cordis plugin — reverse engineering, authorized pentesting and security research skill pack.
opnsense / core
OPNsense GUI, API and systems backend
mandiant / flare-vm
A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.
Mbed-TLS / mbedtls
An open source, portable, easy to use, readable and flexible TLS library, and reference implementation of the PSA Cryptography API. Releases are on a varying cadence, typically around 3 - 6 months between releases.
tegal1337 / CiLocks
Crack Interface lockscreen, Metasploit and More Android/IOS Hacking
Orange-Cyberdefense / GOAD
game of active directory
joernio / joern
Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.gg/vv4MH284Hc
signalapp / Signal-iOS
A private messenger for iOS.
MISP / MISP
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
BLAKE3-team / BLAKE3
the official Rust and C implementations of the BLAKE3 cryptographic hash function
OpenZeppelin / openzeppelin-contracts
OpenZeppelin Contracts is a library for secure smart contract development.
thewhiteh4t / seeker
Accurately Locate Smartphones using Social Engineering