📈 GH Trending Explorer 🎲 Surprise me
ragibson / Steganography

Least Significant Bit Steganography for bitmap images (.bmp and .png), WAV sound files, and byte sequences. Simple LSB Steganalysis (LSB extraction) for bitmap images.

★ 665 Python 9d ago
Frissi0n / GTFONow

Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins.

★ 642 Python 4d ago
SecNN / AiScan-N

AiScan-N 来了!这是一款基于人工智能驱动的Ai自动化网络安全(运维)工具,专注于网络安全评估、漏洞扫描、运维、应急响应、渗透测试自动化,Ai大模型工具集【CLI Agent】 ,Ai驱动的安全检测技术,提升安全测试(运维)效率,专为企业和个人用户打造,尤其适合初学者(小白)快速上手使用,让你轻松迈入智能安全攻防时代!适用场景 :如(红队演练、CTF比赛、Web应用渗透测试、内网横向移动、密码破解与暴力攻击、流量分析与威胁检测、APT攻击模拟、漏洞赏金挑战等场景)🎥演示视频(文章中):https://mp.weixin.qq.com/s/7lsUdbrxkDy4P5pZhEWv7Q

★ 583 28d ago
ianshulx / React-projects-for-beginners

Are you a beginner eager to enhance your React JS skills? Look no further! This repository is the perfect platform for you to dive into the world of React development and contribute to open source during Hacktoberfest. @Hacktoberfest @ReactJS

★ 562 JavaScript 24d ago
3dem / relion

Image-processing software for cryo-electron microscopy

★ 561 C++ 5d ago
bcoles / kasld

KASLD defeats Linux kernel KASLR from a local process — recovering the virtual and physical memory layout where a leak or side channel allows, and narrowing it to the smallest set of placements the evidence supports otherwise.

★ 555 C 9d ago
S1N6H / pentest-harness

Pentest Harness — Heaven for Hackers. A self-hosted AI agent harness for authorized pentests, bug bounty, security labs, and CTFs. Bring your own AI model API; sessions stay local.

★ 426 TypeScript 13d ago
dhicoc / dsh-reverse-skill

Complete reverse-skill (88 SKILL.md) as a DeepSeek Harness (dsh) Cordis plugin — reverse engineering, authorized pentesting and security research skill pack.

★ 274 PowerShell 12d ago
dslsdzc / rev-skills

122 个逆向工程 AI 技能:恶意软件分析 / 软件逆向 / 固件嵌入式 / 协议逆向 / 移动应用 / 脱壳反混淆 / 软件破解 / 漏洞挖掘 / 托管代码 / 取证情报 / CTF。

★ 186 JavaScript 9d ago
Noz2 / RootHound

Map your path from a low-priv user to roo, like BloodHound, for local Linux privesc.

★ 173 Python 2mo ago
lordx64 / pentestkit

Autonomous multi-agent pentest framework — plans, exploits, verifies (proof-required), CVSS-scores and writes client-ready reports. 104/104 (100%) on the XBOW validation benchmarks, powered by Kimi K3.

★ 120 Python 2mo ago
laoshu666 / hermes-seagull

🦅 Seagull Profile - Unrestricted CTF/Red-team AI personality for Hermes Agent | 海鸥破甲人格

★ 81 PowerShell 1mo ago
ZeroDayEvil / CVE-2026-20817

🛡️ Official AI Security Tool module for CVE-2026-20817 (Windows Error Reporting WER ALPC Local Privilege Escalation PoC).

★ 69 1d ago
Hello-CTF / NexTerm

SSH、WinRM、SFTP、Docker、数据库与 AI 的一体化终端工作台

★ 63 Go today
xiaoliu07-sudo / xiaoliu-pojia

小liu破甲 - Codex CLI jailbreak prompt and one-click deploy tool. 基于CTF框架的Codex破甲提示词与一键部署工具

★ 57 Python 2mo ago
1rhino2 / fnprint

match functions in binaries by what they do, not what their bytes look like. behavioral function fingerprinting via microexecution.

★ 55 Rust 12d ago
LovelyTeams / LovelyCarve

a forensic carver with a soft heart · 基于 Rust、Tauri 2 与 Vue 3 的桌面磁盘取证与数据恢复工具:只读解析镜像、文件系统与加密卷,提供原类型预览、全局搜索、时间线、文件雕刻与插件分析

★ 46 Rust today
SagarBiswas-MultiHAT / The-BlackHAT-roadmap

The complete hacking & penetration testing roadmap. From beginner to elite. 44,982 lines, 150+ Diagram across the roadmap: OPSEC, web security, Active Directory, binary exploitation, EDR evasion, and 0-day research. 300+ tools, 200+ MITRE techniques, C & Rust payloads, lab guides, books, courses, blogs, practice platforms, and AI security resources

★ 33 C 4d ago
X1NONs / C-for-exploit-development

The Exploit Development Trilogy. A free, zero-to-hero guide covering C programming, reverse engineering, and modern memory corruption. Master the stack, heap, ROP, and kernel exploitation.

★ 31 10d ago
0xdnd / ctf-tracker

Free offline CTF tracker for HackTheBox & TryHackMe — OSCP/CPTS/CRTO exam simulator, writeups, cheatsheets.

★ 31 TypeScript today
weidutech / pi-recon

Lightweight AI red teaming harness for authorized agent / GenAI challenges (BCTF Agent Plus–style): schedule, bounded recon, validate, digest.

★ 28 Python 1mo ago
weidutech / PentestPi

Autonomous Penetration Testing Agent Framework with External State Memory & Anti-False-Falsification Guardrails.

★ 27 Python 1mo ago
m0m0x01d / strata

See why a web vulnerability works, not just how to trigger it — a single-file, zero-dependency security lab that renders a vulnerable app as a 7-layer cross-section. 17 labs, attacker & defender modes, AI-authorable.

★ 26 HTML 1mo ago
mahaloz / ilio-mini

A tiny infrastructure for Codex to solve CTF challenges in reverse engineering. 3rd in Flare-On 13.