This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.org
The authentication glue you need.
UNIX-like reverse engineering framework and command-line toolset
Modern networking and security platform providing secure access and connectivity to apps, infrastructure, and AI workloads. Connect and protect your users.
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
一个用于在 macOS 上平滑你的鼠标滚动效果或单独设置滚动方向的小工具, 让你的滚轮爽如触控板 | A lightweight tool used to smooth scrolling and set scroll direction independently for your mouse on macOS
Automated Nginx Reverse Proxy for Docker
The Cloud-Native API Gateway and AI Gateway
Downloads videos and playlists from YouTube
Cloudflare Tunnel client
A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM, 8-bit AVR and 32-bit RISC-V architectures.
Build your own 'AirTags' 🏷 today! Framework for tracking personal Bluetooth devices via Apple's massive Find My network.
视觉小说翻译器 / Visual Novel Translator
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.
Command-line tool that allows you to search for iOS, iPadOS, tvOS, watchOS, visionOS, and macOS apps on the App Store, and download .ipa or macOS .pkg app packages.
Program for determining types of files for Windows, Linux and MacOS.
Socket-based TS/JavaScript API for WhatsApp Web
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
Exploit Development and Reverse Engineering with GDB & LLDB Made Easy
Open Source API and AI Gateway supporting REST, GraphQL, TCP, gRPC and MCP (Model Context Protocol)
Record and Replay Framework
Automagically reverse-engineer REST APIs via capturing traffic
A toolkit for developing high-performance HTTP reverse proxy applications.
An open-source post-exploitation framework for students, researchers and developers.
Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, PowerPC, RiscV, S390x, TriCore, X86)
A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.
Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.
🧙 Build, run, and manage data pipelines for integrating and transforming data.
.NET API Gateway
Android Full-Stack Device Control Platform: WebRTC/H.264 remote desktop, UI/OCR/image-matching automation, one-click MITM, built-in Frida, proxy/VPN/frp/P2P networking, MCP/Agent, 160+ APIs, designed for multi-device clusters and engineered deployments.
Point Claude at any game. Skills, tools and the fal MCP that let Claude Code mod almost any PC game you own: recon, reverse engineering, fal-generated art/3D/audio, in-game testing, showcase videos.
GO Simple Tunnel - a simple tunnel written in golang
The modern Java bytecode editor
Tunnel all your traffic over Websocket or HTTP2 - Bypass firewalls/DPI - Static binary available
HAProxy Load Balancer's development branch (mirror of git.haproxy.org)
CaptainHook Tweak、Logos Tweak and Command-line Tool、Patch iOS Apps, Without Jailbreak.
Reverse engineering and pentesting for Android applications
A modern layer 7 load balancer from baidu
The FLARE team's open-source tool to identify capabilities in executable files.
☁️ The Most Secure and Easy Selfhosted Home Server. Take control of your data and privacy without sacrificing security and stability (Authentication, anti-DDOS, anti-bot)
A True Instrumentable Binary Emulation Framework
A Cloud Native traffic orchestration system. (CNCF Project)
Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading, convention enforcement, batch operations, Ghidra Server integration, and Docker deployment.
Export iMessage data + run iMessage Diagnostics
A high-performance, 100% client-side tool for removing Gemini AI image & video watermarks. Built with pure JavaScript using mathematically precise Reverse Alpha Blending. / 基于 JavaScript 的纯浏览器端 Gemini AI 图像和视频无损去水印工具,使用数学精确的反向 Alpha 混合算法
LIEF - Library to Instrument Executable Formats (C++, Python, Rust)
A general purpose HTTP reverse proxy and forwarding tool. Now written in Go!
Next Generation Agentic Proxy for AI Agents and MCP servers
Unofficial Galaxy Buds Manager for Windows, macOS, Linux, and Android
Pomerium is an identity and context-aware access proxy.
Secure internet sharing made simple.
Caddy as a reverse proxy for Docker
Kaitai Struct: declarative language to generate binary data parsers in C++ / C# / Go / Java / JavaScript / Lua / Nim / Perl / PHP / Python / Ruby / Rust
Re-write of Injection for Xcode in (mostly) Swift
📡 Comprehensive collection of OSINT tools for cybersecurity professionals, researchers, and bug bounty hunters. Topics: information gathering, reverse search, red team, trust & safety, AI.
Analyze ELF binaries like a boss 😼🕵️♂️
An open-source framework for Steam Client themes and plugins
Decompiler from Java bytecode to Java, used in IntelliJ IDEA.