> cat /dev/github | grep security-tools

~/hackyfeed $

A cybersecurity tools aggregator — discover the latest pentesting, red team, and offensive security tools from GitHub.

sort: ( this page )

awesome-skills

Awesome Skills is a curated library comprising 956 skill files that provide role-based AI skills organized by professional domains. Intended for use with language model runtimes like Claude Code and OpenCode, each skill consists of system prompts or instruction sets designed to develop a consistent persona, tool expertise, or methodological workflows. Notable features include a comprehensive catalog that differentiates skills by kind (persona, tool, workflow), an evaluation system for internal quality scoring, and a structured layout that facilitates easy navigation and integration.

awesome-agent-skills

VoltAgent's "Awesome Agent Skills" is a curated repository of official agent skills developed by prominent teams and the community, designed to enhance interaction with various AI platforms like Claude and GitHub Copilot. This collection emphasizes quality over quantity, featuring a broad selection of 1497+ skills tailored for practical use cases, developed by engineering professionals rather than generated by AI. Notable features include compatibility with multiple AI tools and continuous updates contributed by a dedicated community.

Reecon

Reecon is a lightweight network reconnaissance tool designed for early-stage network enumeration and information gathering. It features manual suggestions for various enumeration techniques, including HTTP/S and SMB, and operates as a standalone application with built-in components of the .NET Framework. Currently in development, it is not recommended for production use, and future enhancements are planned for broader functionality, such as improved DNS querying and service detection capabilities.

netsentinel

NetSentinel is a comprehensive network management tool designed for discovering devices, diagnosing connectivity issues, and monitoring network health. It features rogue device detection, detailed device inventory, bandwidth monitoring, a root cause correlator, and automated reporting capabilities, all while ensuring complete data privacy with a fully local, open-source architecture. With its extensive functionality, NetSentinel serves as a powerful aide for network administrators and users seeking to enhance both security and reliability in their network environments.

lumioguard-tools

LumioGuard Tools is a suite of web assessment tools that enables users to analyze public URLs for various vulnerabilities and performance indicators without repository access or user credentials. It features three core components: Slopmeter, which identifies design and structural weaknesses; Leakpeek, which detects exposed vulnerabilities in backend configurations; and Citecheck, which evaluates the accessibility of content for crawlers. Each tool provides a comprehensive report scoring findings to quantify risks effectively.

Clippy

Clippy is an Android tool designed to enhance link management by allowing users to easily copy links from their device's sharing menu. Its primary use case is to provide a cleaner and more secure link experience by enabling users to copy either the original URL or a version stripped of URL shorteners and tracking parameters. Notable features include seamless integration with the sharing options of various apps and straightforward functionality for copying both raw and cleaned links.

remote-desktop-monitor

Wolfeye PC Monitor is a lightweight remote monitoring tool designed for Windows that enables users to view live screen activity and access automated screenshot logs from any modern web browser. It is particularly useful for managing remote teams, enhancing corporate data protection, and ensuring compliance through real-time visibility and minimal system impact. Notable features include instant screen streaming, customizable screenshot intervals, and a quick setup process that requires no complex network configuration.

awesome-embedded-security

Awesome Embedded Security is a curated repository offering a comprehensive collection of tools, resources, and training focused on enhancing security in embedded systems. It covers a wide range of topics, including firmware analysis, reverse engineering, hardware hacking, and IoT security, featuring notable tools for binary analysis, debugging, fuzzing, and secure boot processes. This repository serves as a valuable resource for cybersecurity professionals seeking to conduct thorough assessments and improve the security posture of embedded devices.

mole

Mole is a Binary Ninja plugin that facilitates the identification of significant execution paths within binaries through backward slicing of variables, leveraging the Medium Level Intermediate Language (MLIL) in Static Single Assignment (SSA) form for static taint analysis. Its primary use case lies in vulnerability detection, where it allows users to define source and sink functions, visualize paths, and analyze them using AI integration for classifying potential vulnerabilities. Notable features include operational flexibility, extensive path exploration options, customizable path grouping strategies, persistence of analysis progress, and inter-procedural variable slicing.

ida-headless-mcp

ida-headless-mcp is a Rust-based, multi-session headless server implementation for IDA Pro, designed to facilitate concurrent analysis of multiple databases while ensuring session isolation. Notable features include an explicit supervisor/worker architecture for process management, session lifecycle control, and a comprehensive suite of analysis tools categorized into 12 groups. This tool operates without GUI support, making it ideal for automated and headless environments requiring IDA Pro integration.

wrappem

WrappEm is a Windows tool designed for adversarial payload execution by utilizing three distinct methods of subverting the Windows Image Loader through byte-based manipulation of a binary file’s Import Directory and Import Section. Its primary use case involves inserting an additional executable binary into a host process's virtual address space, serving as an alternative to traditional export forwarding techniques. Notable features include support for multiple methods of import manipulation and compatibility with various build systems, all implemented without external dependencies.

rsleigh

rsleigh is a pure-Rust reverse-engineering workbench designed to convert various binary formats, including PE, ELF, and Mach-O, into C-like pseudocode and other structured outputs like disassembly and call graphs. This tool excels in static analysis workflows by enabling users to navigate binaries efficiently, uncover function calls, analyze packed code, and integrate findings with LLMs for automated analysis, without dependence on JVM or C++ bindings. Notably, it supports a multi-architecture API, allowing for flexible integration and insights into binary behavior.

TinySecrets

TinySecrets is a comprehensive repository focused on the technical specifications and modding potential of small PCs from Lenovo, Dell, HP, and Acer. It details comparisons of system boards, configurations, and available PCIe riser types across various models, complemented by high-resolution images. This tool serves as a valuable resource for hardware enthusiasts looking to explore unutilized capabilities and modifications of compact computer systems.

th095

The TH095 project aims to reconstruct the original Japanese version 1.02a of the game "Shoot the Bullet" by providing a framework for precise byte-level comparison against an authenticated executable. Notable features include the support for exact function restoration, semantic analysis using IDA Pro, and tracking of source presence and validation for various game components, with an aspirational reconstruction target of 99.5% accuracy. Users can import their legal copy of the game executable to verify against established criteria, facilitating a comprehensive understanding of the game's architecture.

GTA5-DMA-CHEAT

The GTA5 DMA Control Console provides an external interface for Direct Memory Access (DMA) manipulation in Grand Theft Auto V, supporting both the original and Enhanced versions of the game. It features dynamic offset resolution for seamless updates, real-time player and vehicle monitoring, and comprehensive control options such as teleportation, vehicle editing, and weapon functionality. Built with C++23 and utilizing Dear ImGui for its UI, it allows users to modify game states efficiently while ensuring automatic detection of critical game parameters.

youtube-metadata

MW Metadata is a tool designed to extract comprehensive metadata for YouTube videos, playlists, or channels via the YouTube API, making it particularly useful for investigative purposes and OSINT tasks. Notable features include the ability to find unlisted videos, perform reverse image searches on thumbnails, and export or import data in various formats for future use. The tool also automates language translations and provides geolocation capabilities, streamlining the analysis of YouTube content.

youtube-geofind

MW Geofind is a tool designed for searching YouTube videos based on geographic tags, allowing users to find content by location, topic, or channel. Its notable features include the capability to view results on a map, filter for recent uploads or live events, and export data to CSV. The tool also supports OSINT investigations by enabling detailed searches for geotagged videos and integration with an API for sharing search results.

youtube-comment-suite

YouTube Comment Suite is a cross-platform tool designed for aggregating and analyzing comments from multiple YouTube videos, playlists, and channels. Its primary use case is to enhance comment management for creators and researchers by allowing users to search comments based on various criteria and display detailed statistics about comment activity and user engagement. Notable features include support for keyword searches, archiving capabilities for thumbnails and profiles, and the ability to view video context alongside comments.

cwv-scanner

cwv-scanner is a Python-based tool designed to identify common web application vulnerabilities by scanning specified URLs or IP addresses. It checks for 36 types of vulnerabilities including SQL Injection, Cross-Site Scripting (XSS), and Remote Code Execution, facilitating website owners and security researchers in enhancing their application's security posture. Notable features include a straightforward installation and usage process, allowing for quick deployment in vulnerability assessments.

CTFlearn-Writeups

CTFlearn-Writeups is a compilation of detailed solutions for various Capture The Flag challenges across multiple domains such as Cryptography, Forensics, and Web security. The tool serves as a reference for practitioners and enthusiasts looking to enhance their skills in cybersecurity challenge-solving. Notable features include categorized writeups that cover a range of problem types, providing structured insights into methodologies and techniques used in each challenge.

snatch

Snatch is a Python-based tool designed for OSINT (Open Source Intelligence) tasks, aimed at cybersecurity and hacking practitioners. It utilizes AI to automate the generation of resources such as password lists, email identification, and social media profiling based on user-defined prompts. Notable features include a ports scanner, website/video/data downloader, and a robust directory and subdomain listing module, although many features are still in development or forthcoming.

awesome-OSINT

Awesome OSINT is a curated collection of open-source intelligence (OSINT) tools designed to facilitate various investigative processes, such as people searching, domain mapping, and breach data analysis. The repository categorizes tools based on specific use cases, including social media intelligence, geolocation, and threat intelligence, enabling users to efficiently select the appropriate resources for their OSINT needs. Notable features include frameworks that integrate multiple OSINT functions and extensive categorization for ease of navigation.

asimov-sdk

The ASIMOV Software Development Kit (SDK) provides a polyglot framework for building trustworthy neurosymbolic artificial intelligence systems. It includes a command-line tool and a library that enables developers to create dataflow applications using reusable components called blocks, while supporting multiple programming languages such as Dart, Python, Ruby, Rust, and TypeScript. Notable features include a module system for ecosystem integration, flow-based program patterns for knowledge refinement, and its public domain licensing.

asimov-cli

ASIMOV CLI is a command-line interface designed for efficient data fetching and importation from various URLs, leveraging installed modules for enhanced functionality. Key features include the ability to automate data retrieval processes, execute external commands, and support multiple installation methods through popular package managers. This tool aims to streamline the data handling tasks in a public domain software environment.

funny-virus

Funny-virus is a collection of harmless, fun scripts designed to simulate playful "virus-like" behaviors for entertainment and educational programming experimentation. Notable features include the generation of random pop-up windows, playful text color changes, and fake system messages, allowing users to safely explore humorous programming concepts without causing any actual harm. The project emphasizes responsible use and is intended solely for non-malicious purposes.