> cat /dev/github | grep security-tools

~/hackyfeed $

A cybersecurity tools aggregator — discover the latest pentesting, red team, and offensive security tools from GitHub.

sort: ( this page )

scrapy-dockerhub

Scrapy DockerHub is a tool designed for deploying, running, and monitoring Scrapy spiders using Docker containers. It leverages the Fabric command line utility to manage remote container instances, automatically generating necessary Dockerfiles and allowing users to schedule spider executions, monitor job statistics, and access logs. Notable features include the ability to deploy projects remotely, manage jobs with detailed statistics, and easily customize Docker configurations.

scrapy-crawl-once

The `scrapy-crawl-once` middleware for Scrapy optimizes web scraping by preventing the re-crawling of pages that have already been downloaded in previous runs. It allows users to control which requests to skip through a `request.meta['crawl_once']` flag, storing fingerprints of crawled requests in a SQLite database, thereby enhancing efficiency and reducing unnecessary load on web resources. Notably, it offers customizable settings for storage paths and default behaviors, distinguishing it from similar tools like `scrapy-deltafetch` and the built-in Scrapy HTTP cache.

scrapy-cdr

Scrapy CDR is a library designed for handling Call Detail Record (CDR) formats within the Scrapy web scraping framework, primarily supporting CDR v3.1 and offering backward compatibility with CDR v2 through conversion and upload utilities. Notable features include a dedicated media pipeline for managing media items in accordance with CDR v3 schema and scripts for efficient uploading to Elasticsearch and converting between CDR format versions.

scraper

Firmadyne's scraper is a tool designed to automate the extraction of firmware images and their associated metadata from various device vendor websites. It leverages the Scrapy framework for web crawling and includes functionality for storing metadata in a SQL server if configured. Notable features include customizable scraper configurations and the capability to execute multiple scrapers in parallel for enhanced efficiency.

scientific-agent-skills

Scientific Agent Skills provides a robust library of 158 predefined skills designed for scientific and research tasks, enabling integration with any AI agent that supports the open Agent Skills standard. Notable features include support for over 100 scientific databases, capabilities for complex analyses like cancer genomics and regulatory sequence prediction, and the option to operate the tool locally with a desktop setup while ensuring data privacy. The tool is particularly suited for researchers and professionals in the scientific community aiming to enhance their workflows with AI-driven automation.

sarif-tools

SARIF Tools is a command line and Python library designed for processing SARIF (Static Analysis Results Interchange Format) files, which are used for outputs from static analysis tools. Its notable features include the ability to interpret various formats of static analysis outputs while ensuring compliance with the SARIF standard, allowing developers to standardize and manage their analysis results effectively. This tool is primarily used to enhance the compatibility and readability of static analysis data across different ecosystems.

sample-host-hermesagent-on-amazon-bedrock-agentcore

The Hermes Agent on Amazon Bedrock AgentCore allows users to deploy the Hermes Agent within Firecracker microVMs that offer per-user isolation and automatic scaling. This tool leverages AWS Bedrock's Claude models through a seamless integration that does not require Anthropic API keys, instead utilizing AWS IAM credentials for secure access. Notable features include multi-channel messaging support for various platforms, infrastructure as code deployment via CDK, and a persistent state maintained in S3, enhancing the overall user experience in cloud-based environments.

safestclaw

SafestClaw is a versatile and cost-effective alternative to OpenClaw that operates without the need for a large language model (LLM), focusing on providing reliable machine learning capabilities. It enables users to perform tasks such as social media summarization, research, and security audits locally, with minimal risk of prompt injection and without ongoing API costs. Notable features include offline functionality, cross-platform compatibility, and the ability to customize the tool for various tasks while maintaining a strong emphasis on privacy and data management.

safedocs

Safedocs is a tool designed for testing PDF lexical analyzers to ensure compliance with the PDF standard and interoperability across different implementations. It provides a variety of test artifacts, including compacted syntax test files, hand-coded PDFs for targeted testing, and Unicode password test files, all aimed at addressing potential issues in PDF processing and enhancing robustness in handling Unicode. Notable features include meticulously crafted test cases, hand-coded PDFs, and a focus on the intricacies of PDF token delimiters and Unicode support.

Rikugan

Rikugan is a reverse-engineering agent designed for integration with IDA Pro and Binary Ninja, leveraging a multi-provider LLM to enhance the analysis experience directly within the disassembler UI. Key features include an agentic loop for real-time interaction, over 60 tools for various reverse-engineering tasks, experimental natural language patching and deobfuscation capabilities, and robust memory management for persisting analysis findings. This tool enables users to execute complex workflows without the need to switch contexts or rely on external MCP clients.

rex

Rex is a tool designed for advanced crash triaging, exploration, and exploitation of vulnerabilities, particularly focusing on crash scenarios like buffer overflows. Its notable features include the ability to generate exploits that manipulate registers, leak memory, and export them in various formats (C, Python, binary) while supporting Linux ELF binaries. Rex also enables users to explore crashes to identify exploitation primitives and assess the reliability of generated exploits against specific defenses.

ReverseTCPShell

The ReverseTCP Shell is a cybersecurity tool designed for remote access and control of target systems through a reverse TCP connection. Its primary use case involves facilitating operations such as information retrieval, file transfers, and capturing screenshots from compromised hosts. Notable features include modular Command and Control (C2) server capabilities, remote host information display, file upload/download functionalities, and a screenshot capture option.

redqueen

Redqueen is a high-performance general-purpose fuzzer designed for x86 binary applications, focusing on bypassing checksums and magic bytes without relying on complex program analysis methods like symbolic execution. Utilizing virtual machine introspection to monitor function call arguments, it generates specific input mutations for effective fuzz testing. This tool is built on kAFL and requires Intel VT-x and Intel Processor Trace support, providing a streamlined approach for security researchers to identify vulnerabilities.

real_ip_discover

real_ip_discover is a tool designed to uncover the actual IP address of a server that is obscured behind a protective layer of services like Cloudflare and Akamai. It operates by sending HTTP/S requests to a specified list of IPv4 addresses and checking for a predetermined HTML match to identify the real server IP. Key features include the ability to utilize various methods for sourcing potential IP ranges and options for custom URI paths, threading, and verbosity levels during execution.

Raspyjack

RaspyJack is a portable offensive toolkit designed for use with Raspberry Pi devices and primarily aimed at authorized security testing and research. It features an LCD-driven handheld interface, dual-display support, and includes 231 payloads across multiple categories, along with a WebUI for remote control, various WiFi attack utilities, and exfiltration methods, making it versatile for penetration testing and educational purposes. Additionally, it supports a range of hardware configurations and offers an integrated Payload IDE for custom development.

rainmana-claude-skills

The rainmana Claude Plugin Marketplace is a collection of domain-specific plugins designed to enhance the capabilities of Claude AI by supplying various skills over time through organized bundles. Notably, it features a music production plugin that includes a skill for composing original melody seeds, which exports multi-track MIDI and WAV files, along with a streamlined installation process via Claude Code. The repository allows for easy updates and maintenance of skills as well as the ability to manage multiple plugins efficiently.

rainmana-binja-scripts

The rainmana-binja-scripts repository contains a collection of lightweight scripts designed to enhance the user experience and productivity within the Binary Ninja reverse engineering platform. Its primary use case revolves around automating repetitive tasks and simplifying workflows for users of Binary Ninja. Notable features include simplicity and ease of integration into existing Binja environments.

railway-skills

Railway Skills is a set of agent skills designed for integration with Railway, supporting multiple platforms such as ChatGPT, OpenAI Codex, and Claude. The tool allows for seamless plugin installation and configuration, enabling users to leverage Railway's hosted MCP server and utilize the `use-railway` Agent Skill across various environments. Notable features include a straightforward CLI installation process and compatibility with multiple AI coding assistants, enhancing developer productivity while working with Railway applications.

python-sploitkit

SploitKit is a Python library designed to facilitate the creation of Metasploit-like console frameworks, enabling users to build custom command-line interfaces for exploitation tools. It features a comprehensive API that allows the definition of various console entities, including commands, modules, and data storage models, along with over 20 pre-built commands for managing different functionality levels. Ideal for security researchers and penetration testers, SploitKit offers a structured and extensible approach to designing user interfaces for security assessment tasks.

pyspark-style-guide

The PySpark Style Guide provides best practices and coding standards for writing efficient and maintainable PySpark code. Its primary use case is to aid developers in navigating the complexities of the PySpark syntax, emphasizing the importance of clean code principles and offering guidance on column selection and logical operations. Notable features include explicit recommendations on minimizing verbosity and enhancing readability, along with practical examples to illustrate preferred coding styles.

pycallgraph2

pycallgraph2 is a Python module that generates visual call graph representations for applications, offering support for Python versions 2.7 and above, and 3.3 and above. It enables users to visualize function call relationships through static graphs using tools like Graphviz and Gephi, and features extensibility for custom output formats, customizable coloring based on metrics such as call frequency and execution time, as well as modular grouping for enhanced readability.

pyatv

The pyatv library is an asyncio-based Python client for interfacing with Apple TV and AirPlay devices, supporting functionalities across all generations of Apple TVs as well as audio streaming to devices like HomePods and AirPort Express. Notable features include remote control capabilities, metadata retrieval, app management, user account switching, and device-specific audio output adjustments. The tool is designed for easy integration with existing macOS applications and supports persistent storage for settings and credentials.

py-meltysynth

Py-MeltySynth is a pure Python SoundFont MIDI synthesizer, designed to require no external dependencies beyond the standard library. Its primary use case is the synthesis of MIDI files while offering notable features such as support for standard MIDI files, an all-in-one implementation for ease of integration, and ongoing development towards performance optimization for real-time audio processing.

PwnXSS

PwnXSS is a Python-based XSS scanner designed to identify cross-site scripting vulnerabilities in web applications. Its primary use case involves crawling websites to detect potential XSS weaknesses in both GET and POST forms through customizable settings and advanced error handling. Notable features include multiprocessing support, the ability to handle various HTTP methods, and the option to configure proxies and user agents for more thorough testing.

purplesploit

PurpleSploit is a modular offensive security framework designed to enhance pentesting workflows with both a command-line interface and a web interface. It focuses on improving efficiency through automated credential management, module selection, and scan analysis, allowing users to execute commands without repetitive typing. Notable features include a context management system utilizing SQLite databases for centralized credential and target management, and an interactive menu for module selection, modeled similarly to the Metasploit framework.