> cat /dev/github | grep security-tools

~/hackyfeed $

A cybersecurity tools aggregator — discover the latest pentesting, red team, and offensive security tools from GitHub.

sort: ( this page )

cloudspy

CloudSpy is a proof-of-concept web application leveraging Frida for dynamic instrumentation and analysis of cloud-based services. Its primary use case involves monitoring and interacting with cloud environments in real-time through a user-friendly web interface. Notable features include easy setup through npm installation and access via a local server, enabling quick deployment for cloud security assessments.

cli

GitHub CLI (`gh`) enables users to interact with GitHub directly from the command line, allowing for efficient management of pull requests, issues, and other repository tasks alongside their existing Git workflow. It is compatible with GitHub.com, GitHub Enterprise Cloud, and GitHub Enterprise Server, supporting multiple operating systems including macOS, Windows, and Linux. Notable features include installation via package managers, built-in skills for automation, and cryptographic verification of releases to ensure security and integrity.

claude-mem

Claude-Mem is a persistent memory compression system designed specifically for integration with Claude Code. Its primary use case is to enhance memory efficiency and management within this AI framework, allowing for optimized data handling. Notable features include support for various languages and a robust licensing model under the Apache 2.0 license.

classless-css

Classless CSS is a curated repository of classless CSS themes and frameworks that allows developers to style HTML pages without the need for specific classes, facilitating rapid prototyping and simplified design integration. The tool features a diverse array of themes, enabling users to easily link stylesheets to any plain HTML document while maintaining visual appeal and responsiveness. Notably, it includes various styles such as Almond.CSS, attriCSS, and many more, making it a versatile resource for web developers.

CIVOPS-Radar

CIVOPS-Radar is an offline-first, ethical Wi-Fi scanning tool designed for network diagnostics on Android devices using Termux. It offers features such as passive Wi-Fi scanning, live radar visualization, signal analysis, and automated risk assessment, all while ensuring complete local data storage and no internet dependency. This tool is ideal for authorized wireless environment testing and provides flexible export options while adhering to privacy-focused principles.

Cisco_AnyConnect_VPN

The Cisco AnyConnect VPN tool provides cross-platform support for secure remote access on Linux, Windows, and macOS systems. Its primary use case is to facilitate encrypted connections to corporate networks, ensuring secure data transmission. Notable features include support for multiple installation packages across various operating systems and version flexibility.

chrome_extension_fcc

This Chrome extension provides users with the latest COVID-19 data for the UK, leveraging HTML, CSS, and JavaScript with Bootstrap 5 for its user interface. Its primary use case is to deliver real-time statistics related to the pandemic, enhancing accessibility to crucial health information. Notable features include a responsive design and an intuitive interface for quick data retrieval.

cfn-diagram

cfn-diagram is a CLI tool designed to visualize AWS CloudFormation, SAM, and CDK templates as diagrams in various formats, including draw.io and HTML. It offers features like resource type filtering, CI mode for non-interactive execution, and supports both JSON and YAML templates, allowing users to customize their visualizations according to specific stacks or resource types.

cfn-diagram

cfn-diagram is a command-line interface (CLI) tool designed to visualize CloudFormation, SAM, and CDK templates by generating diagrams in both Draw.io and HTML formats. Notable features include the ability to filter resource types, support for JSON and YAML templates, and options to customize output file names, making it suitable for effectively visualizing and managing cloud infrastructure architecture.

CFGScanDroid

CFGScanDroid is a utility designed for scanning Android applications by comparing control flow graph (CFG) signatures to the CFGs of Android methods, primarily aimed at detecting malicious apps. Notable features include various scanning modes such as exact and partial matches, the ability to process DEX files directly for efficiency, and options for outputting results in JSON or GraphML formats. The tool also allows for signature dumping, normalization of graphs, and customization of output verbosity to enhance usability in different scanning scenarios.

cdk-dia

CDK-Dia is a tool designed to generate automated diagrams of AWS CDK provisioned infrastructure using the Graphviz dot language. The primary use case is to visualize the architecture of CDK applications, with features including the ability to customize diagrams, ignore specific resources, and generate outputs in both PNG and interactive HTML formats. It supports various CDK languages, although customization features are currently limited to TypeScript/Javascript projects.

cantordust

CantorDust is a binary visualization tool designed to enhance reverse engineering practices by leveraging human visual pattern recognition to identify patterns in binary data. Primarily functioning as a Ghidra plugin, it allows users to analyze binary files more effectively, with dependencies on Ghidra version 9.1 or higher. Notable features include support for visualizing both bitmap and code representations, making it easier for users to draw insights from complex binary structures.

calculus-made-easy

Calculus Made Easy is an online resource designed to simplify the concepts of calculus for learners. Its primary use case is to provide accessible educational content derived from a public domain text, enhancing understanding of calculus through clear explanations. Notable features include an emphasis on clarity and ease of comprehension, making it suitable for beginners in the subject.

BurpSuiteHTTPSmuggler

Burp Suite HTTP Smuggler is a Burp Suite extension designed for penetration testers to effectively bypass Web Application Firewalls (WAFs) and assess their security efficacy using various techniques. It currently features an encoding capability, simplifying the complex manual processes involved and aims for future updates that will introduce additional techniques and bug fixes.

burpsuite-ai-pal-ext

AI Pal is a Burp Suite extension that leverages Large Language Models (LLMs) to enhance vulnerability analysis, generate attack vectors, and clarify HTTP traffic for security researchers. Key features include support for multiple LLM providers, context-driven actions for analyzing requests and responses, an interactive chat interface for conversational engagement on vulnerabilities, and a tasks dashboard that tracks analysis operations. This tool aims to streamline the workflow of security professionals by integrating AI-powered capabilities directly within the Burp Suite environment.

Brida

Brida is a Burp Suite extension designed to bridge the gap between Burp and Frida, enabling security professionals to manipulate application methods while intercepting communication between applications and their backend servers. The tool includes a collection of Frida hooks for common tasks, a graphical analysis interface for binary inspection, and an integrated JavaScript editor for custom script development, thereby accelerating mobile assessments and addressing complex security challenges inherent in mobile application architectures. Its primary use case is to assist pentesters in analyzing mobile applications with sophisticated security measures that hinder traditional testing methodologies.

bitcoinbook

Mastering Bitcoin is a comprehensive technical book that elaborates on the concepts and implementation of Bitcoin. It serves as a valuable resource for both newcomers and seasoned developers, offering in-depth explanations across its three editions, first published in 2014 and culminating in a third edition released in December 2023. Notable features include free-to-read online access for personal use and varying licensing terms that affect the availability of derivative formats like PDFs.

binnavi

BinNavi is a binary analysis Integrated Development Environment (IDE) designed for inspecting, navigating, editing, and annotating control-flow graphs of disassembled code, while also allowing for the management of execution traces and analysis results among teams. It prominently features integration with the yFiles graph visualization library for advanced graph rendering, and it utilizes a PostgreSQL database for storing disassemblies and other relevant data. Although the project is no longer under active development, it provides a structured environment for detailed code analysis and collaboration.

BiglyBT

BiglyBT is an open-source, ad-free BitTorrent client that provides a comprehensive feature set for efficient file sharing. Its primary use case is to facilitate the downloading and uploading of files via the BitTorrent protocol, while notable features include extensive customization options, community-driven development, and a user-friendly interface. With over 20 years of heritage, it aims to meet a wide range of user needs in torrent management and performance.

BFuzz

BFuzz is an input-based fuzzing automation tool designed for web browsers that utilizes HTML test cases generated by the Domato framework. It opens instances of either Chrome or Firefox to systematically run test cases, logging results and cycling through them repeatedly for a designated duration, without altering the test cases themselves. Key features include automated instantiation of browser sessions and the ability to generate diverse test cases from application-agnostic grammar files.

beautiful-jekyll

Beautiful Jekyll is a customizable website template that facilitates the rapid creation of personal sites, blogs, or project websites. Notable features include mobile-first design, seamless integration with analytics and comment systems, built-in SEO capabilities, and an easy setup process via GitHub or Ruby gem. With over 50,000 users, it is built on modern best practices to ensure high performance and aesthetic appeal.

Bastillion

Bastillion is a web-based SSH console and SSH key management tool designed for streamlined management of SSH access across multiple systems. It features a browser-based terminal for real-time session management, allowing users to broadcast commands to multiple hosts simultaneously, alongside centralized SSH key management for secure access control without long-lived user keys. Notable functionalities include two-factor authentication, diligent session recording for compliance, and the ability to group systems into profiles to refine access permissions.

bashfolio

Bashfolio is a terminal-style portfolio website that mimics the appearance and functionality of a Unix shell, allowing users to interactively explore information about the creator through command inputs such as `whoami` and `projects`. Notable features include authentic command-line interface simulations, realistic typing animations, and customizable color themes, all crafted using HTML, CSS, and vanilla JavaScript without reliance on frameworks. This tool offers a unique fusion of retro computing aesthetics and modern web development practices, distinguishing it from conventional portfolio sites.

bahunya

Bahunya is a classless CSS framework designed to streamline web development by utilizing semantic HTML elements for styling, thus eliminating the need for additional CSS classes. With a focus on simplicity, it features a lightweight file size of approximately 10.46 kB, provides a built-in navbar, and emphasizes improved accessibility for screen readers. The framework allows developers to create visually appealing applications with ease, prioritizing semantic HTML for better readability and maintainability.