> cat /dev/github | grep security-tools

~/hackyfeed $

A cybersecurity tools aggregator — discover the latest pentesting, red team, and offensive security tools from GitHub.

sort: ( this page )

scc

scc is a high-performance tool designed for counting lines of code, blank lines, comment lines, and physical lines across various programming languages. Its primary use case includes COCOMO and LOCOMO calculations for project cost estimation, as well as metrics for code complexity and uniqueness, making it an all-encompassing solution for code analysis. Additionally, it offers capabilities for generating HTML reports and insights into codebase evolution, catering to individual developers as well as enterprise needs.

SatDump

SatDump is a versatile satellite data processing software capable of both live and offline processing of satellite signals, suitable for users with a foundational understanding of signal processing. It offers a graphical user interface (GUI) for ease of use, as well as a command-line interface (CLI) for advanced operations, allowing users to analyze recorded data or directly utilize software-defined radio (SDR) inputs. Notable features include the ability to select from various processing pipelines, record data in real-time, and customize settings for different types of input formats and signal specifications.

SafeLine

SafeLine is a self-hosted Web Application Firewall (WAF) designed to secure web applications by filtering and monitoring HTTP traffic, thereby protecting against a wide range of attacks, including SQL injection, XSS, and code injections. Key features include proactive defense against bot abuse, HTML and JavaScript code encryption, IP-based rate limiting, and customizable web access control lists, ensuring comprehensive protection for web services.

s3reverse

s3reverse is a command-line tool designed for discovering and verifying Amazon S3 bucket names. Its primary use case is to check a list of potential S3 bucket names for existence and access permissions, providing various output formats to present the results. Notable features include options for specifying output styles (name, path, and virtual-hosted) and a verification mode to test the accessibility of found buckets.

s3enum

s3enum is a stealthy enumeration tool designed for discovering Amazon S3 buckets using DNS queries to bypass access log tracking. It generates candidate bucket names by combining a specified target name with entries from user-defined word and suffix lists, and allows customization of DNS servers and concurrent workers to optimize enumeration performance. Notable features include the ability to test multiple names simultaneously and the use of different delimiters in bucket name construction.

rueidis

Rueidis is a high-performance Golang Redis client that facilitates automatic pipelining for non-blocking commands and supports server-assisted client-side caching. Notable features include a developer-friendly command builder, OpenTelemetry integration, distributed locks, and compatibility with various Redis modules such as RedisJSON and RediSearch. Designed for optimal throughput, Rueidis enhances Redis operations by reducing latency through its efficient concurrency management.

rp

rp++ is a fast ROP gadget finder designed for PE, ELF, and Mach-O binaries across x86, x64, ARM, and ARM64 architectures. Its primary use case involves locating ROP gadgets and pointers to specific integers or strings, with customizable options for the gadget's instruction count and base address. Notable features include the ability to analyze raw code dumps and versatile search capabilities for integer and hexadecimal values.

rod

Rod is a high-level web automation and scraping framework that utilizes the Chrome DevTools Protocol, enabling both high-level and low-level customization for developers. Notable features include auto-waiting for elements, a chained context design for task management, thread safety, and built-in capabilities for handling browser crashes without leaving zombie processes. The tool also offers high-level helpers for common tasks such as event waiting and request handling, along with comprehensive documentation and examples for ease of integration.

robopages

Robopages is a YAML-based framework designed for simplifying the integration of external tools with large language models (LLMs) by allowing developers to describe these tools in a structured format. By using the robopages function calling server, it eliminates the need for manual JSON declarations, enhancing maintainability and enabling dynamic interactions. Notable features include support for function parameters, command line execution, and the ability to define tools within containerized environments.

ring3-kit

The ring3-kit is a user-mode rootkit that hides processes from the Windows Task Manager by hooking the NtQuerySystemInformation API function. Its primary use case is to obfuscate running processes from visibility within system monitoring tools, facilitating stealth operations. Notable features include the DLL injection into Taskmgr.exe, which allows the execution of the hooked code in a modified virtual memory space.

revng

rev.ng is an open-source binary analysis framework utilizing LLVM and QEMU, providing advanced decompilation capabilities. Its primary use case is to facilitate reverse engineering and analysis of binary files, aiding security researchers and developers. Notable features include its integration with LLVM for enhanced analysis and the comprehensive decompiler that assists in translating binary code into high-level representations.

retro

Retro is a Markdown theme designed to evoke a nostalgic aesthetic when converting Markdown to HTML. It integrates seamlessly with `rework-npm` and includes a rework CSS in the provided index.css file. Its primary use case is to enhance the visual presentation of Markdown content, making it visually appealing with a retro style.

rethinkdb

RethinkDB is an open-source NoSQL database designed for building scalable and real-time web applications by storing schemaless JSON documents. It features a unique data access model that allows applications to receive automatic updates on query results without polling, enabling rapid development of real-time applications. Additionally, RethinkDB supports high availability with automatic failover and is compatible with various programming languages through official and third-party drivers.

Research

My personal repository for findings and things to remember

registration-relay

The registration-relay serves as a middleware component that facilitates communication between the iMessage bridge and various registration providers on Mac and iOS platforms. Its primary use case is to handle incoming requests and authenticate providers using a secret key, while offering configurable listening ports and Prometheus metrics support. Notable features include support for secure websocket connections and integration with Docker for easy deployment.

ragflow

RAGFlow is a cloud-based platform designed for managing and optimizing Retrieval-Augmented Generation (RAG) workflows in AI applications. Its primary use case is to enhance information retrieval processes using advanced machine learning techniques. Notable features include a user-friendly web interface, robust API support, Docker containerization for deployment, and comprehensive documentation for ease of integration and development.

qgroundcontrol-herelink

The CubePilot QGroundControl - Herelink Fork is a specialized version of the QGroundControl software designed for use with the Herelink controller, facilitating enhanced drone management and control. Its primary use case is to provide a user-friendly interface for overseeing MAVLink-compatible drones, featuring capabilities for manual installation via ADB and comprehensive support documentation for users. Notable features include APK sideloading for system integration and access to the general QGroundControl functionality, tailored for the Herelink environment.

Pyto

Pyto is a Python IDE designed for iOS that enables users to write and execute Python scripts directly on their devices. Its primary use case is for mobile development and scripting, providing features such as syntax highlighting, code completion, and support for external libraries. Notably, it allows for the importation and execution of Python code seamlessly within the iOS environment.

privoxy

Privoxy is a web proxy tool designed to enhance privacy and security by filtering web traffic, primarily when used alongside Tor. Its notable features include easy deployment via Docker, configuration for linking to a Tor SOCKS proxy, and a simplified setup that minimizes debugging output while maintaining an Alpine base for lightweight usage.

prest

pRESTd is a production-ready API tool that enables instant REST and Model Context Protocol (MCP) APIs on top of existing or new PostgreSQL databases. Its primary use case is to facilitate CRUD operations, custom SQL routing, authentication, access control lists (ACL), and read-only MCP endpoints without the need for backend code development. Notable features include support for multiple databases, a variety of installation options (Docker, Homebrew, Go), and easy configuration for custom queries and security.

PPLBlade

PPLBlade is a Protected Process Dumper Tool designed to extract and obfuscate memory dumps while bypassing Protected Process Light (PPL) protections. It features the ability to create fileless dumps using local or network methods, with options for obfuscation to evade detection by security software, as well as a cleanup functionality for error handling. Users can leverage various modes such as dumping, decrypting, and handling targets via direct access or through the PROCEXP driver.

postee

Postee is a message routing application designed to relay and notify users through a webhook interface, integrating with various third-party services. It primarily serves to send vulnerability scan results and audit alerts from Aqua Platform to collaboration systems while enabling predefined behavior enforcement based on input messages as triggers. Notable features include webhook support for message input and orchestration of actions based on predefined outputs.

pocketbase

PocketBase is an open-source backend solution written in Go, designed to provide a lightweight and integrated backend environment with an embedded SQLite database, real-time subscriptions, and user management. Its primary use case is to enable rapid application development with features such as a built-in admin dashboard and a simple REST-like API, making it suitable for both standalone use and as a customizable framework for Go applications. Notable features include the ability to extend functionality with JavaScript and the availability of official SDK clients for various platforms, facilitating seamless interaction with its APIs.

PinTools

PinTools is a collection of experimental pintools designed for dynamic program analysis, serving as proof-of-concept implementations across various analysis techniques. It includes notable features such as concolic execution, taint analysis, and overflow detection, providing a framework for behavioral monitoring and vulnerability assessment in software. While these tools are not reliable for production use, they offer valuable insights and methodologies for researchers in the cybersecurity domain.

picoclaw

PicoClaw is an ultra-lightweight AI assistant developed in Go, designed to operate on minimal hardware with less than 10MB of RAM and a cost of around $10. Its primary use case is to provide personal AI assistance while maintaining efficiency, achieved through a self-bootstrapping architecture that optimizes memory usage dramatically compared to existing solutions. Notable features include rapid boot times and compatibility across various hardware architectures, ensuring accessibility and performance for users.