> cat /dev/github | grep security-tools

~/hackyfeed $

A cybersecurity tools aggregator — discover the latest pentesting, red team, and offensive security tools from GitHub.

sort: ( this page )

go-patterns

Go Patterns is a curated collection of idiomatic design and application patterns tailored for the Go programming language. It encompasses various categories such as creational, structural, behavioral, and synchronization patterns, offering detailed descriptions and statuses for each pattern to facilitate developers in implementing best practices. Notable features include comprehensive documentation and examples that cater to both novice and experienced Go developers seeking to enhance their software design skills.

go-github

go-github is a Go client library designed for seamless interaction with the GitHub API v3, allowing developers to programmatically manage and access various GitHub resources such as repositories and organizations. Key features include support for optional parameters in API calls, integration with context handling for cancellation and deadlines, and compatibility with modern Go versions. The library enhances efficiency and organization in development workflows by providing structured access to GitHub’s extensive API functionalities.

go-exhaustruct

`exhaustruct` is a Golang analyzer that identifies struct literals with uninitialized fields, ensuring comprehensive initialization in codebases. It offers both implicit and explicit checking modes, allowing users to enforce strict rules on required fields or apply fine-grained control via comment directives. Key features include customizable checking patterns and detailed configuration options for type selection, enabling teams to maintain code quality while accommodating large projects.

ginkgo

Ginkgo is a comprehensive testing framework for Go that facilitates expressive specification writing. It operates on top of Go's `testing` framework and integrates seamlessly with the Gomega matcher library, allowing developers to clearly articulate the intent behind their tests. Notable features include support for complex setups, timeouts for test execution, and the ability to mock asynchronous operations, enhancing both readability and maintainability of tests.

gguf-parser-go

GGUF Parser is a specialized tool for analyzing GGUF format model files, allowing users to preview metadata and estimate memory usage without downloading the entire file. Its notable features include remote metadata parsing through chunking, accurate memory predictions with minimal deviation, and the capability to calculate maximum tokens per second based on device metrics. Written in Go, GGUF Parser is designed for efficiency and speed, making it ideal for developers working with models converted to the GGUF format.

gf

The `gf` tool is a wrapper around `grep` designed to simplify the usage of complex searching patterns commonly needed during code audits or data analysis. It allows users to define and manage reusable search patterns stored in JSON files, streamlining the command invocation and reducing the risk of syntax errors. Notable features include the ability to save custom patterns, autocomplete functionality for quick access to defined searches, and support for alternative search engines to enhance performance and result presentation.

gau

getallurls (gau) is a tool designed to retrieve known URLs related to a specific domain from sources such as AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl. Its primary use case is for cybersecurity professionals and researchers to gather a comprehensive list of URLs for further analysis, with notable features including filtering by HTTP status codes, MIME types, and the ability to include or exclude specific file extensions. Additionally, gau supports multi-threading for enhanced performance and outputs results in various formats, including JSON.

fzf

fzf is a command-line fuzzy finder designed to enhance user experience by enabling easy and fast selection of files, browsing command history, and navigating datasets with fuzzy matching. Its primary use case lies in transforming shell scripts into interactive terminal applications, with notable features including high-performance processing, portable single-binary distribution, and extensive integrations with popular shells and editors like Bash, Zsh, Vim, and Neovim.

fyne

Fyne is a user-friendly UI toolkit and application API designed for building cross-platform applications in Go, supporting both desktop and mobile environments from a single codebase. Notable features include a range of pre-built widgets, ease of use for developers with straightforward integration, and the ability to create responsive applications quickly. Its compatibility with Go versions 1.22 and later ensures that developers can leverage modern Go functionality while constructing user interfaces efficiently.

fx

f(x) is a terminal-based tool designed for visually processing and transforming formatted data, enhancing data readability and manipulation in command-line environments. Its primary use case includes aiding users in converting complex data formats into a more accessible visual representation. Notable features include easy integration with various data sources and a user-friendly interface for quick transformations and analysis.

fx

fx is a lightweight tool that enables users to deploy Functions as a Service (FaaS) on their own servers, supporting both Docker and Kubernetes environments. It allows the creation of stateless functions in various programming languages, including Go, Rust, Node.js, Python, Ruby, Java, PHP, and more, making it versatile for developers. Notable features include easy installation across multiple operating systems and the ability to extend support for additional programming languages.

fwanalyzer

FwAnalyzer is a comprehensive tool designed to analyze various filesystem images, including ext2/3/4, FAT, SquashFS, and UBIFS, as part of firmware security assessments. It utilizes configurable rules to generate a detailed JSON report highlighting files that violate specified criteria, along with metadata and additional extracted information from the filesystem. Notable features include support for custom configuration files and integration with multiple filesystem analysis tools, enhancing its versatility for security audits.

FreeCAD

FreeCAD is an open-source parametric 3D modeling tool designed to create and modify real-life object designs of any scale. It allows users to sketch 2D shapes that can serve as a foundation for 3D objects, featuring robust flexibility and customization suitable for product design, mechanical engineering, and architecture. Notable features include a broad Python API, cross-platform compatibility (Windows, macOS, Linux), and the ability to utilize a powerful geometry kernel (OpenCASCADE) along with the Coin3D library for 3D visualization.

flynn

Flynn was a platform-as-a-service (PaaS) designed to facilitate the deployment, scaling, and management of applications in a cluster environment. Its primary use case involved simplifying the development and operational workflow for developers by providing tools for container orchestration and service management. However, the project is now unmaintained, with all related infrastructure shut down, and it is advised to transition to alternative solutions.

flutter

Flutter is a comprehensive SDK developed by Google for building visually appealing and high-performance applications across mobile, web, and desktop platforms using a single codebase. Its notable features include a rich set of customizable widgets, a layered architecture that allows precise control over UI elements, and optimized performance through hardware-accelerated graphics and the Dart programming language. Flutter is open-source and integrates easily with existing codebases, making it suitable for developers and organizations worldwide.

fleet

Fleet is an open-source platform designed for IT and security teams to manage and secure a diverse array of computing devices, ranging from desktops to cloud environments. It offers robust features including mobile device management (MDM), software deployment, and detailed diagnostics for troubleshooting, all of which can be managed through a GUI, REST API, or command-line tool. Notably, Fleet supports integration with various enterprise tools, provides visibility and compliance reporting based on CIS benchmarks, and allows configuration through GitOps or traditional methods.

firmware

Bruce is an advanced firmware for ESP32, designed for Red Team operations, offering extensive offensive capabilities on devices like M5Stack and Lilygo. Key features include advanced WiFi attacks (e.g., deauthentication, Evil Portal), BLE manipulation (e.g., spam attacks, Ducky scripts), and various RF functionalities (e.g., jamming, scanning). The tool is open-source and supports a range of hardware, providing an integrated environment for a variety of security testing scenarios.

firezone

Enterprise-ready zero-trust access platform built on WireGuard®.

firefly

Firefly is an advanced black-box fuzzer designed for detecting vulnerabilities in web applications by executing comprehensive checks against specified targets. Its notable features include support for high-performance fuzzing through goroutines, customizable payload handling with various encoding options, and a request verifier for enhancing the quality of results. Firefly accommodates sophisticated use cases by allowing extensive configuration of request types, filtering, and payload modifications, thereby increasing effectiveness in security assessments.

firebaseExploiter

FirebaseExploiter is a CLI-based tool designed for the mass scanning and exploitation of insecure Firebase databases. Its key features include the ability to scan multiple hosts for vulnerabilities, upload custom JSON data via a specified URI path during exploitation, and generate results that verify the exploitation of identified vulnerabilities.

Fabric

Fabric is an open-source framework designed to integrate AI into everyday tasks by organizing and managing prompts that facilitate AI interactions. Its primary use case is to enhance human productivity by collecting and structuring AI solutions for easy access and deployment across various tools. Notable features include command-line interface support, custom pattern creation, and compatibility with multiple AI models such as OpenAI Codex and Claude Opus.

fabric

Fabric is an open-source framework designed for the augmentation of human capabilities through AI integration. It efficiently organizes AI prompts by real-world tasks, allowing users to create, collect, and manage their essential AI solutions in a consolidated interface, particularly benefiting those who utilize command-line tools. Notable features include support for various AI backends via plugins, such as OpenAI Codex and Azure AI Gateway, enhancing user flexibility in accessing AI functionalities.

faas

OpenFaaS is a serverless framework that allows developers to easily deploy event-driven functions and microservices to Kubernetes by packaging code or binaries in OCI-compatible images. Key features include auto-scaling, a user-friendly UI for one-click installation, support for multiple programming languages via a Template Store, and the capability to trigger functions through HTTP or event sources like Apache Kafka and AWS SQS. This tool is designed for both individual exploration and commercial use, with different licensing tiers available.

extrude

Extrude is a security analysis tool designed to assess ELF and MachO binaries for missing security features and potential information disclosure issues. Currently in early development, it provides comprehensive checks for properties such as Position Independent Executables (PIE) and security mitigations like Stack Canaries and NX Stack. Future enhancements will include support for PE binaries, secret scanning, and detection of packers.