> cat /dev/github | grep security-tools

~/hackyfeed $

A cybersecurity tools aggregator — discover the latest pentesting, red team, and offensive security tools from GitHub.

sort: ( this page )

extfstools

extfstools is a suite of utilities for reading ext2, ext3, and ext4 filesystem images, primarily designed for extracting files from Android system images. Notable features include the ability to export entire filesystems, list files, and perform detailed hexdumps of blocks and inodes. While it provides essential functionality for handling ext filesystems, full support for ext4 is limited, potentially affecting file extraction completeness.

evilginx2

Evilginx is a sophisticated man-in-the-middle attack framework designed for phishing login credentials and session cookies, effectively bypassing two-factor authentication. The tool is fully implemented in Go, featuring its own HTTP and DNS server, enabling straightforward setup and deployment; it includes advanced functionalities such as phishing detection evasion, bot traffic prevention, and comprehensive support for multi-domain DNS providers.

europa

EUROPA is a robust framework for modeling and solving problems in Planning, Scheduling, and Constraint Programming, primarily designed for embedding within host applications. It features a comprehensive Plan Database for managing plans, a customizable Problem Solver for flaw detection and resolution, and a high-level modeling language for domain description, making it both efficient and extendable for various problem domains.

etcd

etcd is a distributed key-value store designed to manage critical data for distributed systems, emphasizing simplicity, security, speed, and reliability. Utilizing the Raft consensus algorithm, it provides automatic TLS for secure communications and is benchmarked to handle 10,000 writes per second, making it suitable for production environments, particularly in conjunction with orchestration platforms like Kubernetes. Notable features include a well-defined gRPC API, client certificate authentication, and robust testing mechanisms to ensure high availability.

ESP32Marauder

ESP32Marauder is a comprehensive suite of WiFi and Bluetooth offensive and defensive tools tailored for the ESP32 platform. Its primary use case includes network security assessments and penetration testing, featuring a range of functionalities such as packet injection, sniffing, and network scanning. Notably, it offers an accessible setup for users and is designed for both beginners and experienced security professionals.

esp32_nat_router_extended

ESP32 NAT Router Extended is a firmware that transforms the ESP32 microcontroller into a versatile WiFi NAT router, enabling it to function as a range extender for existing networks or to create isolated networks for guests and IoT devices. Noteworthy features include a user-friendly web interface for configuration, support for OTA updates, bypassing restrictions on public WiFi, and a portable design suitable for battery-powered use.

elmasy

Elmasy is an attack surface analysis tool designed to discover and assess publicly accessible assets associated with a given domain. It features a user-friendly website interface for both professionals and non-professionals, an API for developers to programmatically interact with its functionalities, and a set of libraries that facilitate comprehensive assessment of various protocols and services. The tool aims to evolve continually, starting from foundational network layers and basic service evaluations.

Eclipser

Eclipser is a binary-based fuzz testing tool designed to enhance coverage-based fuzzing through grey-box concolic testing. It primarily targets Linux ELF binaries and integrates with AFL for random-based fuzzing, facilitating advanced test case generation while leveraging QEMU for program instrumentation. Notable features include support for multiple input sources, an updated command-line interface, and compatibility with various Linux distributions.

easy-frida

Easy-frida is a tool designed for the rapid development of Frida agent scripts and modules for reverse engineering tasks. It features a REPL console with autocomplete functionality, the ability to define custom commands, and interaction with local function variables, along with a library of commonly used agent functions for streamlined coding. This tool enhances the Frida scripting experience, making it more efficient for developers working on dynamic instrumentation and analysis.

EADINLite

EADINLite is a master/slave network protocol designed for efficient, real-time communication in distributed control systems, particularly for aerospace applications like engine control. It features a command/response structure with a maximum payload size of 8 bytes, optimized for half-duplex serial communication over RS-485 networks, providing round-trip times as low as 943 microseconds at 4,000,000 baud. The protocol supports multiple node configurations without requiring time synchronization and is tailored for microcontrollers, with future implementations expected in FPGA or ASIC environments.

duckdb

DuckDB is a high-performance analytical database designed for efficient data processing and complex querying. It features a rich SQL dialect that supports advanced functionalities such as nested subqueries, window functions, and complex data types, while offering seamless integration with programming environments like Python and R. The tool can be used as a standalone CLI application or through various client libraries, facilitating easy data import from formats like CSV and Parquet.

dtxmsg

dtxmsg is an IDA plugin designed for reverse-engineering the DTXConnectionServices framework used by Apple for communication between iOS and OSX, particularly in the context of debugging with Xcode. The tool detects key points in the DTXConnectionServices binary, sets breakpoints, and captures DTXMessages—packets of data exchanged during these interactions, which it can decode and output in plain text format. This plugin is particularly useful for researchers and security analysts delving into how iOS debugging and instrumentation mechanisms work.

dsq

dsq is a command-line tool designed for executing SQL queries against various data formats, including JSON, CSV, Excel, and Parquet, while serving as a companion to the GUI tool DataStation. Its notable features include support for complex data transformations, interactive REPL, and the ability to handle nested objects and arrays. Although currently not under active development, it stands as a versatile solution for lightweight data analysis tasks.

doxygen

Doxygen is a documentation generation tool that extracts documentation from annotated source code in various programming languages, including C++, C, and Python, among others. Its primary use case is to create comprehensive and consistent documentation in multiple formats such as HTML, LaTeX, and PDF, while also providing features for code structure visualization and dependency analysis. Notable features include support for generating collaboration diagrams and inheritance graphs, aiding developers in navigating large codebases efficiently.

dots

1amSimp1e's dot files repository provides a comprehensive collection of configurations for enhancing aesthetic customization across multiple desktop environments, specifically HyprLand and GNOME. Notable features include themed GTK configurations, terminal emulator settings with plugins such as Oh My Zsh and Starship Prompt, as well as various Gnome Shell extensions for improved functionality and visual appeal. This tool is primarily used by users seeking to enhance their Linux desktop environments with visually pleasing and highly customizable setups.

dolt

Dolt is a version-controlled SQL database that operates similarly to Git, allowing users to fork, clone, branch, and merge data tables just like code repositories. With its MySQL compatibility, Dolt facilitates standard SQL operations as well as version control features through a command line interface and system-level commands. Notable features include table versioning, conflict resolution, and the ability to host and share databases via DoltHub.

dockerscan

DockerScan is a comprehensive security scanner designed for Docker containers and images, utilizing advanced techniques based on the latest industry research and standards to identify vulnerabilities. Its notable features include support for the CIS Docker Benchmark, supply chain attack detection, and an extensible plugin architecture, enabling users to conduct thorough compliance checks and automate security assessments in CI/CD pipelines. Written in Go for improved performance, DockerScan offers real-time insights into potential security flaws across container environments.

docker-tor-rotator

The Docker Tor Rotator project provides a scalable solution for managing multiple Tor instances through load balancing with HAProxy, allowing users to configure up to 20 Tor daemons by default. Its notable features include easy customization of the number of Tor instances during the build process and an integrated HAProxy status page for monitoring. This tool is primarily used for enhancing anonymity and web scraping by rotating Tor proxies seamlessly.

docker-pwndrop

linuxserver/docker-pwndrop is a Docker container designed for securely managing and transferring files using a web-based interface. Its primary use case revolves around providing a simple and safe method for users to upload and download files over HTTP/HTTPS, including options to share files with others through generated links. Notable features include regular security updates, user-defined permissions, and integration with the LinuxServer.io ecosystem for enhanced usability and maintenance.

docker-agent

Docker Agent is a Docker CLI plugin that facilitates the creation, execution, and sharing of collaborative AI agents using a declarative YAML configuration. Notable features include a multi-agent architecture for automatic task delegation, a rich ecosystem of built-in tools and compatibility with various AI models, and robust capabilities for advanced reasoning and retrieval-augmented generation (RAG). Users can quickly deploy agents from YAML files or OCI registries, making it accessible for developers looking to harness AI without coding.

dnxty

dnxty is a command-line DNS TXT Record Extraction Utility that performs DNS lookups on domains to extract key/value pairs from TXT records, primarily utilized by OSINT analysts and security researchers. Notable features include automated extraction of common verification strings, multiple output formats (including JSON, YAML, and CSV), simplified output options, and advanced filtering capabilities, making it suitable for integration with other Linux command-line utilities.

discordo

Discordo is a lightweight and secure terminal client for Discord, designed to provide users with an alternative interface for accessing Discord functionalities. It allows for customizable settings and keybindings, supports authentication via token or QR code, and offers prebuilt binaries and package manager installations for various operating systems. Notable features include a user-friendly UI for login and configuration, making it suitable for users seeking a streamlined Discord experience.

digio-theme

Digio theme is a minimalist and retro theme designed for the Hugo static site generator, utilizing pixel and ASCII art styles. Its primary use case is for personal blogs, offering features such as tagging, external link integration within post lists, and mobile responsiveness. Notable functionalities include easy customization options for front matter, icons, and seamless integration with Tailwind CSS for styling.

digger

Digger is a CI/CD tool designed to run Terraform natively within existing CI environments, facilitating secure and cost-effective infrastructure management. Its notable features include PR-level Terraform plan and apply comments, integration with Open Policy Agent for RBAC, and support for drift detection, ensuring efficient collaboration and execution without the need for separate infrastructure. This tool is particularly advantageous over traditional platforms like Atlantis, as it eliminates the need to host additional servers and maintains sensitive data within the CI environment.

dgraph

Dgraph is a horizontally scalable and distributed GraphQL database designed for high-performance, real-time queries over large datasets. Its notable features include ACID transactions, consistent replication, and linearizable reads, optimized for efficient query performance through a native GraphQL interface. Dgraph supports deployment via Docker and is engineered to meet production-level scalability and throughput requirements for enterprise applications.