> cat /dev/github | grep security-tools

~/hackyfeed $

A cybersecurity tools aggregator — discover the latest pentesting, red team, and offensive security tools from GitHub.

sort: ( this page )

streamdeck-tools

BarRaider's Stream Deck Tools is a comprehensive C# library designed to streamline the development of plugins for the Stream Deck application, abstracting the complexities of communication between the plugin and the Stream Deck. With features including cross-platform support, an updated API leveraging SkiaSharp for enhanced graphics, and a user-friendly structure to manage plugin actions and settings, this library aims to facilitate faster and more efficient plugin development. Notable updates in version 7.0 include migration guidance, new rendering options, and the deprecation of outdated components, ensuring a modern and streamlined development experience.

Stracciatella

Stracciatella is a PowerShell runspace tool implemented in C# that enables the execution of PowerShell scripts with various mitigations like AMSI, ETW, and Script Block Logging disabled. It is designed for advanced adversarial simulation exercises, allowing comprehensive bypass of security mechanisms, while offering features such as encoded parameter handling, a pseudo-shell for script execution, and flexibility in cleanup options. The tool is optimized for users looking to conduct sophisticated red teaming activities without leaving detectable traces.

stanford_self_driving_car_code

The stanford_self_driving_car_code repository contains the software infrastructure utilized for Stanford University's autonomous vehicles that participated in the DARPA Grand Challenges. Its primary use case is to provide essential coding frameworks and algorithms for self-driving car technology development, with a focus on enhancing autonomous navigation and decision-making capabilities. Notable features include integration of advanced algorithms and historical contributions from influential research in the field.

StabilityMatrix

Stability Matrix is a multi-platform package manager and inference user interface designed primarily for deploying and managing Stable Diffusion web UI packages. Notable features include one-click installation and updates for various Stable Diffusion components, ensuring seamless integration and user accessibility across different operating systems, including Windows, Linux, and macOS.

srecord-cc

The `srecord-cc` tool is a C++ class designed for the parsing, composition, and modification of S-record formatted memory images, specifically S19, S28, and S37 types. Its primary use case involves reading from and writing to streams or files, offering features such as strict/non-strict validation, block structure with direct access methods, memory range manipulation, and automatic gap filling during block merging. Notable capabilities include error handling with descriptive messages, and memory management tailored to accommodate the constraints of target device memory spaces.

SpoolSample

SpoolSample is a proof-of-concept tool designed to exploit the MS-RPRN RPC interface, enabling Windows hosts to authenticate to other machines. Its primary use case is to demonstrate security risks associated with trusting Active Directory environments. Notable features include its reliance on the Print System Remote Protocol and the absence of support or extensions, indicating a focus on showcasing vulnerabilities rather than providing a robust solution.

spectre.console

Spectre.Console is a .NET library designed to facilitate the creation of aesthetically pleasing, cross-platform console applications. It offers features such as flexible table and grid support, a Rich-inspired markup language for text styling (including various formatting options), and advanced color capabilities based on terminal detection. The library is structured with unit testing in mind, ensuring robust application development.

Snaffler

Snaffler is a specialized tool designed for penetration testers and red teamers to efficiently discover sensitive files, particularly credentials, across large Windows Active Directory environments. It enumerates accessible file shares and evaluates their contents using a series of predefined patterns to identify potentially valuable data. Notable features include output options for logging findings, adjustable verbosity levels, and various filtering mechanisms to refine the discovery process.

Sloth

Sloth is a fuzzing tool designed to test Android native libraries through the emulation of aarch64 binaries on x86_64/aarch64 hosts using libFuzzer and QEMU's user-mode emulator. It allows users to easily set up a fuzzing environment, compile target libraries, and execute fuzz tests, leveraging a straightforward method for integrating target functions and managing test inputs. Notable features include a Docker-based setup for environment replication and the capability to manipulate and analyze complex library outputs during fuzzing sessions.

SilkETW

SilkETW and SilkService are C# wrappers designed to simplify the usage of Event Tracing for Windows (ETW), primarily serving as research tools for both offensive and defensive cybersecurity applications. These tools enable users to perform data collection, analysis, and introspection with outputs serialized in JSON format, which can be easily integrated with local PowerShell analysis or external systems like Elasticsearch. Notable features include straightforward command line usage and support for running ETW collection headlessly with multiple sources simultaneously through SilkService.

SharpView

SharpView is a .NET implementation of PowerView, designed for Active Directory enumeration and exploitation. It facilitates a wide range of functionalities such as retrieving domain controllers, managing group policies, and accessing user and computer information, enabling security professionals to assess and manipulate Active Directory environments effectively. Notable features include extensive ACL management, local group membership discovery, and domain trust analysis, making it a powerful tool for both penetration testing and security audits.

SharpStay

SharpStay is a .NET-based tool designed for maintaining persistence on Windows systems through various techniques, including elevated and non-elevated registry keys, scheduled tasks, and WMI event subscriptions. Its notable features include the ability to create services, manipulate shortcuts, and perform tasks such as listing scheduled tasks and running services, making it effective for both administrative and security testing purposes. It is a component of the larger StayKit framework, enabling users to effectively manage persistence mechanisms in their environments.

SharpSniper

SharpSniper is a reconnaissance tool designed for Red Team engagements, specifically to identify the IP addresses of targeted users within a domain, such as high-value individuals like CEOs. It operates by querying Domain Controllers for logon events and retrieving the most recent DHCP-assigned IP address for the specified user, requiring appropriate privileges to access the logs. Notable features include compatibility with .NET Framework v3.5 and the ability to use different authentication methods, including supplying credentials or utilizing current authentication tokens.

SharpSecDump

SharpSecDump is a .NET tool that mimics the remote SAM and LSA Secrets dumping capabilities of impacket's secretsdump.py, enabling the extraction of credential data from registry hives on targeted machines, including local systems. Key features include support for using alternate credentials, concurrent enumeration of multiple hosts, and the ability to dump hashes from the local system while running under high-integrity contexts. It is designed for use strictly in authorized environments and does not currently support NTDS.dit parsing or dcsync functionality.

SharpDPAPI

SharpDPAPI is a C# port of DPAPI functionality originally from the Mimikatz project, designed to facilitate the extraction and analysis of credential data and encryption keys. It provides command-line tools for user and machine triage, allowing users to access a variety of sensitive information such as masterkeys, credentials, and vaults. Additionally, the tool includes the SharpChrome subproject, enabling the extraction of information from Chrome and Chromium-based Edge browsers, further enhancing its utility in operational security assessments.

SharpChromium

SharpChromium is a .NET CLR tool designed to extract cookies, browsing history, and saved logins from Chromium-based browsers such as Google Chrome and Microsoft Edge. Its notable features include the output of cookies in JSON format for easy importation into browser extensions, and the ability to retrieve data without requiring SQLite assemblies or complex type compilations. This tool provides options to fetch all data or filter by specific domains and credentials.

ShareX

ShareX is a versatile, open-source screen capture and file-sharing tool designed for Windows, offering extensive features for fast and efficient screenshot creation, video recording, and automated file uploads. Notable functionalities include customizable capture options, advanced editing tools, OCR text recognition, and hotkey support for streamlined workflows, making it particularly valuable for developers, designers, and content creators who require robust control over their screenshot and sharing processes. The tool's emphasis on speed, privacy, and automation distinguishes it from standard screenshot applications.

score

ossia score is a versatile sequencer specifically tailored for audio-visual artists, enabling the creation of interactive performances by sequencing OSC, MIDI, DMX, audio, and video across various hardware and software platforms. The tool features extensive scripting capabilities in JavaScript and integration with multiple creative programming languages, supports a wide array of input devices, and allows for GPU processing of 3D geometry, all while maintaining compatibility with desktop, mobile, and embedded systems. Free and open source, it caters to complex audio-visual installations and performances, ensuring flexibility and interactivity.

saucer

Saucer is a modern C++ webview library designed for building lightweight and fast cross-platform desktop applications compatible with Windows, Linux, and MacOS. Its notable features include seamless C++/JavaScript interoperability, custom window decorations, and low binary sizes due to native rendering, alongside support for various backends and extensible modules for additional functionality. The tool is licensed under MIT and emphasizes performance with thread-safety, coroutine support, and minimal resource requirements.

RTLSDR-Airband

RTLSDR-Airband is a software tool designed for receiving and decoding airband radio signals using RTL-SDR (Software Defined Radio). Its primary use case is for aviation enthusiasts and professionals to monitor air traffic communication, offering features such as support for various platforms and CI workflows to ensure consistent performance across systems. The tool facilitates real-time radio signal processing, enhancing the user experience for tracking and analyzing airband frequencies.

retdec

RetDec is a versatile retargetable machine code decompiler based on LLVM, capable of analyzing a variety of executable file formats, including ELF, PE, and Mach-O across multiple architectures. Its primary use case involves static analysis of binaries, extracting debugging information, and reconstructing high-level constructs such as functions and C++ class hierarchies. Notable features include detailed static analysis, support for both C and a Python-like output language, demangling symbols, and generating graphical representations of call and control flow graphs.

RepoZ

RepoZ is a zero-configuration Git repository management tool designed to enhance navigation through multiple repositories via a user-friendly hub accessible through Windows Explorer and command line interfaces. Its primary use case revolves around streamlining workflows by providing immediate access to repository status and functionalities, such as opening command prompts or file browsers directly within selected repositories. Notable features include automatic repository detection, quick access shortcuts, and integration with a command-line sidekick app called "grr" for advanced command line access.

Radarr

Radarr is an automated movie collection manager designed for Usenet and BitTorrent users, facilitating the monitoring of multiple RSS feeds to manage downloads, sort, and rename movie files. It features automatic upgrades for existing library content, integration with various download clients and media servers like Plex and Kodi, and robust customization options for user preferences. Notable functionalities include automatic failure handling for downloads, manual search capabilities, and comprehensive metadata management for enhanced user experience.

qlcplus

QLC+ is an open-source lighting control software designed for managing lighting fixtures in live shows, theatre, architectural installations, and various venues. It supports multiple protocols such as DMX, Art-Net, and sACN, ensuring compatibility with a wide range of hardware while offering a user-friendly interface suitable for both novice and professional users. Notable features include functionality on multiple operating systems (Linux, Windows, macOS, Raspberry Pi) and extensive hardware support.