> cat /dev/github | grep security-tools

~/hackyfeed $

A cybersecurity tools aggregator — discover the latest pentesting, red team, and offensive security tools from GitHub.

sort: ( this page )

Echo

Echo is an experimental framework designed for static analysis, symbolic execution, and emulation of binary code across various platforms. Its notable features include the ability to create and inspect control flow and data flow graphs, generate Abstract Syntax Trees (ASTs), and a virtual memory model for emulation. The tool supports multiple architectures with backends such as CIL and x86, enabling comprehensive binary analysis and manipulation capabilities.

EAC-Reversal

EAC-Reversal is a tool designed for the reverse engineering of Easy Anti-Cheat (EAC) mechanisms, facilitating the analysis and understanding of its behavior. The primary use case is for security researchers and developers looking to explore bypass techniques or improve their own anti-cheat solutions. Notable features include support for devirtualization of EAC binaries and extensive community contributions that enhance its usability and effectiveness in tackling anti-cheat challenges.

directional_speaker

The Ultrasonic Directional Speaker repository provides C++ code for the STM32 Microcontroller and KiCad schematic images for the circuit and transducer array, facilitating the construction of an affordable laser directional speaker, also known as a parametric speaker. Its primary use case is in creating directed audio applications where sound is focused in a narrow beam. Notable features include low-cost components and detailed schematic guidance for building the speaker system.

DICOMautomaton

DICOMautomaton is a versatile tool designed for the analysis of medical physics data, focusing on automation for various data types, including 2D/3D images, surface meshes, and radiotherapy plans. It offers multiple operating modes, such as command-line, graphical, and web interfaces, enabling flexible usage for both automation and user interaction. Notable features include support for numerous analytical techniques and transformations, making it suitable for advanced medical imaging and physics applications.

DevToys

DevToys is a multifaceted utility tool designed for developers, providing a suite of tools that streamline common tasks such as data conversion, encoding/decoding, formatting, and testing. The application features 30 built-in tools, including converters for various data formats and utilities for text and graphics manipulation, with the added capability of Smart Detection to enhance user experience by automatically selecting appropriate tools based on clipboard content. Additionally, users can extend its functionality by creating and integrating their own tools.

defcon27_csharp_workshop

The "Writing custom backdoor payloads with C#" workshop provides an immersive learning experience focused on the development of custom backdoor payloads leveraging C# for various command and control frameworks. It consists of eight lab exercises that explore techniques such as raw shellcode injection, process injection, and antivirus evasion to achieve reverse shell access on Windows hosts. Participants will gain practical skills in utilizing .NET capabilities for offensive and defensive cybersecurity strategies.

DeckSurf

DeckSurf is an open-source tool designed for managing Elgato Stream Deck devices through a lightweight CLI and a native Windows app. It offers capabilities such as profile management, plugin integration, and various functions like application launching and resource monitoring. Notable features include a built-in plugin called Barn, an intuitive profile editor, and compatibility with multiple operating systems.

de4dot-cex

de4dot CEx is a deobfuscation tool specifically designed to support vanilla ConfuserEx, enabling users to effectively restore obfuscated .NET assemblies to their original code. Notable features include the ability to decrypt and inline constants, handle control flow fixes, and ensure that the deobfuscated assemblies are runnable. It operates in x86 native mode and requires users to unpack the assembly prior to deobfuscation, with a cautionary note about potential malware risks.

cryptoshark

Cryptoshark is a self-optimizing cross-platform code tracer that operates at the machine code level using dynamic recompilation, facilitated by Frida and Capstone. Its primary use case is to analyze and log API function calls in real time, enabling developers to study targeted functions by injecting instrumentation code without requiring the source code. Notable features include thread tagging based on API usage and a robust build system that supports creating portable binaries for various operating systems.

cromite

Cromite is a privacy-centric web browser based on the Chromium engine, derived from the Bromite project, and designed for Android, Windows, and Linux platforms. Its primary use case is to enhance user privacy by incorporating built-in ad blocking and minimizing tracking features, while also allowing users greater control over browser settings. Notable features include anti-fingerprinting measures, support for multiple architectures, and a commitment to fostering collaboration with other open-source browsers.

Control-Surface

Control Surface is an Arduino library designed for creating MIDI controllers and control surfaces, offering a robust MIDI abstraction layer that supports multiple interfaces including 5-pin DIN, USB, and BLE. Notable features include easy integration of various input controls such as potentiometers and buttons, output controls like LEDs and displays, and advanced functionalities for managing multiple inputs and outputs using multiplexers and port expanders. The library simplifies the development of MIDI projects with minimal code and comprehensive documentation and examples.

CallMeMaybe

CallMeMaybe (CMM) is a C++ runtime reflection library that facilitates dynamic introspection, invocation, and instantiation of classes by building a reflection registry based on the static reflection features introduced in C++26. It allows developers to annotate class members with `[[=cmm::reflectable]]` for runtime accessibility while implementing a custom type system to circumvent RTTI. Notable features include automatic member traversal, string-based entity lookups, and the ability to dynamically invoke methods and constructors, offering a seamless integration with existing C++ projects.

BruteShark

BruteShark is a Network Forensic Analysis Tool (NFAT) designed for deep processing and inspection of network traffic, primarily targeting PCAP files and live capturing from network interfaces. Its key functionalities include extracting and encoding usernames and passwords from various protocols, reconstructing TCP and UDP sessions, generating visual network maps, and extracting authentication hashes for brute force cracking. Available in both a GUI version for Windows and a command-line interface for Windows and Linux, BruteShark serves as an effective resource for security researchers and network administrators in identifying potential network vulnerabilities.

bluetoothle

The ACR Reactive BluetoothLE Plugin facilitates cross-platform development for Bluetooth Low Energy (BLE) applications, enabling easy scanning, connection, and communication with BLE devices across various platforms like Android, iOS, and macOS. Key features include persistent connections, service discovery, and support for GATT operations, all while managing platform-specific challenges such as threading and permissions. This plugin serves as a comprehensive tool for developers seeking to implement BLE functionality with minimal complexity.

binskim

BinSkim is a lightweight Portable Executable (PE) scanner designed to validate compiler and linker settings along with other security-related binary characteristics. Its primary use case is to enhance software security through static analysis of binary files, outputting results in the SARIF format. Notable features include support for recursive scanning, customizable analysis configurations, and detailed logging options for execution statistics.

BigBountyRecon

BigBountyRecon is a reconnaissance tool designed to facilitate the initial information gathering phase in penetration testing and bug hunting through the utilization of 58 techniques, including various Google dorks and open-source tools. Its primary use case is to quickly and efficiently discover sensitive information about a target organization, such as configurations, log files, and database structures, thereby aiding in assessing security maturity and identifying potential vulnerabilities. Notable features include the ability to automate the search for open directories, configuration files, and other sensitive assets, streamlining the reconnaissance process for security professionals.

beeless

BeeByte Deobfuscator. Used it to deobfuscate an Unity3D Game. Alternatively, de4dot works aswell.

BabelDeobfuscator

BabelDeobfuscator is an open-source tool designed to deobfuscate applications obfuscated with Babel Obfuscator, utilizing the Dnlib library for assembly processing. Its primary use case is to facilitate the recovery of original code from obfuscated binaries by decrypting strings and removing demo version limitations. Notable features include the ability to handle ControlFlow and plans for future enhancements like renaming classes, fields, and methods.

Babel-Deobfuscator

Babel-Deobfuscator is an open-source tool designed to deobfuscate executables obfuscated with Babel Obfuscator. Its primary use case is to restore original code from obfuscated binaries, facilitating analysis or recovery of code functionality. Notable features include a straightforward command-line interface that allows users to enter the target executable's name for deobfuscation.

axmldec

axmldec is a specialized tool designed to decode the binary XML format of the `AndroidManifest.xml` found in APK files, enabling quick extraction and decoding of this manifest without the overhead of larger tools like Apktool. It outputs the decoded XML to the standard output or a specified file, facilitating batch processing and integration within shell scripts. Additionally, it allows direct extraction from APK files and can be incorporated into C++ projects using its parsing capabilities.

ArduinoHttpClient

ArduinoHttpClient is a library designed to facilitate interactions with web servers from Arduino devices, allowing seamless HTTP requests handling. It supports various networking hardware configurations through compatible Client instances, such as WiFi and Ethernet, while automatically managing request headers and parsing response status codes. Notable features include compatibility with multiple networking libraries, simplified client usage, and comprehensive handling of HTTP responses for streamlined development.

arduino-esp32

The Arduino core for the ESP32 provides a comprehensive platform for developing applications on Espressif's ESP32 System on Chips (SoCs) using the Arduino programming environment. Its primary use case is to enable developers to easily create IoT applications with support for various external libraries, real-time testing capabilities, and compatibility with existing Arduino and ESP8266 APIs. Notable features include extensive documentation, a robust roadmap for development, and community support through discussions and monthly meetings.

ardour

Ardour is a digital audio workstation (DAW) designed for recording, editing, and mixing audio and MIDI. Its primary use case is professional audio production, offering features like multitrack recording, non-destructive editing, and extensive plugin support. Notable capabilities include a modular routing system and comprehensive automation tools for advanced sound manipulation.