> cat /dev/github | grep security-tools

~/hackyfeed $

A cybersecurity tools aggregator — discover the latest pentesting, red team, and offensive security tools from GitHub.

sort: ( this page )

arducordermini

The Arducorder Mini is an Arduino-compatible open-source science tricorder designed to facilitate scientific exploration and education through accessible and customizable sensing tools. Its primary use case is to empower users to measure environmental variables, fostering community engagement and encouraging informed decision-making regarding social issues such as pollution. Notable features include ease of manufacture, compatibility with the ChipKit MAX32 platform, and a focus on enabling both beginners and developers to modify and enhance its functionality.

applocate

AppLocate is a Windows application discovery tool designed to locate installed applications and their associated configuration files quickly and efficiently. It queries multiple sources, including the registry, running processes, and various package managers, to provide ranked results with structured output, making it ideal for backup, migration, or troubleshooting tasks. Notably, it operates without requiring administrative privileges, performs all queries locally without network calls, and offers support for multiple output formats, including JSON and CSV.

AppleTrace

AppleTrace is a lightweight tracing toolkit for iOS and macOS that allows developers to instrument their applications and capture execution timelines either manually or automatically through Objective-C message hooking. Notable features include automatic and manual tracing sections, a rich set of event types, performance optimizations for minimal overhead, and seamless integration with the Perfetto visualization tool for analyzing the collected trace data.

AFLplusplus

AFL++ is an advanced fork of the American Fuzzy Lop (AFL) fuzzer, designed to enhance software testing through effective fuzzing techniques. It offers improved speed, a wider array of mutation strategies, and robust instrumentation options, making it suitable for testing various software environments, including binaries and network services. Notable features include custom module support and a dedicated Docker image for streamlined deployment, supplemented by comprehensive documentation for users and researchers.

adversary_emulation_library

The Adversary Emulation Library provides a comprehensive repository of emulation plans designed for organizations to assess and enhance their defensive capabilities against actual adversarial threats. It features two main types of plans: full emulation plans that replicate the complete attack lifecycle of specific adversaries, and micro emulation plans that focus on key behaviors common among multiple adversaries. This tool aids organizations in efficiently testing their defenses by utilizing realistic attack scenarios based on real-world threat actor behaviors.

zephyr

The Zephyr Project is a scalable real-time operating system (RTOS) designed for resource-constrained devices across various hardware architectures, including ARM, Intel x86, and RISC-V. It provides a small-footprint kernel optimized for applications such as IoT devices and wearable technology, incorporating a focus on security. Notable features include support for multiple boards and architectures, extensive documentation, and community-driven development and support resources.

zclaw

zclaw is a compact AI personal assistant designed for ESP32 boards, constrained to a firmware size of 888 KiB. It features scheduled tasks, GPIO control, custom tool composition using natural language, and supports various LLM providers including OpenAI and Ollama, along with a USB local admin console for diagnostics and recovery. With built-in capabilities for time-based actions and multiple user-defined tools, zclaw offers an extensible platform for IoT applications.

YTMusicUltimate

YTMusicUltimate is a tweak designed for YouTube Music on iOS, enabling enhanced functionality for users on jailbroken devices. It primarily facilitates the customization and optimization of the YouTube Music app through user-built IPAs or deb files for various device configurations. Notable features include the ability to compile customized versions of the app and a comprehensive guide for building the tweak using GitHub actions.

x64dbgpy

x64dbgpy is a Python library designed for automating the x64dbg debugger, providing an interface for users to script and extend the debugger's functionality through Python code. Its primary use case is to enhance reverse engineering and debugging processes by allowing programmatic control and automation of x64dbg features. Notable features include compatibility with both 32-bit and 64-bit configurations, integration with Python 2.7, and support for event callback translation, making it a versatile tool for developers and reverse engineers.

willow

The Willow Inference Server enables users to self-host a high-performance platform for language inference tasks, including speech-to-text (STT), text-to-speech (TTS), and large language model (LLM) applications. Notable features include compatibility with real-time communication technologies like WebRTC and a community-driven support system through GitHub discussions for user engagement and assistance.

UxPlay

UxPlay is an experimental AirPlay server designed for Linux, macOS, and Unix, enabling screen mirroring and audio streaming from Apple devices. Notable features include support for Bluetooth LE service discovery, options for recording media to mp4, and advanced language selection for audio tracks, alongside the ability to bypass UxPlay's rendering capabilities for external RTP streaming. The tool enhances compatibility across platforms by integrating an internal mDNSResponder, mitigating reliance on external services like Avahi and Bonjour.

UEFITool

UEFITool is a cross-platform open-source utility designed for viewing and editing UEFI firmware images, parsing them into a tree structure and verifying their integrity. Its primary use case lies in firmware analysis and modification for systems utilizing UEFI, enabling users to manipulate image elements through its graphical user interface. Notable features include compatibility with various architectures, support for newer UEFI specifications like FFSv3, and the ongoing development of its editing functionalities.

ttyd

ttyd is a command-line utility that enables users to share their terminal sessions over the web, allowing for remote terminal access via a web interface. Notable features include support for CJK characters, file transfer via ZMODEM, image output using Sixel, SSL encryption, and customizable command execution with basic authentication. It is cross-platform and can be installed on various operating systems, including macOS, Linux, and Windows.

TrollDecryptor

TrollDecryptor is a tool designed to decrypt App Store applications for use with TrollStore. Its primary use case is to enable users to extract and access the decrypted .ipa files of applications by providing the app's process ID (pid) obtained from CocoaTop. Notable features include a straightforward user interface for decryption and integration with Theos for building the application package.

tp-link-decrypt

TP-Link Decrypt is a tool designed to extract RSA keys from TP-Link firmware, enabling security researchers to analyze firmware for vulnerabilities without the risk of creating unauthorized firmware. Notable features include a dependency script, key extraction capabilities, and the ability to decrypt firmware files, while ensuring compliance with TP-Link's rights by using publicly available RSA keys. This project has been deprecated as of October 2025, with ongoing support transitioned to a different repository.

tp-link-decrypt

TP-Link Decrypt is a tool designed to extract RSA and DES keys from TP-Link firmware, facilitating the analysis of network switch firmware for security research. It supports both traditional TP-Link devices and Omada switches, enabling users to decrypt firmware files for vulnerability assessment. Notable features include an easy-to-use extraction script and preinstallation guidance to satisfy dependencies, while ensuring compliance with TP-Link's licensing terms.

tinyusb

TinyUSB is an open-source, cross-platform USB Host/Device stack designed specifically for embedded systems, emphasizing memory safety and thread safety. It supports over 50 MCU families and offers features such as comprehensive USB class support (including CDC, HID, and MSC), a small footprint, and real-time performance, making it suitable for various real-time operating systems and bare-metal applications. Key functionalities include the deferral of USB interrupts to task context, static memory allocation, and low power management capabilities.

tinysoundfont-pybind

TinySoundFont-pybind is a Python package that provides bindings for TinySoundFont, enabling audio generation with SoundFont instruments (.sf2, .sf3, .sfo) directly in Python. Its primary use case includes playing MIDI files with customizable SoundFont instruments and procedurally generating audio, all while supporting simultaneous audio playback through PyAudio. Notable features include a permissive MIT license suitable for commercial use and the absence of additional dependencies for audio data generation, enhancing its accessibility for developers.

the-standup

The tool is an Astro starter kit designed for creating minimal web applications with a simple structure. Its primary use case is to facilitate developers in building static sites efficiently using Astro's framework, featuring essential directories for source code, assets, and commands for installation and local development. Notable features include support for various component frameworks and a straightforward command-line interface for managing builds and serving the application.

systemd

Systemd is a system and service manager designed to provide a standard process for controlling the startup, configuration, and management of services and system components in Linux environments. Its notable features include parallel service start-up, on-demand service activation, and dependency-based service control, which enhance system boot performance and management efficiency. Additionally, Systemd includes extensive logging capabilities and integrates tightly with modern Linux distributions, making it a crucial tool for system administration.

swift-crypto

Swift Crypto is an open-source library that implements a significant portion of Apple's CryptoKit API for use on Linux and ARM64 Windows platforms, facilitating cross-platform cryptographic functionality. It provides safe and abstracted APIs for various cryptographic operations such as key exchange, encryption, hashing, and authentication, while ensuring adherence to cryptographic best practices. Notably, Swift Crypto includes a backing implementation utilizing BoringSSL and XKCP, and offers an additional product, CryptoExtras, which contains APIs specifically designed for server applications.

starred

Starred is a command-line tool designed to create and manage an Awesome-style list of GitHub repositories based on a user's starred repositories. It features the ability to generate a Markdown list grouped by programming language or repository topics, supports sorting, and can update a README file directly in a specified GitHub repository. Additionally, it supports including private repositories, making it a versatile tool for personalized repository management.

sshfs

SSHFS is a tool that enables users to mount remote filesystems over SFTP, facilitating seamless access to remote directories as if they were local. It supports various SSH options, offers the ability to bypass SSH for performance, and is widely integrated into major Linux distributions, making it highly accessible. While it has been in consistent production use, the project currently lacks active contributors and is maintained primarily to address critical issues.

src

Read-only git conversion of OpenBSD's official CVS src repository. Pull requests not accepted - send diffs to the tech@ mailing list.

sqlite-graph

sqlite-graph is a SQLite extension that introduces graph database functionalities, enabling users to store and query graph data with support for Cypher query language. Its primary use cases include enhancing applications already utilizing SQLite with graph capabilities, prototyping graph features, and facilitating graph analytics in embedded systems or mobile applications. Notable features include seamless integration of SQL and graph operations, zero external dependencies, and support for executing graph algorithms and pattern matching using Cypher queries.