> cat /dev/github | grep security-tools

~/hackyfeed $

A cybersecurity tools aggregator — discover the latest pentesting, red team, and offensive security tools from GitHub.

sort: ( this page )

minhook

MinHook is a minimalistic library designed for x86/x64 API hooking in Windows, enabling developers to intercept and alter function calls within applications. Its primary use case lies in creating and managing API hooks efficiently, featuring functions for enabling, disabling, and managing multiple hooks at once. Notable features include enhanced error handling, CMake support, and compatibility with various versions of Visual Studio and MinGW.

mimiclaw

MimiClaw is a personal AI assistant designed to operate on a $5 ESP32-S3 chip, without the complexity of Linux or Node.js, utilizing pure C for its implementation. It allows users to communicate via Telegram, processes requests with integrated support for both Anthropic and OpenAI language models, and retains learned information across sessions using local memory storage. Key features include low power consumption, continuous operation, and the ability to evolve based on user interactions.

midimonster

MIDIMonster is a versatile control and translation tool designed for interfacing with multiple absolute-value-based control and bus protocols, including MIDI, ArtNet, and OpenSoundControl across various operating systems. It features extensive protocol support, allowing users to translate signals between protocols, dynamically generate and modify events through Lua scripting, and facilitate innovative uses such as controlling lighting fixtures or digital audio workstations with diverse input devices. The tool's architecture enables seamless integration and communication between disparate control systems, making it ideal for complex multimedia environments.

meta-darpahackfest

The meta-darpahackfest layer is designed for building customized images specifically for the DARPA Bay Area Hackfest Event, targeting Raspberry Pi 3 devices using a 64-bit architecture. Key features include integration with the Yocto Project, dependencies on various meta-layers for multimedia and networking support, and the ability to generate a bootable SD card image using the Bitbake build system. Users are guided to configure their build environment and utilize provided resources for optimizing their development workflow.

Meshtastic-Exploiteers-Hacker-Pager

The Hacker Pager is a modified version of the Meshtastic project, designed specifically for the Hacker Pager hardware, enabling wireless messaging and LoRa communication functionality. Its primary use case includes long-range, low-power messaging and telemetry over a decentralized mesh network, suitable for outdoor and emergency scenarios. Notable features include support for multiple hardware platforms and the ability to share text messages and locations without relying on internet or cellular infrastructure.

MemProcFS

MemProcFS is a memory analysis tool that presents physical memory as files in a virtual file system, enabling straightforward point-and-click access for memory analysis. Its primary use case includes inspecting live memory and memory dump files from various sources, including virtual machines and hardware devices. Notable features include support for remote live memory incident response, easy integration with existing analysis tools, and compatibility with a variety of programming interfaces and libraries.

lz4

LZ4 is a high-performance lossless compression algorithm designed to offer extremely fast compression speeds exceeding 500 MB/s per core and even faster decompression speeds that can reach RAM limits in multi-core systems. It allows dynamic tuning of speed versus compression ratio while also providing a high compression variant (LZ4_HC) that optimizes for improved compression at the cost of CPU time. Additionally, LZ4 supports dictionary compression to enhance performance on small files, making it versatile for various data compression tasks.

luadec51

Lua Decompiler for Lua version 5.1

LLMFarm

LLMFarm is an application designed for iOS and macOS that enables users to interact with various large language models (LLMs) by loading them with custom parameters and testing their performance. Notable features include support for multiple inference modes, sampling methods, context state restoration, and integration with Apple Shortcuts, allowing developers to evaluate and select the optimal model for their specific use cases.

linux-xtensa

The Linux Kernel repository provides the core functionality necessary for any Linux operating system, managing hardware and system resources while enabling the execution of software applications. It includes extensive documentation for a variety of users, including kernel developers, security experts, and system administrators, covering aspects such as kernel development processes, security hardening, and system configuration. Notable features include guidelines for coding style and patch submission, security vulnerability reporting, and tools for building and maintaining kernel versions.

linux-source-3.13.2-cgc

The Linux kernel version 3.13.2 is a Unix-like operating system kernel, emphasizing POSIX compliance and providing essential features such as multitasking, virtual memory, and network stack support for both IPv4 and IPv6. It supports a wide range of hardware architectures, making it highly portable, and is distributed under the GNU General Public License. Notably, it includes comprehensive documentation for installation and configuration, allowing users to render documentation in various formats.

linux_kernel_hacking

Linux Kernel Hacking is a repository focused on experimentation with Linux kernel modules to enhance understanding of kernel functionality and rootkit techniques. It is primarily used for educational purposes, with compatibility for kernels 5.7 and above. The tool is designed to facilitate learning through practical experimentation, including a series of blog posts detailing various techniques.

linux

The Linux kernel serves as the central component of any Linux operating system, orchestrating hardware management, system resource allocation, and essential services for all software. It includes a comprehensive suite of documentation aimed at various user roles, from new developers to security experts, to facilitate kernel development, maintenance, and configuration. Notable features encompass guidelines for bug reporting, extensive security documentation, and resources for advanced topics like memory management and networking stacks.

LilyGoLib

T-Watch Ultra & T-LoRa-Pager & T-Watch-S3 & T-Watch-S3-Plus

libsql

libSQL is an open-source fork of SQLite, developed by Turso, designed to enhance and extend the capabilities of traditional SQL databases. Its primary use case is for modern applications requiring a lightweight relational database with support for distributed systems. Notable features include community-driven contributions, documentation, and a focus on scalability and interoperability.

libcgc

DARPA Cyber Grand Challenge OS syscall library

IntruderPayloads

IntruderPayloads is a curated repository of payloads for Burpsuite Intruder and BurpBounty, as well as fuzz lists and penetration testing methodologies. Its primary use case is to assist security professionals in performing effective web application testing by providing a comprehensive set of attack vectors and methodologies. Notable features include integration with various third-party tools and a detailed OWASP testing checklist to streamline vulnerability assessments.

honggfuzz

Honggfuzz is a security-oriented, feedback-driven evolutionary fuzzer designed to discover vulnerabilities in software by utilizing both software and hardware-based code coverage. Its primary use case is high-performance fuzz testing, achieved through features such as multi-process and multi-threaded execution and persistent fuzzing that enables testing speeds of up to 1 million iterations per second. Notable functionalities include deep monitoring for crash detection and the ability to automatically generate a valid input set from an empty corpus, making it accessible for various platforms including Linux, macOS, and Windows.

hev-socks5-tunnel

HevSocks5Tunnel is a lightweight tunneling tool that operates over a Socks5 proxy, facilitating the redirection of both TCP and UDP network traffic. It supports dual stack IPv4/IPv6, offers optional local ICMP Echo replies, and is compatible with multiple operating systems, including Linux, Android, FreeBSD, macOS, iOS, and Windows. Notable features include multi-queue support, flexible configuration options, and benchmarks showcasing its performance efficiency in terms of speed, CPU, and memory usage.

HelloSilicon

HelloSilicon is a resource designed to facilitate learning assembly programming on Apple silicon Macs by providing adjusted sample code compatible with Apple's ARM64 architecture. The repository complements the book "Programming with 64-Bit ARM Assembly Language" by addressing the differences between Linux and Apple’s Darwin operating systems, particularly in regards to system calls and memory access. Notable features include side-by-side comparisons of book content and relevant Apple-specific adjustments, making it easier for developers to transition their knowledge to the Apple silicon platform.

gdb

The GNU development tools repository provides a collection of compilers, assemblers, linkers, and debuggers, aimed at facilitating software development across various platforms. It supports multiple programming environments and allows for automated configuration and compilation of tools through a simple command-line interface. Notable features include customizable installation and compatibility with multiple compiler configurations.

fluidsynth

FluidSynth is a cross-platform, real-time software synthesizer that adheres to the SoundFont 2 specification, enabling it to generate audio by processing MIDI events from input devices. Its primary use case is to serve as a software alternative to hardware MIDI synthesizers, allowing users to play MIDI files and utilize SoundFonts for high-quality sound generation. Notable features include support for multiple platforms, real-time audio synthesis, and the ability to handle MIDI input and playback effectively.

flipper-zero-bad-usb

The Flipper Zero: BadUSB repository contains a collection of customizable BadUSB scripts designed for the Flipper Zero device. Its primary use case is for security researchers and ethical hackers to demonstrate USB-based attacks and automate tasks on target systems. Notable features include compatibility with various scripts that can be modified for different purposes, with a warning regarding functionality on slower computers, and a user-friendly installation process.

flipper_zero_hc11_wireless_modem

The HC-11 wireless modem emulator for the Flipper Zero serves to facilitate data transmission between a Flipper Zero device and a remote HC-11 RF UART module. It enables users to wirelessly send and receive serial data while supporting multiple radio channels, module addresses, and adjustable transmission power levels. Notable features include USB passthrough functionality, reliable operation in specific transmission modes, and real-time monitoring of serial traffic.

exploitgym

ExploitGym is a comprehensive benchmarking platform designed to evaluate the capabilities of AI agents in exploiting a variety of real-world vulnerabilities present in userspace programs, Google's V8 engine, and the Linux kernel. It features a large-scale set of 869 instances and includes detailed setup and evaluation processes, as well as the ability to disable system defenses for more effective testing. This tool serves as an essential resource for researchers aiming to understand AI's effectiveness in security exploit development.