> cat /dev/github | grep security-tools

~/hackyfeed $

A cybersecurity tools aggregator — discover the latest pentesting, red team, and offensive security tools from GitHub.

sort: ( this page )

Hack-Tool

Hack-Tool is a comprehensive all-in-one hacking tool tailored for cybersecurity professionals, providing a suite of utilities for various hacking tasks, including information gathering, web attacks, and post-exploitation analysis. Notably, the tool enhances functionality with recent updates that incorporate new features such as reverse engineering tools, remote administration tools (RAT), and advanced web crawling capabilities. Operating on Linux-based systems like Kali Linux and Parrot OS, it supports a wide range of offensive security operations.

grepaddr

GrepAddr is a versatile command-line tool designed to extract a wide variety of address types from standard input, including URLs, IP addresses, e-mail addresses, and MAC addresses, utilizing regular expressions for processing. Its primary use case is for penetration testing and bug bounty hunting, where users need to quickly identify multiple address formats in data streams. Key features include support for filtering by address type, options to reduce false positives, and the ability to save results in CSV format, making it a comprehensive solution compared to similar tools that focus on single address types.

Flask-Unsign-Wordlist

Flask Unsign Wordlist is a lightweight Python package designed to provide standalone access to a collection of wordlists used for unsigning Flask cookies. Its primary use case is to assist developers and security professionals in recovering secret keys without having to download the entire flask-unsign library. Notable features include easy installation via pip, command-line access to wordlists, and straightforward Python integration for obtaining lists programmatically.

example-ctf-challenge

The Example Ethereum CTF Challenge repository provides a framework for creating and hosting Capture The Flag (CTF) challenges related to Ethereum, utilizing the underlying architecture developed by Paradigm. It allows users to deploy private blockchain instances for various challenges and includes features for interacting with these instances via network connections. Notable functionalities include Docker integration for easy setup and configuration, as well as tools for administering challenge instances and obtaining flags.

dfuf

dfuf is a tool designed to extract files from the request and response dumps generated by ffuf, which is primarily used for exploiting Local File Inclusion (LFI) and Directory Traversal vulnerabilities. Notable features include the ability to specify output directories and handle various file extraction scenarios, such as extracting common Linux files and accessing files in webroot through URL double encoding. This tool enhances the data exfiltration process when shell access is not feasible.

DailyCTFRobot

DailyCTF Robot is a Python-based Discord bot designed for hosting and managing Capture The Flag (CTF) challenges, providing an organized platform for both organizers and participants. It features dynamic bot presence, role-based management, an intuitive user interface, versatile command options, event logging, and security protocols, ensuring a tailored and secure experience for different servers. Additionally, the bot facilitates continuous improvement through user feedback after challenge submissions.

ctfup

ctfup is a command-line interface (CLI) tool designed to facilitate the deployment of Capture The Flag (CTF) challenges onto a Kubernetes cluster for csictf. It utilizes an npm package structured to streamline the challenge setup process, requiring specific directory and configuration file structures, and is built on NodeJS and TypeScript, leveraging Google Kubernetes Engine. Notable features include automated deployment based on challenge specifications stored in YAML files, making it ideal for educational and competitive hacking environments.

CTFProxy

CTFProxy is a comprehensive Capture The Flag (CTF) infrastructure solution designed to facilitate the deployment and management of CTF challenges with a Zero-Trust Network model. It utilizes a single command for container orchestration, integrates CI for continuous deployment, and supports detailed access control policies through Starlark configuration. Notable features include multi-container management, centralized logging, secure SSO authentication, and the ability to run challenges in both Docker and Kubernetes environments.

ctfhub

CTFHub is a collaborative platform designed for Capture The Flag (CTF) teams to manage and engage with challenges efficiently. It features a Docker-based setup, integration with HedgeDoc for markdown note-taking, private CTF capabilities for individual learning, and additional tools like Discord notifications and Jitsi for video chats, facilitating enhanced team communication and project management.

CTF-Writeup

The CTF Writeup repository compiles a series of challenge write-ups primarily for web and miscellaneous categories within Capture The Flag (CTF) competitions. It serves as a resource for participants looking to understand solutions and methodologies applied in various CTF events, featuring detailed documentation for each specific competition. Notable features include links to individual event pages on Ctftime for further exploration.

CTF-Tools

CTF-Tools is a Python-based suite designed for Capture The Flag (CTF) competitions and penetration testing practice, offering functionality for repeating HTTP requests and robust password cracking. Its notable features include a versatile password cracker that supports brute force and dictionary attacks across various hashing algorithms (MD5, SHA-1, SHA-256, SHA-512, NTLM, and bcrypt), with the ability to generate custom hash dictionaries and a Cascade option for iterating through hash types.

CTF-nc-docker

CTF-nc-docker is a Dockerized environment designed for hosting Capture The Flag (CTF) challenges, supporting various challenge types including Python, Node.js, and binary challenges. The tool facilitates easy configuration through `global.json` and challenge-specific `config.json`, allowing users to manage resources, ports, and dependencies effectively. Key features include a download server for challenge files, a web-based netcat service, and logging capabilities for monitoring challenge execution.

CTF-CryptoTool

CTF-CryptoTool is a Python-based utility designed for deciphering encrypted text encountered in Capture The Flag (CTF) challenges by employing brute-force techniques across a comprehensive array of known ciphers, encodings, and obfuscators. It allows users to input cipher text and optional keys to facilitate decoding, making it particularly useful for cryptanalysis tasks where keys may be unknown. Notable features include support for multiple ciphers such as Caesar, Vigenere, and various encoding formats like Base64 and Hex.

ctf-collab

ctf-collab is a collaborative programming environment designed for solving Capture The Flag (CTF) challenges directly within GitHub Actions. This tool allows users to create ephemeral, session-based environments where they can work together in real-time, utilizing either a secure Tor connection or a lower-latency ngrok connection. Notable features include integration with git for data saving, a configurable tmux setup for multiple sessions, and easy deployment from a GitHub template repository.

CTF-Checklist

CTF-Checklist is a comprehensive resource aimed at cybersecurity enthusiasts participating in Capture The Flag (CTF) challenges, providing a curated list of vulnerabilities and associated tools for exploitation across various domains including forensics, web, and binary exploitation. Noteworthy features include a variety of tools such as packet analyzers, password crackers, SQL injection frameworks, and binary exploitation utilities, assisting users in effectively evaluating and leveraging security weaknesses. It serves as a vital reference for those looking to enhance their skills in ethical hacking and vulnerability assessment.

CTF-Challenges

CTF-Challenges is a repository designed for educational purposes, featuring a collection of CTF (Capture The Flag) challenges and guides for setting up a Linux user space pwn environment. Its primary use case is to aid users in understanding and practicing exploitation techniques through structured challenges, while also providing instructional materials to enhance learning. Notable features include the accessibility of various challenges and comprehensive setup notes to facilitate an effective learning environment.

ctf_platform

The Sieberrsec CTF Platform is a Jeopardy-style Capture The Flag (CTF) tool designed for training and educational purposes, built using ReactJS and NodeJS. It features an organized challenge categorization system, dynamic scoring, live leaderboards, and user role management, allowing for seamless participation and challenge creation, with added functionalities such as markdown support for descriptions and integrated email verification. Ideal for both individual and team-based cybersecurity training exercises, the platform enables easy deployment and management through Docker.

cryptosploit

Cryptosploit is a module-based cryptographic tool designed to streamline the process of decryption, decoding, and cracking through an organized library of scripts. It automates common cryptographic tasks, allowing users to easily search and execute various cryptographic modules without the need for extensive command-line flags or multiple tools. Key features include a user-friendly console interface for module selection, variable management, and the ability to search for modules using regular expressions.

CheatSheet

CheatSheet is a comprehensive resource for penetration testers and bug bounty hunters, providing a collection of tools, scripts, and guidelines to streamline various phases of security assessments. It features an extensive list of useful utilities for tasks such as network scanning, web application testing, reverse shell creation, and data encoding, along with guidelines for setting up local web servers. The repository also includes planned features aimed at automating repetitive tasks and enhancing the efficiency of reconnaissance activities in cybersecurity engagements.

caronte

Caronte is a network flow analysis tool designed for Capture The Flag (CTF) events, specifically for attack/defence scenarios. It reassembles TCP packets from pcap files, allowing users to define custom patterns for analysis through regex or protocol-specific rules, with results visualizable via a web application and accessible through a REST API. Key features include quick deployment via Docker, an intuitive GUI for configuration and rule management, and advanced analytics capabilities such as timeline visualizations and detailed connection filtering.

bug-bounty-tips

The bug-bounty-tips repository provides a comprehensive collection of resources and tools tailored for bug bounty hunters. It includes a curated list of required scripts and tools like Amass, SQLMap, and Fuff, facilitating efficient reconnaissance and vulnerability assessment. The repository emphasizes community engagement through platforms like Telegram and Twitter, aiming to enhance knowledge sharing among cybersecurity professionals.

basecrack

BaseCrack is a Python-based decoding tool that supports a wide range of alphanumeric base encoding schemes, allowing for the rapid decoding of both single and multi-encoded inputs. Notable features include the ability to decode bases embedded in image EXIF data, perform OCR on images, and process multiple encodings from files, making it particularly useful for tackling complex Capture The Flag (CTF) challenges and steganography tasks.

0xTwin

0xTwin is a Python-based tool for encoding and decoding text using the Twin-Hex Cipher, which transforms original text into a hex format, encoding two characters at a time. Its primary use case is for participants in Capture The Flag (CTF) events who need an offline utility to handle this specific cipher without relying on online resources. Notable features include simple command-line options for encoding and decoding, making it straightforward to use in various cybersecurity challenges.

yaCTFpl

yaCTFpl is a structured CTF (Capture The Flag) playbook designed to compile common attack and reconnaissance techniques into workflows, organized under a three-part methodology: Enumerate, Exploit, and Post-Exploit. This tool aims to fill the gap in existing resources by emphasizing process and methodology rather than just a list of commands, making it particularly useful for those familiar with command-line operations in Kali Linux or Parrot. Additionally, the project supports PDF generation for offline reading, enhancing its accessibility as a reference manual.

Vigenere-Decoder

The Vigenère Cipher Decoder is a Python tool designed to decrypt Vigenère cipher text efficiently, utilizing known plaintext or flag formats to significantly reduce decryption time. Key features include an interactive menu for input, command line argument support for flexibility, and a brute force capability for discovering possible keys. This decoder is particularly useful for cybersecurity professionals engaged in cryptanalysis and CTF (Capture The Flag) challenges.