> cat /dev/github | grep security-tools

~/hackyfeed $

A cybersecurity tools aggregator — discover the latest pentesting, red team, and offensive security tools from GitHub.

sort: ( this page )

PwnBox

PwnBox is a container-based environment management tool that simplifies the setup and debugging of Linux pwn (exploitation) environments using Docker. It provides essential tools such as pwndbg, pwntools, and various disassemblers, allowing users to run, list, attach to, and manage pwn environments effortlessly through command-line operations. Additionally, it features the MacOS Subsystem for Linux (MSL), which enables seamless integration and persistence of a Linux environment on macOS, enhancing workflow efficiency.

pkappa2

Pkappa2 is a sophisticated packet stream analysis tool designed for Attack & Defense Capture The Flag (CTF) competitions, enabling users to upload and analyze pcap files for network traffic streams. The tool features a custom query language for structured searches, real-time updates through a responsive web interface, and the ability to save queries as services or tags, facilitating quick access to specific stream data. Notably, it supports both IPv4 and IPv6, offers scriptable data converters, and can ingest traffic through various methods including HTTP POST, making it a versatile choice for network analysis in CTF environments.

nmap-reference

nmap-reference serves as a comprehensive reference guide for the nmap tool, aimed at both CTF participants and security professionals. It includes a variety of predefined scan combinations, practical flag references, and complementary tools, facilitating efficient network discovery and vulnerability assessment. Key features encompass easy navigation through common nmap commands, scan types, and detailed explanations of scan parameters to streamline penetration testing workflows.

NagoyaSpray

NagoyaSpray is a Python-based tool designed for efficient password spraying, particularly in scenarios like OSCP, PNPT, and CPTS exams. It generates customizable password lists based on seasonal and date-related formats, enabling users to quickly create realistic passwords without the need for complex regex. Key features include the ability to specify prefixes and suffixes, control capitalization, and generate passwords within a defined length, ensuring rapid and effective password testing for various applications.

MyCTFLib

MyCTFLib is a collection of templates for Capture The Flag (CTF) competitions, designed to assist with various challenge types, including exploitation, cryptography, and web vulnerabilities. It features scripts to easily copy relevant libraries for pwn, crypto, and web challenges, streamlining the setup process for participants. The library includes specific tools and functionalities such as exploited scripts, cryptographic algorithms, and web exploitation techniques.

MrEchoFi

MrEchoFi is a cybersecurity toolset designed for DevSecOps, penetration testing, and hardware security assessments. It features a variety of tools aimed at enhancing digital security, including devices for forensic analysis, DDoS simulations, and phishing detection. Notably, it emphasizes a multifaceted approach to cybersecurity, incorporating modern scripting languages and methodology for innovative solutions.

libdebug

libdebug is a Python library designed for programmatic debugging of userland binary executables, aimed primarily at developers and researchers in reverse engineering and exploitation. Its notable features include the ability to access process memory and registers, control execution flow, handle syscalls and signals, and debug multithreaded applications, all while emphasizing high performance. The tool provides seamless integration with GDB for interactive analysis and supports debugging on various Linux architectures.

klodd

Klodd is a deployment service designed for facilitating Capture The Flag (CTF) competitions by allowing teams to create and manage on-demand instances of CTF challenges. Its primary use case is to streamline the setup and access of challenge environments for teams during competitions. Notable features include easy challenge definition creation and per-team instance management, enhancing the competitive experience.

Infosec-Notes

Infosec-Notes is a repository that serves as a comprehensive collection of notes tailored for penetration testers and ethical hackers, documenting the author's learning journey towards OSCP certification and beyond. It provides insights into various offensive and defensive security techniques, including red teaming, enumeration, privilege escalation, and CTF challenge strategies, while also encouraging community contributions to enhance the content. Notably, the notes encompass practical coding examples and highlight essential cybersecurity practices, with a strong emphasis on responsible hacking.

hackingtool

HackingTool is an AI-guided, all-in-one security testing toolkit designed for authorized penetration testing, providing access to 215 curated tools across 21 categories such as reconnaissance, web security, and forensics. Its standout feature is the AI layer that translates user queries in plain English into the appropriate tool and command, catering to a diverse audience including penetration testers, researchers, and bug bounty hunters. The tool is built to ensure legal operation on systems for which users have authorization, promoting responsible security practices.

goLoL

goLoL is a Windows host scanner that specializes in detecting living-off-the-land binaries (LOLBAS) and vulnerable drivers (LOLDrivers) by leveraging a live catalog of techniques and hashes. It provides privilege-aware filtering based on the user's access level and includes features like MITRE ATT&CK mapping, flexible result sorting, and both LOLBAS and driver scanning modes. The tool is designed for security professionals to enhance their understanding of potential attack vectors within a Windows environment.

ftp-scan

FTP Scanner is a lightweight tool designed for penetration testing and Capture The Flag (CTF) challenges, capable of detecting anonymous logins, listing files, and performing banner grabbing. It features heuristic software and version extraction, alongside a local exploit database lookup for identifying potential vulnerabilities based on the FTP server's banner. This portable tool operates as a single Python script, requiring minimal dependencies and offering customizable usage options, including the ability to specify custom ports and vulnerability database paths.

exploitfarm

ExploitFarm is a distributed attack platform designed for security competitions, enabling users to easily share and execute exploits in a coordinated manner. The tool facilitates the replication of attacks, flag submissions, and data collection for analysis, all while providing a user-friendly TUI and centralized server management. Key features include client-server architecture, customizable configurations for competition settings, and detailed tracking of attack performance.

Eruditus

Eruditus is a Python-based Discord bot designed to facilitate capture the flag (CTF) competitions by streamlining team collaboration and enhancing user experience. Key features include managing channels, tracking CTF progress and member participation, and offering utilities for system calls, encoding schemes, and classic ciphers. The bot also supports direct integration with CTF platforms like CTFd and rCTF, allowing users to submit flags, view leaderboards, and automate account management.

CTFNote

CTFNote is a collaborative tool designed for Capture The Flag (CTF) teams to efficiently organize their tasks and communications. It features easy deployment via Docker, supports HTTPS with Nginx configuration, and includes integrated Discord bot functionality for enhanced team coordination. Notable aspects include user-friendly setup, administrative control for initial accounts, and customizable support for voice channels in Discord.

CTFever

CTFever is a comprehensive toolkit designed for Capture The Flag (CTF) participants, offering a variety of tools to assist in solving challenges. Its notable features include a wide range of utilities such as encoding/decoding formats (Base64, ROT13), cryptography tools (Caesar cipher, Vigenère cipher), and data analysis options (CRC checks, IP geolocation). This suite aims to streamline the CTF experience by providing essential resources in a user-friendly manner.

ctfcli

ctfcli is a command-line tool designed for managing Capture The Flag (CTF) events and challenges, integrating seamlessly with the CTFd REST API for challenge deployment. It features capabilities to create event repositories, add and sync challenges from various sources, deploy services, and verify challenge integrity, all while offering a REPL interface and tab completion for enhanced usability. As an alpha-level project, it emphasizes a modular structure with plugin support for custom commands and encourages users to monitor updates closely.

CTF-Writeups

CTF-Writeups is a comprehensive repository offering detailed solutions and methodologies for various Capture The Flag (CTF) challenges, organized by categories such as Forensics and Cryptography. Its notable features include a step-by-step approach to problem-solving, a Graph View for visual exploration of relationships between challenges and concepts, and a dedicated section for tools and fundamental knowledge applicable to CTFs. This project serves as both a learning resource and a documentation platform for both solved and original challenges.

CTF-Practice

CTF-Practice is a repository providing a collection of Capture the Flag (CTF) challenges tailored for beginners in the field of Cyber Forensics. Its primary use case is to facilitate hands-on learning and skill development in cybersecurity through practical problem-solving scenarios. Notable features include a variety of introductory-level challenges aimed at enhancing forensic analysis capabilities.

ctf-party

ctf-party is a command-line interface (CLI) tool and library designed for Capture The Flag (CTF) participants and security professionals, streamlining the process of scripting and exploit writing. It enhances Ruby's String class with concise methods for common coding tasks, like encoding and decoding, thus minimizing the need for extensive code and dependencies. Notable features include a range of easy-to-use commands that perform various encoding and transformation operations, making it particularly useful for rapid development in CTF contexts.

ctf-kit

CTF Kit is a versatile toolkit designed to enhance the efficiency of solving Capture The Flag (CTF) challenges by leveraging AI assistance for analysis and documentation. It features seamless integration with AI coding agents through the Claude Code Plugin, automating tasks such as challenge categorization, vulnerability detection, and writeup generation, while also supporting over 20 diverse tool integrations. Its dual architecture consists of a command-line interface for direct interactions and AI-powered skills to enhance the challenge-solving workflow during competitions.

ctf-helper

CTF Helper is a multifunctional tool designed for Capture The Flag (CTF) competitions and various cybersecurity tasks. It features capabilities for decoding data formats such as Base64 and hex, JWT decoding and brute-forcing, web exploit utilities, and OSINT tools for geolocation and Shodan lookups, all built with modularity and extensibility in mind. This tool serves as a comprehensive resource for security professionals engaging in threat analysis and live security challenges.

ctf-dl

ctf-dl is a versatile command-line tool designed for downloading challenges from multiple Capture The Flag (CTF) platforms, including CTFd, rCTF, and HTB. Its key features include the ability to download all challenges, apply filters by category or status, and organize challenges using customizable Jinja2 templates, enhancing both usability and organization for CTF participants.

CTF_tools

CTF Tools is a curated repository that aggregates a variety of resources, websites, and tools specifically designed to assist in solving Capture The Flag (CTF) challenges. It organizes tools by category, providing practical links ranging from ASCII tables to cryptographic calculators, thus serving as a quick reference resource for CTF participants and teams during competitions. Notable features include a wide assortment of utility tools for cryptography, data conversion, and training resources, as well as guidelines for collaborative contributions to the repository.

Common-CTF-Challenges

Common-CTF-Challenges is a comprehensive resource for Capture the Flag (CTF) competitions, providing categorized notes, command references, and ready-to-use Python scripts for various exploitation techniques including cryptography, binary exploitation, web vulnerabilities, and forensics. Notable features include a structured directory for easy navigation and search functionality using tools like `grep` and `ripgrep` to quickly locate relevant resources during challenges. This tool serves as a practical aid for participants by consolidating essential techniques and scripts in a single, accessible repository.