07 Sep 2026
JavaScript
★ 17
OpenRegistry is a tool providing real-time access to unmodified data from approximately 30 official government company registries, allowing users to search for company profiles, officers, shareholders, and financial statements. It features the capability to conduct complex chain queries across multiple jurisdictions seamlessly, ensuring that all responses are returned exactly as received from the respective registries without any alterations. The platform supports both free and paid tiers, providing various levels of access to extensive data on global company structures.
07 Sep 2026
Shell
★ 82
chkdomain is a DNS resolution verification tool that checks whether a domain is resolvable through various DNS services, indicating whether it has been blocked by secure or advertisement/tracker-blocking DNS configurations. It queries well-known DNS servers and provides links to numerous OSINT and security intelligence services to assess the threat level associated with the queried domain. Notable features include support for a range of DNS servers and integration with external threat intelligence platforms for comprehensive analysis.
07 Sep 2026
Rust
★ 629
h5i is a lightweight, security-first browser designed for AI agents, enabling them to safely browse, scrape, test, and automate web tasks. It incorporates features such as network policies, sandboxing, credential isolation, and session auditing to mitigate risks while allowing agents to inspect and manipulate HTTP traffic for automated web security testing or red team exercises. Developed in pure Rust, h5i claims performance enhancements with reduced memory usage compared to traditional browsers.
07 Sep 2026
Python
★ 24
ARES is an autonomous red team engagement platform designed for enterprise environments, enabling security teams to conduct focused offensive operations and continuous security validation without collateral damage. It incorporates a unique combination of adaptive threat modeling, a directed acyclic graph (DAG) attack solver, and over 60 weaponized techniques aligned with the MITRE ATT&CK framework, allowing organizations to identify vulnerability exploitability and optimize breach pathways to critical assets. Notable features include strict operational scopes to avoid collateral impacts, instant generation of comprehensive executive reports, and robust zero-trust security mechanisms.
07 Sep 2026
Python
★ 10
The Nmap Scanning Tool is a secure CLI wrapper designed to streamline the execution of common Nmap scans, making them faster, safer, and more user-friendly for security professionals and system administrators. It features 12 built-in scan profiles, interactive prompts for novice users, and custom scan modes for advanced users, while also ensuring strict validation of input and providing clear error messaging. With support for scripting, automation, and a modular Python architecture, it facilitates a reproducible runtime environment, enhancing the overall scanning experience.
07 Sep 2026
Python
★ 11
CreepyEYE Genesis is an OSINT tool designed for searching and verifying information using various parameters such as username, email, IP, and phone number across multiple online services. Notable features include username existence checks across various social media platforms, email verification through third-party services, IP/domain lookups, support for multiple languages, and Tor integration for enhanced anonymity. The tool is cross-platform, compatible with Windows, Linux, and Mac, and facilitates easy installation with automatic dependency management.
06 Sep 2026
TypeScript
★ 658
XingRin is an open-source Attack Surface Management (ASM) platform designed for authorized security testing and defensive research focused on asset discovery and security automation. It features capabilities such as subdomain scanning, port scanning, site discovery, and security detection, leveraging a modular architecture with support for custom tool integration and a powerful distributed backend based on Go. The platform aims to provide security teams with continuous monitoring and analysis of their internet-exposed assets, alongside a modern user interface and extensive automation features.
06 Sep 2026
Python
★ 42
ParseZeekLogs is a lightweight Python library designed to parse Zeek network security monitor logs into structured Python records. Its primary use case involves filtering, transforming, and exporting logs to formats such as JSON or CSV, or integrating data into a pandas DataFrame for further analysis or threat hunting. Notable features include seamless reading of both TSV and JSON log formats, support for Gzip-compressed files, and the ability to output data in Elastic Common Schema format, all while maintaining type fidelity for log entries.
06 Sep 2026
Python
★ 121
Evtxtoelk is a Python tool designed to efficiently load Windows Event Log (`.evtx`) files into Elasticsearch or export them as JSON lines for use with other data collectors. Key features include creating searchable documents with standardized fields based on the Elastic Common Schema, robust handling of corrupt records, and compatibility with recent Elasticsearch versions, enabling fast processing of large datasets using Rust-backed parsers. This tool is particularly useful for threat hunting in low-bandwidth environments where direct streaming is not feasible.
06 Sep 2026
Python
★ 34
The Claude Code Plugins for Developers repository offers a suite of AI-powered plugins designed to enhance developer productivity and streamline various aspects of the development workflow within Claude Code. Notable features include 14 distinct plugins for tasks such as accessibility auditing, Azure DevOps integration, compliance auditing, and performance optimization, all operable via intuitive slash commands. These plugins facilitate automation and provide interactive capabilities, thereby optimizing the development process from coding to deployment.
06 Sep 2026
PowerShell
★ 52
The Blue Team PowerShell Security Package (BTPS-SecPack) is a security tool designed for alerting and monitoring in Windows environments using PowerShell scripts. Its primary use case involves sending alerts to Microsoft Teams and optionally via email when specific security events occur, enhancing incident response capabilities. Notable features include customizable alert notifications through Microsoft Teams webhooks and a collection of PowerShell scripts for various security events, such as account changes and unusual sign-ins.
06 Sep 2026
Go
★ 64
Wafme0w is a lightweight, AI-assisted web application firewall (WAF) detector designed for identifying WAF fingerprints in HTTP responses, utilizing a comprehensive catalogue of 172 products sourced from wafw00f. The tool supports concurrent fingerprint collection and offers output in various formats, including JSONL and CSV, enabling seamless integration with scripts or other Go applications. Notably, it allows for offline analysis of saved responses without making network requests, enhancing testing efficiency and control.
06 Sep 2026
Python
★ 626
Godot Secure is a Python script that enhances the Godot engine by integrating Camellia-256/AES-256 encryption alongside a unique security token system, creating a cryptographically distinct build that safeguards game assets from decryption attempts. Key features include randomized magic headers for unique file signatures, a 32-byte embedded security token, and an automated setup that requires no external dependencies. This tool resolves vulnerabilities present in standard Godot encryption by ensuring per-build uniqueness and obfuscation of keys.
06 Sep 2026
Rust
★ 17
Dopbase is an open-source secrets manager designed for application secrets organization across multiple projects and environments, all contained within a single executable file. It offers features such as encrypted storage, individual secret records, user access control, and a built-in Admin UI, all while maintaining data separately under default user directories. The tool simplifies management for teams by providing a streamlined solution for secret handling without the need for extensive supporting infrastructure.
06 Sep 2026
C++
★ 30
rust_pdb is a tool that generates Windows Program Database (PDB) files from Unity IL2CPP games without relying on external tools. It processes GameAssembly.dll and global-metadata.dat to extract and write IL2CPP metadata, creating byte-identical PDB files using a comprehensive in-process pipeline that includes metadata parsing, binary analysis, and symbol generation. Key features include automatic detection of Steam Rust installations and full compatibility with IL2CPP metadata version 39.
06 Sep 2026
C++
★ 17
Best Software For Geometry Dash Yet
06 Sep 2026
Python
★ 46
The Malware Analysis Skills Toolkit is an operational framework designed for malware analysis, enabling users to perform triage, dynamic analysis, detection engineering, and reporting through a structured set of automation scripts. It features an orchestrator that routes tasks to specific sub-skills, automating the execution of static tools, evidence parsing, rule creation, and report generation, simplifying the analysis process while ensuring safety by isolating malware execution within a controlled environment. Notable components include support for various file types, automatic detection rule testing, and a comprehensive reporting system, making it suitable for security professionals engaged in operational malware investigations.
06 Sep 2026
TypeScript
★ 23
LibreUML is an open-source software architecture modeling platform designed to make visual modeling accessible and modern. It features a diagram editor that supports multiple UML diagram types, real-time validation, and capabilities such as code generation and import from Java files. Additionally, LibreUML includes an educational component to facilitate guided learning in design thinking, all while being cloud-synced and operable offline.
06 Sep 2026
C++
★ 17
Best Software For Fortnite Yet
06 Sep 2026
Python
★ 11
VocalWriter is a Mac OS X singing synthesizer that utilizes Resonant Articulatory Synthesis to accurately model the human vocal tract. Its primary use case is the generation of synthesized singing through a user-friendly interface called VocalWriter Studio, enabling users to create songs note by note. Notable features include the execution of PowerPC synthesis code via a custom interpreter, the ability to directly render unique samples, and the inclusion of extensive file format tools for versatile audio processing.
06 Sep 2026
JavaScript
★ 15
`js-reverse-ops` is a high-intensity JavaScript reverse engineering toolkit designed for deep analysis of real-world front-end targets. Its primary use case involves recovering real requests, dynamic signatures, and associated parameters from obfuscated code by emphasizing runtime evidence and reproducibility, thus generating verifiable artifacts and scripts for Node or Python playback. Notable features include a comprehensive workflow that integrates locating, runtime evidence gathering, and result recovery, while prioritizing the systematic documentation of findings for iterative improvement and handover.
06 Sep 2026
C
★ 196
PaRappa the Rapper 2 Decompilation is an ongoing project aimed at reverse-engineering the PlayStation 2 game *PaRappa the Rapper 2*, with a current focus on the NTSC-J prototype. The tool facilitates the recreation of game assets and code structure, featuring segmented progress tracking across various components such as debug utilities, gameplay code, and menu functionality, thereby enabling contributions from the community for expansion and improvement.
06 Sep 2026
C
★ 161
openaptx is a reverse-engineered library intended for research purposes that provides decoding and encoding capabilities for apt-X and apt-X HD audio formats. It features integration options with FFmpeg and libsndfile, allowing for versatile audio file handling and manipulation, and includes support for configurable build options to customize functionality as needed. Please be aware that usage outside of research could infringe on existing patents, and redistribution in binary form is prohibited.
06 Sep 2026
Swift
★ 10
Galaxy Buds for Mac is a lightweight, native menu-bar application for macOS that facilitates Bluetooth connectivity and control over Samsung Galaxy Buds. Its primary use case is to manage audio settings such as noise cancellation, equalizer adjustments, and touch gestures directly from the menu bar, while offering features like battery monitoring, ambient sound settings, and firmware updates. The application is fully open-source, non-intrusive, and supports multiple languages, ensuring user privacy with no analytics or tracking.
06 Sep 2026
Shell
★ 12
ReconOps is a structured recon-only framework designed for bug bounty hunters at beginner and intermediate levels, emphasizing the importance of thorough reconnaissance before exploitation. It provides a comprehensive methodology for mapping attack surfaces, discovering infrastructure, and automating various reconnaissance tasks through scripts and checklists. Notable features include detailed documentation on passive and active recon techniques, tools index, and customizable templates for reporting findings and maintaining scope.