> cat /dev/github | grep security-tools

~/hackyfeed $

A cybersecurity tools aggregator — discover the latest pentesting, red team, and offensive security tools from GitHub.

sort: ( this page )

pyfunda

pyfunda is a Python API wrapper specifically designed for interacting with Funda.nl, the leading Dutch real estate platform, utilizing its reverse-engineered mobile JSON API to fetch property listings without the need for HTML scraping or browser automation. This library provides clean, typed objects for listings, prices, media, and brokers, allowing users to perform detailed searches, retrieve listing information, view price history, and monitor new listings. Notably, pyfunda is an open-source solution that acts as the only functioning Python client for accessing Funda’s endpoints, making it a valuable tool for developers seeking a reliable alternative to proprietary scraping services.

ue3-reliquary-runtime

EchoForge is a runtime reflection framework and asset studio tailored for Unreal Engine 3 (UE3), enabling users to explore and manipulate the engine's internal object graph without altering its core. Its notable features include a comprehensive runtime reflection API, support for polyglot modding through C, C++, and Rust, and a cross-platform asset studio that allows live viewing and editing of game assets. This tool serves as a vital resource for modders and researchers aiming to enhance or reimagine existing UE3 games, providing flexibility through dynamic property discovery and event notification systems.

Tinyriser

TinyRiser is an advanced riser solution for Lenovo's 8th and 9th generation Tiny5 PCs that enables simultaneous use of independent x8 and x4 PCIe links through a PCIe x16 slot and an m.2 slot. This tool allows users to install both low-profile PCIe cards and an extra M.2 NVMe SSD without requiring motherboard modifications, ensuring plug-and-play functionality. Notable features include support for various PCIe card configurations, compatibility with specific Lenovo models, and a fan header with multiple power modes for enhanced cooling options.

shadow-of-mordor-wraith-arsenal

The Forge of the Wraith is an internal trainer specifically designed for the Steam GOTY edition of Middle-earth: Shadow of Mordor, enabling extensive manipulation of game mechanics through memory editing. It offers a robust suite of features such as invulnerability, infinite focus in combat, stealth enhancements, and currency maximization, allowing users to dominate gameplay and explore freely without the constraints of the original mechanics. Its internal architecture ensures stability and minimizes the risk of detection, providing a seamless and powerful gaming experience.

reversing-labs-sandbox

MindForge is an educational sandbox designed for aspiring reverse engineers and memory manipulators, allowing users to explore the interactions between software and hardware within a controlled environment. It features a fictional binary target for practice, comprehensive in-app tutorials, a snapshot recovery system for experimentation, and tools like memory heatmaps and scriptable learning modules that foster understanding of memory manipulation concepts. The platform also supports multiple languages, making it accessible to a global audience of learners.

Rebirth-Pub-Save-Forge

ChronoVault is a sophisticated game profile management tool designed to enhance single-player narratives by allowing users to architect alternate realities within their gaming experiences. Unlike traditional save editors, it provides comprehensive features such as relationship mapping, inventory weaving, and resource flow balancing to ensure narrative coherence and immersion. Its responsive interface and multilingual support further elevate the user experience, making it accessible and intuitive for gamers at all levels.

packet-warden

AQW-Sequence Weaver is a bioinformatics-inspired toolkit designed to visualize and extract patterns from network telemetry specifically for AQW private server research. It enables users to map packet transactions, identify variable fields through heuristic analysis, and interactively explore session flows, while also supporting export to standard formats and multilingual interfaces. Notably, it offers a protocol diff engine for comparing captures across versions and a community research log for collaborative annotation of packet sequences.

nvidia-playgroud-go

nvidia-playgroud-go is a reverse-engineered Go client and multi-format proxy for accessing NVIDIA Build Playground's anonymous models. It supports dynamic model fetching and routing to prediction endpoints, utilizing a pure-Go hCaptcha solver for verification, and includes features such as Docker deployment and integration with the CLIProxyAPI for OpenAI completions and responses. This tool is designed for developers seeking to interface with multiple NVIDIA AI models programmatically without browser dependencies.

HexPatch

HexPatch: a binary patcher and editor written in Rust with terminal user interface (TUI).

hades-render-overlay

Kekropis is a cross-platform tactical overlay designed for competitive FPS games, focusing on enhancing situational awareness without altering the game’s core. It utilizes a micro-kernel visualization engine to passively observe game telemetry and displays intuitive glyphs, emphasizing minimal cognitive load and visual clarity. Notable features include a responsive user interface, support for multiple operating systems, and reliance on a read-only spatial telemetry network to maintain the integrity of the gaming experience.

grok-bot-0.18-original

The grok-bot-0.18-original repository provides an archival version of the Grok Bot 0.18.0 runtime code, mechanically split into a modular file structure for ease of access and analysis. It contains the original runtime bundles and tools for lossless reassembly, alongside precise documentation of module paths and offsets, which are crucial for understanding the binary's internal architecture. This setup facilitates the study and reconstruction of the software without any source mapping, preserving its structural fidelity for educational purposes.

deadspace3-resource-surge

DeadSpace3ResourceManager is a cross-platform tool designed for the Steam version of Dead Space 3 that facilitates efficient in-game resource management. By allowing users to inject 500 units of various resources directly into their inventory with a keystroke, it enhances the gameplay experience through instantaneous resource access while maintaining balance with features like customizable bindings and a cooldown timer. Notably, it operates non-intrusively and supports multilingual configurations, making it an ideal solution for players seeking to optimize their resource utilization ethically.

Atlas-Override

The Stellar Cartographer's Atlas is a sophisticated C++ tool designed to enhance the experience of players in procedurally generated space exploration simulations by providing an external memory system for tracking exploration journeys. Its notable features include advanced data interpretation across three layers: spatial analysis for path reconstruction and resource identification, linguistic assistance for understanding alien languages, and narrative generation that composes a personalized log of discoveries and interactions. This tool aims to enrich players' exploration narratives and prevent the loss of valuable data amid vast digital environments.

CredStalker-

CredStalker is a Python-based credential and sensitive data scanner that automatically crawls websites to identify exposed credentials, API keys, and other sensitive information. It features multi-type detection capabilities, deep content analysis of HTML and JavaScript, and customizable crawling with detailed reporting and export functionality for further analysis. Ideal for security audits and penetration testing, it also includes options for verbose logging and same-domain crawling to ensure scope compliance.

gitcolombo

Gitcolombo is an OSINT tool designed to extract identities such as names and emails from git repositories and GitHub, establishing connections between seemingly unrelated accounts. It features a Python CLI for repository cloning and analysis, alongside a web version that allows direct querying of the GitHub API without installation. Notable functionalities include detailed per-person identity analytics, correlation of authorship and commit data, and support for batch scanning across public repositories of users or organizations.

daily-expired-and-dropped-domains

The Daily Expired & Dropped Domains repository provides a public feed of expired and dropped domain names, specifically catered for cyber analysts, threat intelligence teams, and brand protection initiatives. It offers structured datasets that can be utilized for monitoring domain lifecycle changes, analyzing re-registration risks, and supporting research workflows, with features including daily updates on 10,000 domains and options for premium access to broader datasets and quicker data refresh cycles for improved threat detection.

Android-Hacking

Android-Hacking is a comprehensive toolkit designed for rooting and unlocking the bootloader of Android devices, specifically targeting devices like the Redmi A5. The repository offers detailed tutorials in both Portuguese and English, providing users with step-by-step instructions for exploiting vulnerabilities in Unisoc chipsets. Notable features include language-translated guidance and specific exploitation techniques applicable to Android devices.

process-orchestrator-win32

MindBridge Orchestrator is a behavioral framework for managing and interacting with external Windows processes through an event-driven architecture. It facilitates adaptive process discovery, seamless communication with GUI elements, and robust event handling, enabling applications to effectively converse with both legacy and modern systems. Notable features include dynamic enumeration of processes, a unified interaction vocabulary for UI elements, and resilience mechanisms such as process resurrection and session rehydration.

nightfall-cpvp-enhancements

BlackOut: The Shadowforge Toolkit for Meteor Client is an advanced Minecraft modification designed to enhance Crystal PvP (CPVP) gameplay through a system of contextual automation and precise combat tools. Notable features include predictive combat algorithms, advanced movement mechanics tailored for aerial combat, and a customizable user interface that supports multilanguage interactions, providing players with an edge in competitive scenarios. The toolkit aims to elevate gameplay by automating critical actions with high precision, making it a vital asset for serious players in the 2026 competitive scene.

Crossy-Road-Eternal

The Arcade Ascension Toolkit is a modular performance enhancer designed for retro-style endless hopper games, providing real-time aids that improve gameplay without diminishing the core skill challenge. Key features include predictive pathfinding overlays to enhance spatial awareness, adaptive timing calibration for responsive controls, and session performance analytics to help players learn from their gameplay. With a game-agnostic framework and a sleek, immersive UI, it also offers multi-language support and a vibrant community for continuous support.

crash-pattern-analyzer

PatternScope is a predictive drift analysis tool designed for simulated probability environments, enabling users to identify and visualize behavioral patterns in outcomes that initially appear random. By leveraging features such as Sequence Archetype Extraction (SAE) and Drift Velocity Index (DVI), the tool provides a scientific approach to understanding probability landscapes, allowing analysts to build comprehensive historical profiles and observe shifts in real-time. The platform also facilitates multi-session analysis through 3D visualizations and maintains an encrypted comparative corpus to enhance predictive accuracy across varied session parameters.

Blaze-Signal-Forge

OrbitPilot is an advanced automation tool tailored for online betting that enhances user engagement through a context-aware decision-making layer. By utilizing a robust Selenium foundation and a modular plugin architecture, it offers intelligent action sequencing, multi-platform responsiveness, and native multilingual logging, while also providing innovative features like a 24/7 sentinel monitoring system and detailed session analytics. This tool enables users to transform repetitive tasks into strategic workflows, allowing for a more informed and efficient betting experience.

0sec

0sec is an open and extensible AI-driven cybersecurity tool that automates vulnerability discovery, exploitation, and remediation across various layers, including web applications, APIs, source code, and network infrastructure. It supports multi-model and multi-agent capabilities to address complex security challenges, emphasizes continuous security over point-in-time assessments, and includes a command-line interface for streamlined interactions and automation of pentesting workflows. Notable features include the ability to find a wide range of vulnerabilities, integration with various environments and systems, and a focus on supply chain security and other emerging threat vectors.

jsrip

jsrip is an advanced JavaScript analysis tool designed for bug bounty hunters and penetration testers, capable of crawling web applications to extract and analyze JavaScript files for security vulnerabilities, such as secrets and endpoints. It features a sophisticated detection mechanism that identifies over 1700 patterns related to various cloud services, maps API routes and internal paths, and generates detailed interactive reports in multiple formats. Notable functionalities include subdomain enumeration, false positive mitigation, and scoping for shared-hosting environments.

B1ackOS

B1ackOS is a privacy-focused operating system based on Debian, designed to simplify software package installation while ensuring user security. Its notable features include a lightweight architecture, extensive application repositories for diverse use cases, a live operating capability, and a rolling release model that emphasizes stability and performance.