> cat /dev/github | grep security-tools

~/hackyfeed $

A cybersecurity tools aggregator — discover the latest pentesting, red team, and offensive security tools from GitHub.

sort: ( this page )

Covenant

Covenant is a collaborative .NET C2 framework for red teamers.

Corsy

CORS Misconfiguration Scanner

copilot-api

Turn GitHub Copilot into OpenAI/Anthropic API compatible server. Usable with Claude Code!

copacetic

🧵 CLI tool for directly patching container images!

content

Security automation content in SCAP, Bash, Ansible, and other formats

console

Application secrets and configuration management for developers.

commix

Automated All-in-One OS Command Injection Exploitation Tool

Coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.

CloudFail

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

Cloakify

CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection

cli

🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.

cli

The universal GraphQL API and CSPM tool for AWS, Azure, GCP, K8s, and tencent.

claude-bug-bounty

Claude Code skill for AI-assisted bug bounty hunting - recon, IDOR, XSS, SSRF, OAuth, GraphQL, LLM injection, and report generation

ClatScope

ClatScope Info Tool – The best and most versatile OSINT utility for retrieving geolocation, DNS, WHOIS, phone, email, data breach information and much more (70+ features). Perfect for investigators, pentesters, or anyone looking for an effective reconnaissance / OSINT tool.

clairvoyance

Obtain GraphQL API schema even if the introspection is disabled

CL4R1T4S

LEAKED SYSTEM PROMPTS FOR CHATGPT, GEMINI, GROK, CLAUDE, PERPLEXITY, CURSOR, DEVIN, REPLIT, AND MORE! - AI SYSTEMS TRANSPARENCY FOR ALL! 👐

Ciphey

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

chromepass

Chromepass - Hacking Chrome Saved Passwords

Chimera

Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

CHAOS

:fire: CHAOS is a free and open-source Remote Administration Tool that allow generate binaries to control remote operating systems.