> cat /dev/github | grep security-tools

~/hackyfeed $

A cybersecurity tools aggregator — discover the latest pentesting, red team, and offensive security tools from GitHub.

sort: ( this page )

ThreatMapper

ThreatMapper is a runtime threat management tool designed for cloud-native environments, providing comprehensive visibility into vulnerabilities, exposed secrets, and security practice deviations within production deployments. It features agent-based inspection and agent-less monitoring, enabling effective threat detection and prioritization through its ThreatGraph visualization. The tool supports continuous security observability across diverse platforms, including Kubernetes and serverless architectures, facilitating the implementation of 'shift left' security practices.

teachablemachine-community

Teachable Machine Community is a web-based tool that enables users to create machine learning models effortlessly without requiring prior coding knowledge. It utilizes Tensorflow.js for model training and provides helper libraries for integrating image, audio, and pose recognition models into various projects. Notable features include easy model export for use in different programming languages and a supportive community for sharing and feedback.

teable

Teable is a versatile platform that integrates data management, AI workflows, and application development, leveraging a PostgreSQL backend while maintaining user-friendly spreadsheet-like interfaces. It features AI chat capabilities for natural language data interaction, an app builder for custom application creation, and a workflow engine for automating tasks based on real-time data changes. This solution can be utilized in the cloud or self-hosted, offering scalable, secure, and efficient environments for businesses to streamline their operations.

tabby

Tabby is a versatile terminal emulator and SSH/client application designed for Windows, macOS, and Linux systems, offering features like integrated SSH and Telnet connections, serial terminal support, and customizable theming. It supports multi-pane splitting, customizable shortcuts, direct file transfers over Zmodem, and a range of shell environments including PowerShell and WSL. Additionally, Tabby allows for a seamless user experience with proper Unicode support and tab management capabilities.

supermemory

Supermemory is an advanced memory and context engine for AI that enhances conversational systems by allowing them to retain and utilize information from past interactions. Its primary use case includes automatically learning from conversations, managing user profiles, and providing hybrid search capabilities that integrate memory and external knowledge sources. Notable features include real-time integration with various platforms, temporal handling of facts and contradictions, and support for multi-modal extractors to process diverse content types.

SuperConductor

SuperConductor is a cross-platform playout client for Windows, Linux, and macOS designed to control various broadcast devices and software including CasparCG Server, OBS Studio, and vMix. It features timeline editing for instant playback, support for GDD templates, multiple playout modes (single and multi-item), and integration capabilities with Stream Deck and X-keys for enhanced control. The tool is built on the Sofie Automation system's playout backend, offering a robust solution for media control and management in broadcasting environments.

supabase

Supabase is an open-source Postgres development platform designed to provide a Firebase-like experience by offering real-time capabilities and auto-generated APIs, including REST and GraphQL. Key features include authentication and authorization, database functions, file storage, and an AI toolkit, all accessible through a hosted service or self-hosting option. This tool enables developers to rapidly build scalable applications using robust, enterprise-grade open-source components.

suno-api

Suno API is an open-source tool designed to facilitate the integration of Suno.ai's music generation capabilities into various AI agents, including those using OpenAI's API structure. It features automatic CAPTCHA solving through 2Captcha and Playwright, seamless compatibility with agent platforms, and customizable deployment options, allowing users to effectively leverage AI music generation services within their applications.

sudolang

SudoLang is a programming language specifically designed for seamless interaction with AI language models such as ChatGPT and Google's Gemini. It utilizes a natural language constraint-based approach that allows users to define complex behaviors using expressive syntactic structures, enabling the AI to manage programmatic interactions and maintain state efficiently. Notable features include modular interfaces, semantic pattern matching, visual diagramming support, and a syntax highlighting extension for improved readability and usability.

StreamAwesome

Stream Awesome is a tool designed to generate visually appealing Stream Deck icons utilizing Font Awesome's icon library. Its primary use case is to allow users to create customized icons that closely resemble the original Elgato Stream Deck design. Notable features include online accessibility, compatibility with both free and pro Font Awesome versions, and a straightforward setup process for local development.

Stream-Deck-TS-SDK

The Stream Deck TS-SDK is a TypeScript library designed for developing plugins for Elgato's Stream Deck. It enhances plugin development by providing decorators for handling various events in both the action and property inspector contexts, streamlining the integration process. Key features include automatic event handling and a simplified installation via npm, making it accessible for developers looking to create customized Stream Deck functionalities.

star-wars-api

The Star Wars API is a GraphQL interface designed to provide efficient access to data related to the Star Wars universe, optimizing data retrieval for applications such as Discord bots. Notable features include fully generated TypeScript typings, Docker images for private hosting, and support for various Star Wars assets like films, people, planets, and vehicles. Its design enhances performance over similar APIs by facilitating faster access to nested data structures.

stagehand

Stagehand is an AI-driven browser automation framework that facilitates web browser control using natural language in conjunction with code. Its two primary use cases include enabling developers to seamlessly switch between AI and code for browser interactions, and providing robust caching and self-healing features for reliable automation. Notable features include the ability to preview AI actions, cache repeatable tasks, and enhance maintainability by adapting to changes in web pages without constant LLM inference.

squirreldisk

SquirrelDisk is an open-source disk space analyzer designed for detecting large files and visualizing disk usage through a sunburst chart. Built with Rust and React, it offers features such as fast scanning, real-time detection of external disks, and cross-platform support across MacOS, Windows, and Linux. The tool aims to provide an easy-to-use alternative to existing disk scanning software while maintaining performance and usability.

spotnet

Spotnet is a decentralized community management tool designed for peer-to-peer networking. Its primary use case is to facilitate secure and efficient communication among users in a distributed environment. Notable features include reference client implementation and functionalities that support community-driven governance and information sharing.

slash

Slash is an open-source, self-hosted link management tool that allows users to create customizable shortcuts for organizing and sharing important URLs. It features easy link categorization with tags, public or team-based sharing options, analytics for link traffic, and a browser extension to facilitate quick access to shortcuts. The platform aims to streamline link sharing in both personal and professional contexts, reducing the chaos associated with scattered online information.

servers

The Model Context Protocol servers repository provides reference implementations for the Model Context Protocol (MCP), aimed at enabling secure and controlled access for Large Language Models (LLMs) to various data sources and tools. It includes multiple servers that illustrate MCP features and SDK utilization across languages such as C#, Go, Java, and Python, serving primarily as educational resources for developers. Notable implementations include functionality for web content fetching, file operations, and knowledge graph-based memory management.

serve

`serve` is a command-line tool designed to serve static sites, single page applications, or files from a local directory, featuring an intuitive directory listing interface. It can be easily invoked using `npx serve` or installed globally via npm, and it offers customizable configurations through a `serve.json` file. Additionally, the tool's core functionality is powered by `serve-handler`, allowing integration into existing HTTP servers for advanced use cases.

sequential-workflow-designer

The Sequential Workflow Designer is a TypeScript-based tool designed for creating customizable workflows in web applications without any external dependencies. It allows developers to design various applications, from graphical programming languages to workflow builders, featuring JSON-defined workflow storage, theme compatibility, and support for modern frameworks like Angular, React, and Svelte. Notable features include an SVG rendering engine, light and dark themes, as well as extensive customization options, making it suitable for a wide range of applications.

savee

Savee is a Generative AI tool designed to combat online misinformation by providing fact-based responses to misleading social media content. Its primary use case is to analyze posts on-demand and suggest accurate replies using a database of verified historical facts, notably trained on the Holocaust's Wikipedia page. Key features include a Chrome extension for easy integration, the ability to handle larger factual sources, and an open-source framework for community contributions and improvements.

S3BucketList

S3BucketList is a browser extension designed to search, list, and inspect Amazon S3 buckets encountered in network requests while browsing the web. Its primary use case is to assist cybersecurity professionals in identifying and managing S3 bucket vulnerabilities, featuring capabilities such as filtering buckets, extracting ACL permissions, detecting unclaimed buckets, and managing recorded bucket data across tab-specific sessions. Notably, it supports installation on both Chrome and Firefox, enhancing accessibility for users.

runtipi

Runtipi is a personal homeserver orchestrator that simplifies the management and deployment of multiple services on a single server, leveraging Docker technology. Its web interface allows users to easily add and configure services without the complexity of manual networking. Key features include a catalog of available services through the App Store, community contributions, and a focus on user-friendly setup and management.

rowy

Rowy is a low-code platform designed to facilitate database management with an Airtable-like interface, specifically optimized for Firebase and Google Cloud environments. It offers features such as CRUD operations, data import/export capabilities, and the ability to create automated workflows using cloud functions, making it ideal for developers and teams seeking to streamline their app development processes while maintaining control over data access and organization. Additionally, Rowy supports a wide range of data field types, advanced permissions management, and integrates with various third-party tools through pre-built code blocks.

Roo-Code

Roo Code is an AI-powered coding assistant integrated into your editor, designed to enhance developer productivity by generating code from natural language descriptions, debugging, refactoring existing code, and automating repetitive tasks. It features adaptable modes—such as Code, Architect, Ask, and Debug—to cater to specific development needs, providing tailored support across various programming tasks. The tool is no longer active as of May 15th, but users are directed towards alternative solutions like ZooCode and Cline.

RobustPentestMacro

RobustPentestMacro is a versatile Visual Basic macro designed for penetration testing, allowing testers to embed sophisticated post-exploitation techniques into Microsoft Office documents. Key features include platform detection for Windows and MacOS, sandbox evasion mechanisms, WMI persistence for automatic execution at startup, and social engineering tactics to obscure malicious behavior. The macro facilitates easy customization by enabling users to insert tailored payloads through defined functions for both operating systems.