> cat /dev/github | grep security-tools

~/hackyfeed $

A cybersecurity tools aggregator — discover the latest pentesting, red team, and offensive security tools from GitHub.

sort: ( this page )

apple-mcp

Apple MCP enhances the functionality of Apple applications by allowing users to automate tasks across Messages, Notes, Contacts, Mail, Reminders, Calendar, and Maps through natural language commands. Notable features include the ability to chain commands for complex actions, schedule messages and emails, and seamlessly search through various apps, thus transforming the user's Mac experience into a more efficient, AI-powered interface.

appdecrypt

appdecrypt is a tool designed to decrypt encrypted application binaries on macOS systems that have System Integrity Protection (SIP) enabled, particularly for versions 11.2.3 and below, as well as macOS 15.0-15.2 leveraging CVE-2025-24204. It provides a command-line interface for both macOS and jailbroken iOS devices, allowing users to specify the paths for the encrypted application and the desired output for the decrypted binary. Notable features include support for processing applications and frameworks within the app bundle, as well as the ability to bypass iOS runtime challenges with a dedicated script for iOS devices.

angular-electron

The angular-electron repository provides a boilerplate for developing desktop applications using Angular 22 and Electron 43, leveraging TypeScript and SASS with hot reloading capabilities. It supports both development and production environments, includes testing functionality with Vitest and Playwright, and allows packaging the application into executables for Linux, Windows, and macOS. Notably, the project follows a two-package.json structure to optimize the final build while maintaining Angular CLI integration.

Amethyst

Amethyst is a tiling window manager for macOS, designed to enhance productivity by automatically arranging windows in a space-efficient manner. Its notable features include customizable keyboard shortcuts modeled after xmonad, accessibility support for managing window layouts, and compatibility with macOS 10.15 and later. The tool allows users to efficiently manage window focus and layouts through a series of predefined and customizable keybindings.

alphaTab

AlphaTab is a cross-platform music notation and guitar tablature rendering library designed for web and application integration. It supports loading and rendering music sheets from various formats such as Guitar Pro and MusicXML, allowing dynamic display of comprehensive musical information while offering playback through a built-in MIDI synthesizer. Key features include a responsive design adaptable to different platforms and the ability to render graphics in SVG or raster formats, enhancing the user experience across multiple environments.

Airplay2ndScreen

Airplay2ndScreen is a Swift-based sample application designed for iOS 13+ that allows seamless integration of audio and video playback on external AirPlay devices by leveraging iOS's ability to treat these devices as external displays. The tool enhances user experience by enabling full-screen video playback and streaming music through the Feed Media SDK, thus avoiding the limitations of simple screen mirroring. Notable features include dynamic detection of AirPlay connections, automatic transition of audio playback, and customizable video rendering for an improved interface on the external display.

ai-town

AI Town is a customizable virtual environment designed for AI characters to interact and socialize, serving as a starter kit for developers to create and extend their own versions of the platform. Leveraging a robust backend with support for shared global state and a simulation engine, it integrates seamlessly with various language models and offers deployment flexibility across multiple environments, including cloud and local setups. Notable features include support for different LLMs, background music generation, and an interactive simulation framework built with JavaScript/TypeScript.

ai-mask

AI-Mask is a Chrome web extension that enables local inference for AI models within web applications, prioritizing user privacy by executing models on-device. Its notable features include the ability to cache models once for multiple web apps, an easy-to-integrate SDK for developers, and plans for proxying requests to external AI APIs without exposing user API keys. This tool allows users to leverage machine learning capabilities without compromising on data security or incurring costs associated with remote model execution.

agent-ui

Agent UI is a modern chat interface designed for AgentOS, leveraging Next.js, Tailwind CSS, and TypeScript. Its primary use case is to connect users to AgentOS instances for interactive communication, offering features such as real-time streaming, visualization of agent tool calls, reasoning steps, and multi-modality support for various content types. The UI is customizable and supports both local and production environments, facilitating a seamless integration with the Agno platform.

AeroSpace

AeroSpace is a tiling window manager for macOS, designed to provide an efficient workspace layout inspired by the i3 window manager. Its notable features include a tree-based window organization, fast workspace switching without animations, custom text-based configuration, and robust support for multi-monitor setups, all without requiring the disabling of System Integrity Protection (SIP). The tool facilitates a command-line interface with shell completion and manpages, promoting a streamlined and efficient user experience.

zsh-syntax-highlighting

zsh-syntax-highlighting provides Fish shell-like syntax highlighting for the Zsh shell, enabling real-time visual feedback on command syntax as users type into the terminal. Its primary use case is to enhance command review and error detection before execution, with notable features including support for custom highlighter scripts and compatibility with Zsh versions 4.3.11 and above. The tool hooks into the Zsh Line Editor, ensuring that syntax highlighting reflects the command-line buffer accurately at the time of input.

zsh-autocomplete

The Zsh Autocomplete plugin enhances command line productivity by providing real-time type-ahead autocompletion, similar to desktop applications, without requiring manual shortcut activation. It features an out-of-the-box configuration for Zsh's completion system, support for multi-line history search, recent directory completion, and customizable keyboard shortcuts, making it a valuable tool for improving the efficiency of Zsh users.

zellij

Zellij is a terminal workspace designed for developers and ops-oriented users, functioning as a terminal multiplexer with a focus on both simplicity and advanced features. Its notable capabilities include deep customizability, support for multiplayer collaboration, unique UX elements like floating and stacked panes, and a versatile plugin system that allows the creation of plugins in various languages compiled to WebAssembly. Additionally, Zellij offers a built-in web client, enhancing accessibility by making the terminal optional.

zed

Zed is a high-performance multiplayer code editor developed by the creators of Atom and Tree-sitter. Its primary use case is to facilitate collaborative coding in real-time, providing a seamless editing experience across macOS, Linux, and Windows platforms. Notable features include its performance optimization for simultaneous user interactions and robust support for various programming languages through advanced parsing capabilities.

yash

Yash is a POSIX-compliant command line shell written in C99, designed for both interactive and scripting environments. Its notable features include global aliases, arrays, advanced redirection options, and command line completion for over 100 commands, making it a robust tool suitable for daily use. Yash aims for comprehensive POSIX compliance while providing enhancements for improved usability and scripting capabilities.

XRCross

XRCross is a reconnaissance and penetration testing tool designed for identifying various web vulnerabilities including XSS, SSRF, CORS, SSTI, IDOR, RCE, LFI, and SQLI. Notable features include URL and subdomain enumeration, AWS bucket enumeration, and support for various test parameters, such as command injection and redirection checks. The tool is implemented in Bash and offers a flexible command-line interface with numerous options for detailed vulnerability assessment.

xelis-blockchain

XELIS is a pioneering blockchain platform utilizing a BlockDAG architecture designed to enhance privacy, speed, scalability, and support for smart contracts. Key features include a unique egalitarian PoW algorithm for accessibility, instant synchronization for wallet usability, and a sophisticated difficulty adjustment mechanism employing Kalman Filters to maintain network integrity. Additionally, XELIS offers robust privacy through homomorphic encryption, enabling secure transactions and the deployment of decentralized applications within a sandboxed environment.

wstunnel

Wstunnel is a tunneling tool designed to bypass firewalls and proxies by utilizing the WebSocket protocol, which is typically allowed in restrictive environments. Its primary use case involves facilitating secure communication over various protocols such as TCP, UDP, and Unix sockets, while supporting TLS and mTLS connections with auto-reload capabilities for certificates. Notable features include dynamic tunneling options, IPv6 support, and the ability to act as a standalone binary for easy deployment.

windows

The tool "dockur/windows" enables the deployment of a full Windows environment within a Docker container, allowing users to run various versions of Windows, including modern and legacy releases. It features automated installation, customizable resource allocation, and support for advanced networking and USB passthrough, delivering near-native performance through KVM acceleration. This tool is particularly useful for developers needing a Windows operating system for testing or development in a containerized environment.

whoisdigger

Whoisdigger is a cross-platform desktop application designed for bulk WHOIS lookups, leveraging a Rust backend for enhanced performance and privacy. It provides features such as multi-threaded WHOIS querying, raw text response handling, proxy support, and a user-friendly interface with dark mode capabilities, catering to domain builders and creators who wish to avoid third-party logging risks. This tool also supports advanced functionalities like IDNA filtering, DNS sweep lookups, and optional request caching, making it a reliable solution for rapid domain name investigations.

whoami-project

Whoami is a privacy and anonymity tool specifically designed for Debian and Arch-based Linux distributions, featuring over nine powerful modules aimed at enhancing user anonymity. Key functionalities include automatic IP and DNS changing, MAC address randomization, log file deletion, and browser anonymization, all aimed at securing user identity against various threats such as Man-In-The-Middle attacks. Additionally, it offers a Bug Fixer module that is currently under development to address issues without requiring user intervention.

whkd

_whkd_ is a hotkey daemon designed for Windows, enabling users to execute commands based on input events via a customizable configuration file. Its primary use case focuses on defining key bindings to manage application behaviors and system commands efficiently. Notable features include advanced hotkey assignment and application-specific command execution, drawing inspiration from similar tools like `skhd` and `sxhkd`.

wezterm

WezTerm is a GPU-accelerated terminal emulator and multiplexer designed for cross-platform use, implemented in Rust. Its primary features include high performance, advanced rendering capabilities, and extensive user customization options, facilitating an enhanced terminal experience across various operating systems. The project also encourages community engagement through support channels such as GitHub Issues and Discussions.

War-Thunder-Datamine

The War Thunder Datamine repository enables users to access and analyze data extracted from the popular military simulation game, War Thunder. Its primary use case is to facilitate community-driven insights and modifications based on game data, with frequent updates ensuring the information remains relevant. Notable features include collaborative contributions from multiple users, enhancing the breadth and accuracy of the data collected.

vivid

vivid is a customizable generator for the LS_COLORS environment variable, enhancing the colorized output of command-line tools like ls, tree, and fd. It utilizes a YAML-based configuration for file types and color themes, allowing for easy theme selection and modification using human-readable color specifications. Notable features include support for both truecolor (24-bit) and 8-bit modes, as well as the ability to match existing terminal themes dynamically.