> cat /dev/github | grep security-tools

~/hackyfeed $

A cybersecurity tools aggregator — discover the latest pentesting, red team, and offensive security tools from GitHub.

sort: ( this page )

serde

Serde is a highly efficient framework for serializing and deserializing Rust data structures, enabling developers to convert between Rust-native data types and various data formats such as JSON. Its primary use case is to facilitate data handling in Rust applications, with notable features including the implementation of `Serialize` and `Deserialize` traits and support for various data formats through externally managed crates.

scripthunter

Scripthunter is a reconnaissance tool designed to discover public JavaScript files on specified websites. Its primary use case is facilitating security assessments by identifying accessible JS files and directories, utilizing various external tools such as Gau, Hakrawler, and FFUF. Notable features include a Telegram notification system for scan completion updates, the ability to parse and verify the connectivity of found scripts, and the aggregation of discovered filenames into a global wordlist.

sasquatch

The `sasquatch` tool enhances the standard unsquashfs utility by adding support for various vendor-specific SquashFS implementations, particularly those that deviate from the standard header or LZMA compression methods. It utilizes a brute-force approach to adapt to custom compression options, making it useful in scenarios where proprietary variations in SquashFS need to be accessed. Notable features include advanced command line options for testing and debugging, indicating its focus on developers and advanced users.

sandcat

Sandcat is a Docker and dev container framework designed to securely run AI agents in a controlled environment, offering features such as network traffic regulation through mitmproxy and secret management via transparent substitution. Its primary use case is for developers who require a secure development shell with minimal configuration overhead, facilitated by a bash CLI for project initialization and customizable proxy settings. Notable features include a comprehensive traffic routing system, controlled access lists, and reusable configuration templates that streamline the setup of development environments in IDEs like VS Code.

rusty-radamsa

Rusty Radamsa is a Rust-based general-purpose fuzzer designed to mutate sample data to uncover errors in data-processing applications. It features a variety of customizable mutation patterns, supports multiple operating systems, and allows users to specify input files, output options, and mutation behaviors through a command-line interface. Notably, it provides exhaustive command options for managing random seeds, output generation counts, and checksum filters to ensure diversity in test cases.

RustPython

RustPython is a Python 3 interpreter implemented in Rust, aiming to provide a robust alternative to CPython while leveraging the safety and performance characteristics of the Rust language. Notable features include compatibility with Python 3.14, an interactive shell, and the ability to run WebAssembly demos, along with optional SSL support to facilitate HTTPS requests and pip package installations. This tool is primarily used for executing Python code and experimenting with Python programming in a Rust environment.

rustlualoader

rustlualoader is a Rust-based tool designed for embedding and executing Lua scripts within Rust applications. Its primary use case includes enhancing shellcode execution through the XOR encryption process, allowing developers to obscure the payload for improved security. Notable features include easy integration by replacing raw shellcode files and a streamlined build process using Cargo.

rustlings

Rustlings is a tool designed to facilitate the learning of Rust programming through small, hands-on exercises. It is primarily aimed at beginners looking to practice coding in Rust, ideally in conjunction with the official Rust book. Notable features include a structured set of exercises that progressively build coding skills in Rust.

router_badusb

The tenable/router_badusb repository provides configuration files for executing BadUSB attacks on select routers using the P4wnP1 framework on a Raspberry Pi. Notable features include man-in-the-middle traffic interception for RouterOS devices, traffic hijacking through DHCP manipulation, and compatibility with various USB devices connected to routers, allowing for broader attack vectors beyond typical printer sharing. This tool is primarily used for network exploitation and traffic manipulation in vulnerable router configurations.

RobotsDisallowed

RobotsDisallowed is a tool that consolidates disallowed directories from the robots.txt files of the world's top 100,000 websites, specifically sourced from the Alexa and Majestic lists. Its primary use case is to assist cybersecurity professionals in identifying potential high-value targets during web security assessments or bug bounties by providing a curated list of sensitive areas that website owners have marked as off-limits. Notable features include a cleaned-up dataset, a curated top-500 list emphasizing critical directory names, and a focus on usability for effective content discovery.

ripgrep

ripgrep (rg) is an efficient line-oriented search tool that recursively searches directories for regex patterns while adhering to gitignore rules and excluding hidden and binary files by default. It is cross-platform, with notable features including support for Unicode and high performance compared to similar tools like The Silver Searcher and grep. The tool offers customizable searches and configurations, making it highly versatile for developers and system administrators.

rio

Rio is a modern terminal application designed for cross-platform functionality, offering a seamless user experience across various environments. Its notable features include support for split views, configurable backgrounds, and compatibility with devices like the Steam Deck. Built in Rust, it emphasizes stability and performance, making it suitable for developers needing an efficient terminal interface.

RemoteKeyStrokes

RemoteKeyStrokes is a script designed to automate keystrokes during an active remote desktop session, aimed at assisting offensive operators with post-exploitation activities while utilizing living off the land techniques. Its notable features include command execution, file transfer capabilities, and upcoming functionalities such as privilege escalation, persistence, and anti-forensics. The tool is particularly suited for users looking to streamline remote command execution and resource management in cybersecurity engagements.

rayhunter

Rayhunter is an open-source tool designed for the detection of IMSI catchers, also known as cell-site simulators or stingrays. Initially built to operate on the Orbic RC400L mobile hotspot, it now supports additional devices, offering an easy installation process aimed at minimizing false positives for users regardless of their technical expertise. The project encourages community involvement and provides resources for installation and usage guidance to enhance awareness of cellular surveillance threats.

r1_escape

R1 Escape is a collection of scripts designed to facilitate the unlocking and customization of Android devices, enabling users to gain full control over their systems. The tool automates processes such as OEM unlocking, bootloader unlocking, disabling AVB, and flashing a userdebug system image of AOSP-13 with GMS support. It is primarily targeted at users with Linux or Windows systems, requiring root access or administrative privileges, and includes specific instructions for different operating systems and troubleshooting tips.

poweruser

Poweruser is a curated collection of tips, tricks, and scripts designed to enhance productivity across various platforms, including Android, Linux, Windows, and MacOS. It serves as a resource for users seeking to optimize their workflows and maximize their system capabilities. Notable features include platform-specific scripts and configurations, as well as links to external resources such as Nginx configurations.

powerlevel10k

Powerlevel10k is a high-speed Zsh theme designed for enhanced terminal aesthetics and functionality, emphasizing both performance and customization. Its key features include a built-in configuration wizard, instant prompts with no lag, and extensive flexibility in appearance, making it suitable for users looking to tailor their command line experience. The theme also seamlessly integrates compatibility with other popular prompts while ensuring an out-of-the-box setup that prioritizes user experience.

posixcube

posixcube is a POSIX-compliant shell script-based server automation framework that facilitates the execution of CUBEs or remote commands on multiple hosts via SSH. It supports features like asynchronous execution in Bash, programmable tab completion for SSH hosts, and the ability to manage environment variables with encrypted files. This tool streamlines remote server management by allowing for flexible command execution and configuration across multiple systems simultaneously.

PolyDrop

PolyDrop is a cybersecurity tool that exploits the vulnerabilities of trusted applications to deliver a script interpreter alongside malicious code on Windows, Mac, or Linux systems. It supports thirteen scripting languages, which are typically overlooked by mainstream antivirus solutions, enabling execution of the payloads without detection. Designed for penetration testing and red teaming, PolyDrop allows security professionals to test the efficacy of endpoint defenses against lesser-known scripting languages.

polars

Polars is a high-performance analytical query engine for DataFrames, developed in Rust, that supports multi-threaded and vectorized execution for efficient data processing. It features both lazy and eager execution capabilities, allowing for complex query optimization and the ability to handle datasets larger than RAM through a streaming engine. With multi-language support, extensibility via plugins, and GPU acceleration, Polars is designed to facilitate rapid data analysis across various programming environments.

plainlanguage.gov

The plainlanguage.gov repository provides an online resource aimed at assisting federal employees in understanding and complying with the Plain Writing Act of 2010. Built using the Jekyll static site generator and U.S. Web Design Standards, it features a user-friendly interface and is optimized for accessibility via WCAG2AA compliance, including automated testing with the pa11y tool. Notable features include efficient local development setups and incremental site rebuilding capabilities for enhanced performance during testing and updates.

PipeWire-Guide

The PipeWire Guide provides comprehensive documentation on using PipeWire, a multimedia server designed for low-latency audio and video processing. It supports various applications and tools to enhance user efficiency, including installation instructions across multiple Linux distributions and resources for integrating with other multimedia frameworks like PulseAudio and JACK. Notable features include a flexible multiprocess architecture and a robust security model for containerized applications.

Pip-Intel

Pip-Intel is an OSINT and cyber intelligence gathering tool that integrates multiple open-source resources into an intuitive interface, enhancing the data collection and analysis workflow for cybersecurity professionals. It enables the collection of detailed information from a variety of input sources such as email addresses, phone numbers, IP addresses, and social media, while offering functionalities like geolocation, user analysis, and dark web searches. Its reliance on Python-written pip packages allows for streamlined gathering of intelligence across diverse data points.

PhoneInfoga

PhoneInfoga is an advanced OSINT reconnaissance tool designed for gathering information on phone numbers using publicly available resources. It accurately retrieves data such as country, carrier, and line type, while also leveraging search engines and APIs for footprinting to identify the number's provider or owner. Notable features include the ability to check number validity, scan multiple numbers simultaneously, and employ custom formatting for efficient data collection.

pex

Pex is a lightweight package manager specifically designed for PostgreSQL, allowing developers to easily install, manage, and maintain multiple PostgreSQL packages across various installations. Notable features include a curated package repository, minimal dependencies, flexibility in installation layouts, and support for custom in-house packages, all linked by cryptographic hashes for enhanced security. Pex utilizes standard Unix tools along with Git for package management, facilitating seamless integration and tracking of installed packages.