> cat /dev/github | grep security-tools

~/hackyfeed $

A cybersecurity tools aggregator — discover the latest pentesting, red team, and offensive security tools from GitHub.

sort: ( this page )

hexyl

`hexyl` is a terminal-based hex viewer that presents binary data in a color-coded format, enhancing readability by visually distinguishing between different categories of bytes such as NULL bytes, printable ASCII characters, and non-ASCII data. Its primary use case is for examining raw binary files or data streams conveniently from the command line, making it a useful tool for developers and system administrators. Notable features include customizable color schemes via environment variables and extensive compatibility across various operating systems and package managers.

graudit

graudit is a static analysis tool that leverages GNU grep to identify potential security vulnerabilities in source code, making it comparable to tools like RATS and SWAAT while maintaining minimal technical requirements. Its notable features include customizable signature databases, support for multiple programming languages, extensive command-line options for fine-tuning scans, and the ability to create and extend custom databases. The tool is designed for flexibility, allowing users to easily integrate it into their workflows through simple installation and configuration procedures.

GPTLens

GPTLens is a vulnerability detection tool that leverages the capabilities of the GPT-4 API to analyze and identify vulnerabilities in smart contracts. It incorporates a multi-step auditing process through auditors, critics, and ranking systems, allowing for fine-tuned evaluation of smart contract safety. Notable features include customizable parameters for auditing and critic evaluations, along with support for running user-defined datasets.

GooFuzz

GooFuzz is a Bash script that leverages Google Dorking techniques to extract sensitive information from files or directories without directly querying web servers. Its primary use case is to assist cybersecurity professionals in discovering vulnerabilities and exposed data by utilizing search engine capabilities. Notable features include support for custom search parameters, integration with Google APIs for enhanced searching, and the ability to output results in various formats.

Good-MITM

Good-MITM is a rule-based Man-in-the-Middle (MITM) attack engine designed for rewriting, redirecting, and rejecting HTTP(S) requests and responses. It features a YAML-based rule description language for flexible matching and content manipulation, including domain-specific interception, JavaScript support for dynamic interventions, and the ability to install user-generated root certificates for secure communication. The tool is capable of functionally acting as a transparent proxy while supporting both HTTP and HTTPS multiplexing on a single port.

glicol

Glicol is a graph-oriented live coding language designed for real-time audio synthesis, with its components implemented in the Rust programming language. It facilitates live coding performances, electronic music education, and audio app development across various platforms, offering features like memory-safe, low-latency audio processing, robust error handling, and decentralized collaboration capabilities. Notable for its declarative programming approach, Glicol allows users to dynamically modify audio code without interruptions, making it accessible for both novices and experienced developers.

geometry

Geometry is a minimalistic and highly customizable Zsh prompt theme designed to enhance the command-line interface. Its primary use case is to provide users with an aesthetically pleasing and informative prompt that updates dynamically based on command execution status, Git repository state, and other contextual information. Notable features include customizable left and right prompts, asynchronous right-side printing, and various user-configurable functions for displaying useful data like Git branch status and command execution time.

gemma4-heretical

Gemma4-heretical provides a streamlined setup for deploying an uncensored Gemma 4 model using Ollama, with enhanced capabilities through community-built abliteration techniques that significantly reduce model response refusals while maintaining low quality loss. Key features include easy integration of the model with Ollama, support for various quantization configurations for optimal resource management, and the option for native Apple Silicon inference. Additionally, it offers a DIY abliteration script for users looking to customize the model further.

gemini-desktop-mac

Gemini Desktop for macOS is an unofficial desktop wrapper that provides a lightweight macOS application to access the Google Gemini web interface. Its notable features include a floating chat bar for quick access, global keyboard shortcuts for enhanced usability, and support for camera and microphone functionalities, while maintaining a native macOS experience without modifying or redistributing Gemini content. However, this application is archived and no longer maintained, with users encouraged to use the official Gemini app from Google instead.

framework

Blueprint is an open-source extension framework designed for Pterodactyl, enabling developers to create and manage extensions easily without extensive compatibility coding. It features a CLI for installation and updates, a modular structure for flexibility, and comprehensive guides to assist new developers. Its goal is to enhance the Pterodactyl modding community by providing tools that simplify the extension development process.

fnm

Fast Node Manager (fnm) is a cross-platform Node.js version manager designed for speed and simplicity, built in Rust. It supports seamless installation and usage across macOS, Windows, and Linux, enabling developers to manage Node.js versions easily using `.node-version` and `.nvmrc` files. Notable features include instant startup, single file installation, and built-in shell completion for various environments.

fish-shell

Fish is a user-friendly command line shell designed for macOS and Linux environments that enhances the interactive terminal experience through features like syntax highlighting, autosuggestions, and advanced tab completions, which require no additional configuration. It provides detailed documentation for users transitioning from other shells and supports installation across various platforms, including Windows via WSL. Noteworthy attributes include built-in command help, a web configuration tool, and rich customization options tailored to enhance usability and efficiency.

firmwalker

Firmwalker is a Bash script designed for analyzing extracted or mounted firmware file systems, focusing on the identification of sensitive files and configurations. It systematically searches for critical files like etc/shadow and etc/passwd, SSL certificates, common binaries, and specific keywords relevant to security assessments in IoT devices. Notable features include the ability to interface with the Shodan API and customizable search parameters, enhancing its functionality for security researchers and penetration testers.

firmadyne

FIRMADYNE is an automated platform for the emulation and dynamic analysis of Linux-based embedded firmware, featuring modified kernels for various architectures, a userspace NVRAM library, and tools for firmware extraction and scraping. Its notable capabilities include automated analysis scripts for identifying accessible webpages, dumping SNMP information, and testing for known vulnerabilities using Metasploit exploits. Designed primarily for research purposes, FIRMADYNE facilitates security assessments of embedded systems and their firmware by simplifying the process of running firmware in an emulated environment.

findom-xss

FinDOM-XSS is a specialized tool designed for detecting potential DOM-based XSS vulnerabilities in web applications rapidly. Its primary use case involves scanning specified URLs or lists of URLs to identify any security weaknesses, with the capability of outputting results to a designated file. Key features include its straightforward command-line interface and flexibility in handling multiple URLs through piping, complemented by dependency on LinkFinder for enhanced functionality.

FiloDB

FiloDB is a distributed, real-time, in-memory time series database that offers Prometheus compatibility, designed for massively scalable operational data storage and querying. It features efficient sharding, tag-based indexing for flexible queries, and low-latency performance, enabling real-time ingestion and monitoring of millions of entities. Notable capabilities include PromQL support, dual-datacenter fault tolerance, and advanced compression techniques for high data retention in memory.

file-unpumper

`file-unpumper` is a command-line utility designed for the cleaning and analysis of Portable Executable (PE) files, primarily used by developers and security professionals for malware analysis and reverse engineering. Notable features include PE header fixing, resource extraction, comprehensive metadata analysis, and file cleaning, all enhanced by parallel processing capabilities for improved performance. The tool provides a user-friendly interface with progress tracking, making complex operations efficient and accessible.

fd

`fd` is a fast and user-friendly alternative to the traditional `find` command, designed to efficiently locate entries within the filesystem. It features an intuitive syntax, supports regular expressions, and highlights different file types with color, enhancing user experience. Additionally, `fd` intelligently ignores hidden files and directories, as well as files listed in `.gitignore`, while providing parallelized directory traversal for improved speed.

falcon

Falcon is a formal binary analysis framework designed in Rust, focused on providing an expression-based intermediate language (IL) that draws influences from RREIL and Binary Ninja's LLIL. It features semantically-equivalent binary translators for x86, MIPS, and Arm64 architectures, along with support for ELF and PE files through lifters, and offers a fixed-point engine for advanced data-flow analysis and abstract interpretation. The tool aims to enhance binary analysis capabilities with its performant memory models and concrete execution environment.

egression

EGRESSION is a cybersecurity tool designed to evaluate the effectiveness of egress and Data Loss Prevention (DLP) controls by testing the upload of sensitive data from a network. It systematically attempts to connect and transmit sensitive files using various methods, categorized into four testing levels, which provide insights on potential vulnerabilities. Noteworthy features include its self-contained nature, multiple testing techniques ranging from FTP to DNS, and plans for future enhancements such as additional egress methods.

DynastyPersist

DynastyPersist is a Linux persistence tool designed for use in King of the Hill (KoTH), Battlegrounds, and penetration testing operations. Notable features include automated SSH key generation, cronjob setup for scheduled tasks, custom user creation with root privileges, remote code execution capabilities, and manipulation of system services for covert access. This multi-faceted tool streamlines the establishment and maintenance of persistence in compromised systems.

duckdb-skills

DuckDB-skills is a Claude Code plugin that facilitates data exploration and session memory leveraging DuckDB. It allows users to attach DuckDB databases for interactive querying, run SQL queries or natural language questions against attached databases or files, and read various data formats from local or remote storage. Notable features include session state management for seamless continuity, full-text search for DuckDB documentation, and the ability to recover context from past conversations through session logs.

dotfiles

The flickowoa/dotfiles repository provides a collection of configuration files for the Hyprland compositor, enabling users to quickly set up and customize their desktop environment on Arch Linux. It features various themes that enhance the aesthetic appearance of the base config, along with installation instructions and backup procedures for existing configurations. Notable features include a user-friendly theme repository and clear guidelines for sourcing theme files within the main configuration, facilitating a personalized and visually appealing user experience.

Docker-OSX

Docker-OSX is a tool that enables users to run macOS in a Docker container with near-native performance, allowing for the execution of macOS applications alongside Linux and Windows environments. Its primary use case includes security research on macOS, featuring support for X11 forwarding and iPhone USB functionality. Noteworthy features include various macOS versions support (e.g., Catalina and Big Sur) and an active community presence through Discord and Telegram for user engagement and assistance.

docker-minecraft-server

The itzg/docker-minecraft-server is a Docker image designed to facilitate the deployment of Minecraft Java Edition servers, allowing users to easily run, manage, and customize their gaming experience through containerization. Among its notable features are support for various Minecraft versions, dynamic server property configuration via environment variables, and automated management of mods and plugins. The tool is particularly useful for users seeking a hassle-free setup with extensive documentation for both new and advanced users.