> cat /dev/github | grep security-tools

~/hackyfeed $

A cybersecurity tools aggregator — discover the latest pentesting, red team, and offensive security tools from GitHub.

sort: ( this page )

patator

Patator is a multi-threaded password guessing tool designed to provide a more flexible and reliable alternative to existing tools like Hydra and Medusa. It supports a wide array of modules for brute-forcing various protocols, including FTP, SSH, SMTP, and SQL databases, among others. Notable features include user enumeration capabilities, customizable request handling, and an emphasis on usability for advanced users.

orbit

Orbit is a Python package designed for Bayesian time series forecasting and inference, offering an intuitive initialize-fit-predict interface that facilitates time series analysis. It features several forecasting models, including Exponential Smoothing and Local Global Trend, and supports diverse estimation methods such as Markov-Chain Monte Carlo and Variational Inference for model estimation and inference.

mesop

Mesop is a Python UI framework designed for rapid development of web applications, particularly useful for internal tools and demos. It features an intuitive, reactive UI paradigm that allows developers to create applications without needing to write Javascript, CSS, or HTML, leveraging hot reloading and strong type safety for seamless workflows. Notably, it facilitates the composition of custom user interfaces as components defined by Python functions, enabling quick deployment with minimal code.

LaVague

LaVague is an open-source framework designed for developers to create AI Web Agents that automate web-based processes. It utilizes a World Model to interpret objectives and an Action Engine to execute corresponding actions, significantly enhancing automation capabilities. Additionally, LaVague QA provides specialized tools for QA engineers to streamline the conversion of Gherkin specifications into tests, improving testing efficiency.

jwcrypto

JWCrypto is a Python library that implements specifications from the JOSE Working Group, including JSON Web Signature (JWS), JSON Web Encryption (JWE), and JSON Web Token (JWT). Its primary use case is to facilitate secure signing and encryption of JSON objects for authentication and authorization purposes. Notable features include support for multiple cryptographic algorithms and comprehensive documentation, although it notes the deprecation of the RSA1_5 algorithm due to security vulnerabilities.

iOS_Reverse_Engineering

The iOS Reverse Engineering repository provides a comprehensive guide and resources for reverse engineering iOS applications, catering to users of varying expertise levels. Notable features include example IPA files demonstrating obfuscation techniques and custom Ghidra scripts to facilitate the reverse engineering process. The project aims to foster a community dedicated to evolving the iOS reverse engineering landscape.

ios_persistence_mapping

The `ios_persistence_mapping` tool enables the mapping of iOS persistence attack surfaces using data extracted from mounted iOS filesystems. Its primary use case is to facilitate analysis for security researchers by generating a unique operations list, which is then imported into Neo4J for visual representation and querying. Notable features include support for custom configurations, integration with Neo4J databases, and the ability to analyze iOS firmware by processing root filesystem contents.

Image-To-ASCII

Image-To-ASCII is a tool designed to convert images into ASCII art, allowing users to represent visuals in a text-based format. It supports various image formats and allows customization of output width, with the height being twice the specified width. Notable features include the ability to define pixel region sizes for conversion, enhancing the control over the ASCII output's resolution.

hfinger

Hfinger is a Python-based tool designed for fingerprinting HTTP requests from malware, utilizing Tshark for analysis. It generates unique representations of requests, which facilitate the identification and classification of malware families, enabling efficient grouping and detection of malicious activities in real-time systems or during manual analysis. Key features include customizable fingerprint creation based on specific request attributes, making it an effective resource for enhancing malware situational awareness in security environments.

GptHidra

GptHidra is a Ghidra plugin that leverages OpenAI's Chat GPT to provide natural language explanations of functions within a codebase, facilitating better understanding of code behavior and purpose. Notable features include integration with GPT-4 for enhanced accuracy and insights, and an intuitive interface that allows users to retrieve function explanations directly from Ghidra. The tool requires Ghidra version 10.1.5 or higher and an OpenAI API key for functionality.

gdb-dashboard

GDB Dashboard is a modular interface enhancement for GDB, implemented as a standalone `.gdbinit` file using Python API, aimed at simplifying the debugging process. It reduces the number of commands needed to inspect program status by presenting relevant information in a streamlined dashboard format. Notable features include automatic display upon program stops and the capability for syntax highlighting via Pygments, while retaining the original GDB command functionalities through the main `dashboard` command.

EvilSlackbot

EvilSlackbot is a specialized framework designed for Red Team and phishing exercises within Slack workspaces, enabling security professionals to automate attacks such as sending spoofed messages, phishing links, and file attachments. It allows users to leverage exposed Slack API tokens to efficiently conduct various types of assessments, including searching for leaked secrets and simulating phishing scenarios. Notable features include customizable spoofing capabilities, an ability to analyze token permissions, and functionalities to send malicious attachments or messages to targeted users or channels.

crowbar

Crowbar, a brute forcing tool designed for penetration testing, uniquely enables the use of SSH keys for authentication instead of traditional username and password combinations, enhancing the effectiveness of attacks on various protocols. It supports OpenVPN, RDP with NLA, SSH private key authentication, and VNC key authentication, making it versatile for targeting different services. Notable features include the ability to scan target ports, utilize static or list-based passwords, and log successful attempts, all while supporting multi-threading for efficient operations.

cookbook

The Chainlit Cookbook repository provides a collection of demo projects that illustrate how to utilize Chainlit for developing chatbot user interfaces efficiently. It enables users to quickly set up and run various example applications, showcasing features for easy customization and integration of APIs. Notable aspects include detailed setup instructions and a focus on community contribution to expand the demo library.

ComfyUI

ComfyUI is a powerful and modular AI creation engine designed for visual professionals, offering a comprehensive node graph interface to generate and manage content including images, videos, 3D models, and audio. Key features include native support for cutting-edge open-source models, API access to closed-source models, a user-friendly App Mode for streamlined workflows, and compatibility across multiple operating systems. The tool is also available in cloud and local installation formats, allowing seamless integration into production pipelines.

chainlit

Chainlit is an open-source framework designed for developing interactive machine learning applications. Its primary use case is to simplify the integration of machine learning models with a web-based user interface, allowing for real-time interaction and feedback. Notable features include support for multi-turn conversations, customizable UI elements, and seamless integration with existing machine-learning workflows.

BinaryBeats

Binary Beats is a unique tool that converts malware binaries into musical compositions by mapping the bytes of the binary to musical notes. Its primary use case lies in the creative representation of malware data, allowing users to experience the structure of malware through sound. Notable features include the ability to read binary files, map byte values to a range of musical notes (C0 to B8), and play the resulting composition, effectively transforming cybersecurity data into art.

awesome-mojo

Awesome Mojo is a new programming language designed for developers and AI/ML scientists, merging Python's ease of use with the performance of C++ and Rust. It enhances Python compatibility while offering features for scalable systems programming, metaprogramming, and support for advanced hardware accelerators, thus facilitating efficient AI application development. The language also aims to unify machine learning and AI infrastructure, capitalizing on the existing Python ecosystem.

autogen

AutoGen is a multi-agent AI application framework designed to create autonomous agents that can collaborate with humans or operate independently. While currently in maintenance mode, it allows users to build a wide range of agent-based applications, offering features like support for OpenAI models, no-code GUI via AutoGen Studio, and an extensible architecture for integrating additional functionalities. Users are encouraged to transition to the newer Microsoft Agent Framework for ongoing support and enhancements.

Assembly-Algorithms

Assembly Algorithms is a GitHub repository that provides implementations of iconic computer science algorithms in pure assembly language, aimed at enhancing programmers' understanding of low-level programming. Its primary use case is educational, allowing users to explore the performance benefits and intricacies of assembly programming while offering features like fillable templates for custom implementations and accompanying video explanations for select algorithms. The repository encourages users to engage with assembly language through practical coding challenges, fostering both skill development and appreciation for computer architecture.

Article-Summarizer

Article-Summarizer is a text summarization tool that employs frequency analysis to identify and rank key sentences based on the relevance of their content. By extracting and presenting the highest scoring sentences in chronological order, it effectively condenses lengthy articles into succinct summaries, allowing users to quickly grasp the core information without reading the entire text. Notable features include support for various articles and a demonstration of summarization capabilities across diverse topics.

amazon-braket-examples

Amazon Braket Examples provides a collection of tutorials and code examples for building, testing, and running quantum circuits on simulators and various quantum hardware platforms. The repository includes introductory content for new users, advanced techniques for hybrid quantum algorithms, and seamless device interoperability, enabling developers to efficiently leverage quantum computing resources. Notable features are the ability to access multiple quantum providers, utilize Jupyter notebooks for remote execution, and integrate with other quantum computing tools such as CUDA-Q, PennyLane, and Qiskit.

workbench-example-hybrid-rag

The NVIDIA workbench-example-hybrid-rag is a chat application designed for Retrieval Augmented Generation (RAG) that integrates with NVIDIA APIs, NIM containers, and Hugging Face TGI on NVIDIA GPUs. Its primary use case is to facilitate the testing of RAG features with customizable document embedding and versatile inference options, including local, cloud, and microservice deployments. Notable features include support for various model quantization levels, local inference capabilities, and the ability to utilize a range of downloadable models and microservices seamlessly.

WALKOFF

WALKOFF is an automation framework designed to streamline repetitive tasks through the integration of various capabilities and devices. It features an intuitive drag-and-drop workflow editor, modular design for easy application development, cross-platform deployment on Windows and Linux, and visual analytics capabilities for custom dashboards. The tool is well-suited for users looking to enhance operational efficiency by automating workflows with a RESTful API for extensibility.

urh

The Universal Radio Hacker (URH) is a comprehensive tool designed for investigating wireless protocols, particularly those utilizing Software Defined Radios (SDRs). It features automated modulation detection, customizable decoding for complex encodings, and both manual and automatic protocol field assignment capabilities, making it ideal for reverse-engineering and analyzing wireless communications. Additionally, URH includes fuzzing components for stateless protocols and a simulation environment to facilitate stateful attacks.