Security & Privacy Repositories

the-book-of-secret-knowledge

by trimstray

Total Stargazers:243361

Total Subscribers:2852

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

Microsoft-Activation-Scripts

by massgravel

Total Stargazers:190320

Total Subscribers:1529

Open-source Windows and Office activator featuring HWID, Ohook, TSforge, and Online KMS activation methods, along with advanced troubleshooting.

sherlock

by sherlock-project

Total Stargazers:91376

Total Subscribers:1420

Hunt down social media accounts by username across social networks

worldmonitor

by koala73

Total Stargazers:86127

Total Subscribers:490

Real-time global intelligence dashboard. AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational awareness interface

PayloadsAllTheThings

by swisskyrepo

Total Stargazers:80829

Total Subscribers:1982

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

hackingtool

by Z4nzu

Total Stargazers:79428

Total Subscribers:1481

ALL IN ONE Hacking Tool For Hackers

ghidra

by NationalSecurityAgency

Total Stargazers:74866

Total Subscribers:1137

Ghidra is a software reverse engineering (SRE) framework

SecLists

by danielmiessler

Total Stargazers:73468

Total Subscribers:2006

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

uBlock

by gorhill

Total Stargazers:67787

Total Subscribers:1046

uBlock Origin - An efficient blocker for Chromium and Firefox. Fast and lean.

vaultwarden

by dani-garcia

Total Stargazers:67209

Total Subscribers:316

Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs

strix

by usestrix

Total Stargazers:62057

Total Subscribers:277

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

pi-hole

by pi-hole

Total Stargazers:60867

Total Subscribers:715

A black hole for Internet advertisements

mkcert

by FiloSottile

Total Stargazers:59583

Total Subscribers:509

A simple zero-config tool to make locally trusted development certificates with any names you'd like.

ImHex

by WerWolv

Total Stargazers:54785

Total Subscribers:519

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

fanqiang

by bannedbook

Total Stargazers:53388

Total Subscribers:1259

翻墙-科学上网

jadx

by skylot

Total Stargazers:50440

Total Subscribers:874

Dex to Java decompiler

CL4R1T4S

by elder-plinius

Total Stargazers:49634

Total Subscribers:784

LEAKED SYSTEM PROMPTS FOR CHATGPT, CLAUDE, GEMINI, GROK, PERPLEXITY, CURSOR, LOVABLE, REPLIT, AND MORE! - AI SYSTEMS TRANSPARENCY FOR ALL! 👐

x64dbg

by x64dbg

Total Stargazers:49494

Total Subscribers:2665

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

shannon

by KeygraphHQ

Total Stargazers:47940

Total Subscribers:233

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

acme.sh

by acmesh-official

Total Stargazers:47629

Total Subscribers:480

A pure Unix shell script ACME client for SSL / TLS certificate automation

mitmproxy

by mitmproxy

Total Stargazers:45023

Total Subscribers:630

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

HEU_KMS_Activator

by zbezj

Total Stargazers:43497

Total Subscribers:447

______________

sniffnet

by GyulyVGC

Total Stargazers:41091

Total Subscribers:200

Comfortably monitor your network traffic 🕵️‍♂️

metasploit-framework

by rapid7

Total Stargazers:38993

Total Subscribers:2076

Metasploit Framework

RevokeMsgPatcher

by huiyadanli

Total Stargazers:38750

Total Subscribers:282

:trollface: A hex editor for WeChat/QQ/TIM - PC版微信/QQ/TIM防撤回补丁（我已经看到了，撤回也没用了）

sqlmap

by sqlmapproject

Total Stargazers:38425

Total Subscribers:1109

Automatic SQL injection and database takeover tool

trivy

by aquasecurity

Total Stargazers:37882

Total Subscribers:224

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

maigret

by soxoj

Total Stargazers:37474

Total Subscribers:175

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

AdGuardHome

by AdguardTeam

Total Stargazers:36850

Total Subscribers:328

Network-wide ads & trackers blocking DNS server

searxng

by searxng

Total Stargazers:36809

Total Subscribers:176

SearXNG is a free internet metasearch engine which aggregates results from various search services and databases. Users are neither tracked nor profiled.

keycloak

by keycloak

Total Stargazers:36737

Total Subscribers:404

Open Source Identity and Access Management For Modern Applications and Services

tailscale

by tailscale

Total Stargazers:36386

Total Subscribers:241

The easiest, most secure way to use WireGuard and 2FA.

vault

by hashicorp

Total Stargazers:36233

Total Subscribers:782

A tool for secrets management, encryption as a service, and privileged access management

bitchat

by permissionlesstech

Total Stargazers:36200

Total Subscribers:306

bluetooth mesh chat, IRC vibes

CyberChef

by gchq

Total Stargazers:35815

Total Subscribers:394

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

reverse-skill

by zhaoxuya520

Total Stargazers:35682

Total Subscribers:113

Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code, Kiro, Cursor, Cline, and other AI coding clients 逆向/渗透/安全技能路由包 - AI 自动路由 + 按需自举工具链 + 自动进化经验库 | 支持 Claude Code / Kiro / Cursor / Cline 等代码 AI 客户端

web-check

by lissy93

Total Stargazers:34766

Total Subscribers:180

🕵️‍♂️ All-in-one OSINT tool for analysing any website

anoma

by anoma

Total Stargazers:33616

Total Subscribers:197

Reference implementation of Anoma

Anthropic-Cybersecurity-Skills

by mukul975

Total Stargazers:32668

Total Subscribers:259

817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0

nuclei

by projectdiscovery

Total Stargazers:31126

Total Subscribers:287

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

hosts

by StevenBlack

Total Stargazers:31044

Total Subscribers:570

🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.

openssl

by openssl

Total Stargazers:30772

Total Subscribers:1017

General purpose TLS and crypto library

Shadowrocket-ADBlock-Rules-Forever

by Johnshall

Total Stargazers:30103

Total Subscribers:146

提供多款 Shadowrocket 规则，拥有强劲的广告过滤功能。每日 8 时重新构建规则。

better-auth

by better-auth

Total Stargazers:29913

Total Subscribers:50

The most comprehensive authentication framework

librepods

by librepods-org

Total Stargazers:29844

Total Subscribers:105

AirPods liberated from Apple's ecosystem.

h4cker

by The-Art-of-Hacking

Total Stargazers:29381

Total Subscribers:1083

This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.org

awesome-osint

by jivoi

Total Stargazers:29376

Total Subscribers:748

:scream: A curated list of amazingly awesome OSINT

Signal-Android

by signalapp

Total Stargazers:29319

Total Subscribers:878

A private messenger for Android.

gitleaks

by gitleaks

Total Stargazers:29265

Total Subscribers:182

Find secrets with Gitleaks 🔑

infisical

by Infisical

Total Stargazers:29229

Total Subscribers:76

Infisical is the open-source platform for secrets, certificates, and privileged access management.

netbird

by netbirdio

Total Stargazers:29148

Total Subscribers:136

Connect your devices into a secure WireGuard®-based overlay network with SSO, MFA and granular access controls.

gods-eye-view

by bilawalsidhu

Total Stargazers:29107

Total Subscribers:592

A spy satellite simulator in your browser, except the data is real. Live open source spatial intelligence on a photorealistic 3D globe.

authelia

by authelia

Total Stargazers:28934

Total Subscribers:169

The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.

ente

by ente

Total Stargazers:28830

Total Subscribers:83

💚 End-to-end encrypted cloud for everything.

keepassxc

by keepassxreboot

Total Stargazers:28784

Total Subscribers:280

KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.

fingerprintjs

by fingerprintjs

Total Stargazers:28444

Total Subscribers:426

The most advanced free and open-source browser fingerprinting library

next-auth

by nextauthjs

Total Stargazers:28366

Total Subscribers:117

Authentication for the Web.

trufflehog

by trufflesecurity

Total Stargazers:27837

Total Subscribers:212

Find, verify, and analyze leaked credentials

ungoogled-chromium

by ungoogled-software

Total Stargazers:27683

Total Subscribers:312

Google Chromium, sans integration with Google

awesome-pentest

by enaqx

Total Stargazers:27181

Total Subscribers:1170

Security & Privacy

Offensive and defensive security, identity and privacy.