Top #sec Tools & Software

cariddi

github

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

honggfuzz

github

Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)

OpenSK

github

OpenSK is an open-source implementation for security keys written in Rust that supports both FIDO U2F and FIDO2 standards.

timesketch

github

Collaborative forensic timeline analysis

NGCBot

github

一个基于✨HOOK机制的微信机器人，支持🌱安全新闻定时推送【FreeBuf，先知，安全客，奇安信攻防社区】，👯Kfc文案，⚡漏洞查询，⚡手机号归属地查询，⚡知识库查询，🎉星座查询，⚡天气查询，🌱摸鱼日历，⚡微步威胁情报查询， 🐛视频，⚡图片，👯帮助菜单。📫 支持积分功能，⚡支持自动拉人，，🌱自动群发，👯Ai回复（国内主流AI模型，扣子，FastGpt，Dify全面支持！），⚡视频号解析，😄自定义程度丰富，小白也可轻松上手！

botnets

github

This is a collection of #botnet source codes, unorganized. For EDUCATIONAL PURPOSES ONLY

SecretScanner

github

:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:

ssl-kill-switch2

github

Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and macOS applications.

metorial

github

Connect any AI model to 600+ integrations; powered by MCP 📡 🚀

express-rate-limit

github

Basic rate-limiting middleware for the Express web server

dockle

github

Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start

chipsec

github

Platform Security Assessment Framework

orbot-android

github

The Github home of Orbot: Tor on Android (Also available on gitlab!)

blokada

github

The official repo for Blokada apps.

pycryptodome

github

A self-contained cryptographic library for Python

LogonTracer

github

Investigate malicious Windows logon by visualizing and analyzing Windows event log

tcpdump

github

the TCPdump network dissector

shynet

github

Modern, privacy-friendly, and detailed web analytics that works without cookies or JS.

nanos

github

A kernel designed to run one and only one application in a virtualized environment

echidna

github

Ethereum smart contract fuzzer

sso

github

sso, aka S.S.Octopus, aka octoboi, is a single sign-on solution for securing internal services

itsdangerous

github

Safely pass trusted data to untrusted environments and back.

coreruleset

github

OWASP CRS (Official Repository)

hardentools

github

Hardentools simply reduces the attack surface on Microsoft Windows computers by disabling low-hanging fruit risky features.