Skip to content

brimstone/stars

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

1,134 Commits
 
 
 
 

Repository files navigation

awesome stars

A list of awesome repositories I've starred. Want your own? Try: stargazer
Total starred repositories: 2822

Contents

Arduino

  • kanflo/aaduino - An AA sized ISM radio Arduino clone [MIT License] (⭐️810)

Assembly

  • bojieli/CompilerBackdoor - Course project to insert a backdoor into an open source compiler (Ken Thompson’s Reflections on Trusting Trust) (⭐️103)
  • Cybereason/siofra - [GNU GPLv3] (⭐️509)
  • ebitengine/purego - A library for calling C functions from Go without Cgo [Apache License 2.0] (⭐️3487)
  • endofunky/heart - A 1014 Byte ELF64/DOS.COM/GameBoy/Megadrive/PDF/ARJ/PKZIP/7zip Polyglot Binary (⭐️13)
  • fcambus/spleen - Monospaced bitmap fonts [BSD 2-Clause "Simplified" License] (⭐️1251)
  • hackerschoice/memexec - Circumventing "noexec" mount flag to execute arbitrary linux binaries by ptrace-less process injection (⭐️143)
  • linuxthor/uul - ELF binary that runs on several different *nix flavours. Works out which variant it's being run on and runs code specific to that. (⭐️39)
  • nemasu/asmttpd - Web server for Linux written in amd64 assembly. [GNU GPLv2] (⭐️3104)
  • netspooky/golfclub - Binary Golf Examples and Resources (⭐️261)
  • pablojimenezmateo/curriculum-bootloader - Here I share the code of my CV, which is also a bootable bootloader :) (⭐️524)
  • sigmonsays/smallest-docker-httpd - smallest docker httpd server I know... (⭐️46)

Astro

Awk

  • djanderson/aho - A git implementation in awk [MIT License] (⭐️819)

Batchfile

  • bmrf/tron - Tron [MIT License] (⭐️6332)
  • bravomail/tinier11 - This is a script to automate the build of a streamlined Windows 10/11 image, similar to tiny11. [Apache License 2.0] (⭐️95)
  • massgravel/Microsoft-Activation-Scripts - Open-source Windows and Office activator featuring HWID, Ohook, TSforge, and Online KMS activation methods, along with advanced troubleshooting. [GNU GPLv3] (⭐️170996)

BlitzBasic

  • 1N3/IntruderPayloads - A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists. (⭐️3913)

Boo

  • byt3bl33d3r/SILENTTRINITY - An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR [GNU GPLv3] (⭐️2335)

Brainfuck

C

  • 0xN3utr0n/Noteme - ELF packer/crypter that aims to create hardened and stealthy troyans [GNU GPLv3] (⭐️58)
  • 0xNinjaCyclone/hellMaker - Generate FUD backdoors [MIT License] (⭐️263)
  • a2o/snoopy - Snoopy Command Logger is a small library that logs all program executions on your Linux/BSD system. [GNU GPLv2] (⭐️1284)
  • Adamkadaban/CTFs - CTF Cheat Sheet + Writeups / Files for some of the Security CTFs that I've done (⭐️814)
  • AdamLaurie/ChronIC - A wearable Sub-GHz RF hacking tool (⭐️123)
  • adde88/hostapd-mana-openwrt - hostapd-mana - build-files, and installation-files for OpenWRT (⭐️33)
  • adur1990/HomeAtmo - Simple ESP32 based BMP680 indoor air quality sensor. [GNU GPLv3] (⭐️13)
  • aergoio/litetree - SQLite with Branches [MIT License] (⭐️1633)
  • ahkok/bootchart - An efficient and feature-rich system boot graphing tool implementation in pure C. [GNU GPLv2] (⭐️33)
  • Airblader/i3 - A fork of the i3 window manager with gaps and some other features. ⚠️ i3-gaps has been merged into i3. [Modified BSD License] (⭐️5820) Archived!
  • ajkhoury/UEFI-Bootkit - A small bootkit which does not rely on x64 assembly. [GNU GPLv3] (⭐️519)
  • ajpc500/BOFs - Collection of Beacon Object Files (⭐️636)
  • amarullz/AROMA-Installer - The World First ANDROID Touch and Customizable ROM Installer (⭐️337)
  • andmarti1424/sc-im - sc-im - Spreadsheet Calculator Improvised -- An ncurses spreadsheet program for terminal (⭐️5554)
  • anthemtotheego/InlineExecute-Assembly - InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assembly execution as an alternative to Cobalt Strikes traditional fork and run execute-assembly module (⭐️744)
  • antonioCoco/RoguePotato - Another Windows Local Privilege Escalation from Service Account to System [GNU GPLv3] (⭐️1166)
  • Aorimn/dislocker - FUSE driver to read/write Windows' BitLocker-ed volumes under Linux / Mac OSX [GNU GPLv2] (⭐️1884)
  • ardagnir/athame - Full vim for your shell (bash, zsh, gdb, python, etc) [GNU GPLv3] (⭐️1653)
  • arsv/minibase - small static userspace tools for Linux [GNU GPLv3] (⭐️186)
  • Ascotbe/Kernelhub - 🌴Linux、macOS、Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集) [GNU AGPLv3] (⭐️3191)
  • baskerville/bspwm - A tiling window manager based on binary space partitioning [BSD 2-Clause "Simplified" License] (⭐️8223)
  • bats3c/DarkLoadLibrary - LoadLibrary for offensive operations (⭐️1178)
  • bats3c/shad0w - A post exploitation framework designed to operate covertly on heavily monitored environments [MIT License] (⭐️2170)
  • bbbbbr/gameboy_bsod - A little joke Blue Screen of Death simulator (BSOD) for the Game Boy [GNU GPLv3] (⭐️14)
  • bdamele/shellcodeexec - Script to execute in memory a sequence of opcodes (⭐️415)
  • beatgammit/simple-pam - Basic PAM module and test application [MIT License] (⭐️193)
  • bittorrent/sqltorrent - [Apache License 2.0] (⭐️288)
  • blendin/3snake - Tool for extracting information from newly spawned processes (⭐️777)
  • Bodmer/TFT_eSPI - Arduino and PlatformIO IDE compatible TFT library optimised for the Raspberry Pi Pico (RP2040), STM32, ESP8266 and ESP32 that supports different driver chips (⭐️4676)
  • boku7/spawn - Cobalt Strike BOF that spawns a sacrificial process, injects it with shellcode, and executes payload. Built to evade EDR/UserLand hooks by spawning sacrificial process with Arbitrary Code Guard (ACG), BlockDll, and PPID spoofing. [MIT License] (⭐️469)
  • brannondorsey/naive-hashcat - Crack password hashes without the fuss 🐈 [MIT License] (⭐️1390)
  • bulwarkid/virtual-fido - A Virtual FIDO2 USB Device [MIT License] (⭐️1364)
  • bvinc/go-sqlite-lite - SQLite driver for the Go programming language [Modified BSD License] (⭐️329)
  • bztsrc/raspi3-tutorial - Bare metal Raspberry Pi 3 tutorials [MIT License] (⭐️3011)
  • camel-cdr/execfs - Proof of concept userspace filesystem that executes filenames as shell commands and makes the result accessible though reading the file. [MIT License] (⭐️70)
  • canonical/dqlite - Embeddable, replicated and fault-tolerant SQL engine. (⭐️4294)
  • cathugger/mkp224o - vanity address generator for tor onion v3 (ed25519) hidden services [Creative Commons Zero v1.0 Universal] (⭐️1570)
  • cdown/clipnotify - Notify on new X clipboard events (⭐️251)
  • cesanta/mjs - Embedded JavaScript engine for C/C++ (⭐️2030)
  • cesanta/v7 - Embedded JavaScript engine for C/C++ (⭐️1450)
  • checkpoint-restore/criu - Checkpoint/Restore tool (⭐️3768)
  • chenall/grub4dos - 外部命令和工具源码:https://github.com/chenall/grubutils 下载: [GNU GPLv2] (⭐️722)
  • ciniml/WireGuard-ESP32-Arduino - WireGuard implementation for ESP32 Arduino (⭐️946)
  • cnlohr/espusb - Software-only ESP8266 USB Device (⭐️1534)
  • CodeXTF2/ScreenshotBOF - An alternative screenshot capability for Cobalt Strike that uses WinAPI and does not perform a fork & run. Screenshot downloaded in memory. [MIT License] (⭐️494)
  • CodeXTF2/WindowSpy - WindowSpy is a Cobalt Strike Beacon Object File meant for automated and targeted user surveillance. [MIT License] (⭐️282)
  • Configi/configi.old - Bloat-free configuration management (⭐️35)
  • conorpp/u2f-zero - U2F USB token optimized for physical security, affordability, and style (⭐️2450)
  • containers/bubblewrap - Low-level unprivileged sandboxing tool used by Flatpak and similar projects (⭐️6576)
  • Cr4sh/s6_pcie_microblaze - PCI Express DIY hacking toolkit for Xilinx SP605. This repository is also home of Hyper-V Backdoor and Boot Backdoor, check readme for links and info (⭐️864)
  • Cracked5pider/CoffeeLdr - Beacon Object File Loader (⭐️293) Archived!
  • crawshaw/sqlite - Go SQLite3 driver [ISC License] (⭐️607)
  • cube0x0/BofRoast - Beacon Object Files for roasting Active Directory (⭐️237)
  • cube0x0/SharpSystemTriggers - Collection of remote authentication triggers in C# (⭐️526)
  • CylanceVulnResearch/ReflectiveDLLRefresher - Universal Unhooking (⭐️326)
  • CylanceVulnResearch/upx - UPX - the Ultimate Packer for eXecutables (⭐️14)
  • dakhnod/FakeTag - firmware for nRF51 chips that is coincidentally compatible with the FindMy (AirTag) ecosystem (⭐️464)
  • danni/docker-nss - libnss plugin for Docker (⭐️25)
  • DarkFlippers/unleashed-firmware - Flipper Zero Unleashed Firmware [GNU GPLv3] (⭐️21334)
  • darkk/redsocks - transparent TCP-to-proxy redirector (⭐️3597)
  • DaveBben/esp32-llm - Running a LLM on the ESP32 (⭐️514)
  • DavidBuchanan314/monomorph - MD5-Monomorphic Shellcode Packer - all payloads have the same MD5 hash [MIT License] (⭐️797)
  • devttys0/littleblackbox - Database of private SSL/SSH keys for embedded devices (⭐️269)
  • dismantl/ImprovedReflectiveDLLInjection - An improvement of the original reflective DLL injection technique by Stephen Fewer of Harmony Security [Modified BSD License] (⭐️341) Archived!
  • dsnezhkov/zombieant - Zombie Ant Farm: Primitives and Offensive Tooling for Linux EDR evasion. [MIT License] (⭐️228)
  • dspinellis/ai-cli-lib - Add AI capabilities to any readline-enabled command-line program [Apache License 2.0] (⭐️208)
  • eafer/rdrview - Firefox Reader View as a command line tool [Apache License 2.0] (⭐️923)
  • earthquake/chw00t - chw00t - Unices chroot breaking tool (⭐️617)
  • elfmaster/dt_infect - ELF Shared library injector using DT_NEEDED precedence infection. Acts as a permanent LD_PRELOAD (⭐️111)
  • elfmaster/saruman - ELF anti-forensics exec, for injecting full dynamic executables into process image (With thread injection) (⭐️139)
  • elfmaster/skeksi_virus - Devestating and awesome Linux X86_64 ELF Virus (⭐️238)
  • emikulic/darkhttpd - When you need a web server in a hurry. [ISC License] (⭐️1240)
  • emptymonkey/revsh - A reverse shell with terminal support, data tunneling, and advanced pivoting capabilities. [MIT License] (⭐️470)
  • erikdubbelboer/gspt - setproctitle() for Go [MIT License] (⭐️113)
  • Eterna1/puszek-rootkit - linux rootkit (⭐️162)
  • evanphx/remoteenv - A POC for patching getenv to fetch values from Consul (⭐️11)
  • evansm7/pico-mac - Run the popular umac emulator right on your Pi Pico! (⭐️749)
  • evilashz/CheeseOunce - Coerce Windows machines auth via MS-EVEN (⭐️174)
  • F5OEO/rpitx - RF transmitter for Raspberry Pi [GNU GPLv3] (⭐️4467)
  • FireyFly/hexd - 🔍 Colourful, human-friendly hexdump tool [MIT License] (⭐️191)
  • fortra/nanodump - The swiss army knife of LSASS dumping [MIT License] (⭐️2086)
  • fortra/No-Consolation - A BOF that runs unmanaged PEs inline [MIT License] (⭐️690)
  • frkngksl/Celeborn - Userland API Unhooker Project [MIT License] (⭐️111)
  • fwsGonzo/barebones - Barebones multiboot kernel for beginners (⭐️155)
  • Gadgetoid/HyperPixel4TouchScreen - Example code for 5 point multitouch on the HyperPixel4 touch screen. (⭐️12)
  • gaffe23/linux-inject - Tool for injecting a shared object into a Linux process (⭐️1223)
  • Galleondragon/qb64 - Automatically exported from code.google.com/p/qb64 (⭐️273)
  • GeertJohan/openwrt-go - Fork of the openwrt project to add gccgo and libgo [GNU GPLv2] (⭐️241)
  • Genymobile/scrcpy - Display and control your Android device [Apache License 2.0] (⭐️138088)
  • glouw/paperview - A high performance X11 animated wallpaper setter [MIT License] (⭐️1485)
  • golang-ui/nuklear - This project provides Go bindings for nuklear.h — a small ANSI C GUI library. [MIT License] (⭐️1604)
  • GrapheneOS-Archive/linux-hardened - Minimal supplement to upstream Kernel Self Protection Project changes. Features already provided by SELinux + Yama and archs other than multiarch arm64 / x86_64 aren't in scope. Only tags have stable history. Currently maintained at https://github.com/anthraxx/linux-hardened. (⭐️442) Archived!
  • gtworek/PSBits - Simple (relatively) things allowing you to dig a bit deeper than usual. [The Unlicense] (⭐️3495)
  • guervild/BOFs - Cobalt Strike Beacon Object Files (⭐️167)
  • h2337/modreveal - Utility to find hidden Linux kernel modules [GNU GPLv3] (⭐️147)
  • haampie/libtree - ldd as a tree [MIT License] (⭐️2765)
  • hackerschoice/zapper - Zaps arguments and environment from the process list (⭐️249)
  • hardkernel/linux - Linux kernel source tree (⭐️439)
  • hashstation/hashstation - (⭐️10)
  • HavocFramework/Modules - Modules used by the Havoc Framework (⭐️266) Archived!
  • HavocFramework/Talon - (Demo) 3rd party agent for Havoc (⭐️146) Archived!
  • hfiref0x/UACME - Defeating Windows User Account Control [BSD 2-Clause "Simplified" License] (⭐️7474)
  • hoangprod/DanSpecial - Weaponizing Gigabyte driver for priv escalation and bypass PPL (⭐️71)
  • homeworkc/lazycast - A Simple Wireless Display Receiver [GNU GPLv3] (⭐️813)
  • htotoo/ESP32-Portapack - An addon module for portapack to add extra features to it for more fun. (⭐️220)
  • huntergregal/mimipenguin - A tool to dump the login password from the current linux user (⭐️4090)
  • huuck/FlipperZeroUSBKeyboard - Turn your Flipper Zero into an USB keyboard [BSD 2-Clause "Simplified" License] (⭐️172)
  • i-rinat/freshplayerplugin - ppapi2npapi compatibility layer [MIT License] (⭐️727)
  • iagox86/hash_extender - [Modified BSD License] (⭐️1193)
  • ice799/injectso64 - Stealth's 64bit injectso port (⭐️74)
  • iDigitalFlame/PvJ-CTF-RedTools - Red Team Tools used for Pros Versus Joes CTF Games. Here for Blue Teams to understand the pwnage. [GNU AGPLv3] (⭐️29)
  • iilegacyyii/ThreadlessInject-BOF - BOF implementation of @EthicalChaos's ThreadlessInject project. A novel process injection technique with no thread creation, released at BSides Cymru 2023. [MIT License] (⭐️395)
  • im-tomu/chopstx - U2F firmware for Tomu board (+ chopstx port) [GNU GPLv3] (⭐️68)
  • im-tomu/qemu - Qemu for the EFM32HG (for Tomu development) (⭐️13)
  • im-tomu/tomu-samples - Code samples for the Tomu board [GNU GPLv3] (⭐️81)
  • ImVexed/muon - GPU based Electron on a diet [MIT License] (⭐️2939)
  • inAudible-NG/tables - Plugin for RainbowCrack (http://project-rainbowcrack.com/) (⭐️450)
  • infosecguerrilla/ReflectiveSOInjection - Reflective SO injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process. (⭐️118)
  • instantiator/flipper-zero-tutorial-app - Code supporting a tutorial series on developing apps for the Flipper Zero [MIT License] (⭐️50)
  • isdrupter/busybotnet - Security For Embedeed Systems - One Bin to Rule Them All. (⭐️159)
  • ixty/mandibule - linux elf injector for x86 x86_64 arm arm64 (⭐️347)
  • ixty/xarch_shellcode - Cross Architecture Shellcode in C (⭐️209)
  • janmojzis/tinyssh - TinySSH is small server (less than 100000 words of code) (⭐️1503)
  • jart/blink - tiniest x86-64-linux emulator [ISC License] (⭐️7473)
  • jart/cosmopolitan - build-once run-anywhere c library [ISC License] (⭐️20722)
  • jarun/nnn - n³ The unorthodox terminal file manager [BSD 2-Clause "Simplified" License] (⭐️21452)
  • jarun/spy - 👀 Linux kernel mode debugfs keylogger [GNU GPLv2] (⭐️677)
  • jcchurch/chrep - Church's grep. It's a simple regular expression engine written in C. (⭐️1)
  • jerryscript-project/jerryscript - Ultra-lightweight JavaScript engine for the Internet of Things. [Apache License 2.0] (⭐️7387)
  • JonDoNym/peinjector - peinjector - MITM PE file infector [The Unlicense] (⭐️612)
  • jtesta/ssh-mitm - SSH man-in-the-middle tool (⭐️1735)
  • jtsiomb/xlivebg - Live wallpapers for the X window system [GNU GPLv3] (⭐️96)
  • Kelsidavis/System7 - An open-source reimplementation of Apple Macintosh System 7 for modern x86 hardware, bootable via GRUB2/Multiboot2 [MIT License] (⭐️277)
  • KingOfTheNOPs/ChangeWallpaper-BOF - Cobalt Strike Beacon Object File to to change the user's desktop wallpaper [GNU GPLv3] (⭐️17)
  • KingOfTheNOPs/cookie-monster - BOF to steal browser cookies & credentials [GNU GPLv3] (⭐️513)
  • KingOfTheNOPs/EnableWebDAVClient-BOF - Cobalt Strike Beacon Object File to enable the webdav client service on x64 windows hosts [GNU GPLv3] (⭐️22)
  • kokke/tiny-AES-c - Small portable AES128/192/256 in C [The Unlicense] (⭐️4909)
  • kscottz/MrRobotStarterPack - Mr. Robot Badge Firmware Starter Pack. [GNU GPLv3] (⭐️31)
  • kubo/injector - Library for injecting a shared library into a Linux or Windows process [GNU GPLv2] (⭐️614) Archived!
  • kyleavery/inject-assembly - Inject .NET assemblies into an existing process [GNU GPLv3] (⭐️508)
  • ldpreload/BlackLotus - BlackLotus UEFI Windows Bootkit (⭐️2200)
  • leahneukirchen/nq - Unix command line queue utility (⭐️3110)
  • litui/dtmf_dolphin - Dialer, Redbox, and Bluebox project for the Flipper Zero. [GNU GPLv3] (⭐️210)
  • lmatteis/torrent-net - Distributed search engines using BitTorrent and SQLite [Apache License 2.0] (⭐️1030)
  • m0nad/Diamorphine - LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64) (⭐️2285)
  • machyve/xhyve - xhyve, a lightweight OS X virtualization solution (⭐️6444)
  • mackstann/tinywm - The tiniest window manager. (⭐️1640)
  • magisterquis/pcapknock - Watches for trigger packets, runs commands or spawns a shell [zlib License] (⭐️26) Archived!
  • maharmstone/btrfs - WinBtrfs - an open-source btrfs driver for Windows [GNU LGPLv3] (⭐️7330)
  • maK-/maK_it-Linux-Rootkit - This is a linux rootkit using many of the techniques described on [GNU GPLv2] (⭐️167) Archived!
  • makerslocal/pn21-badge - Circuit Playground Express-based badge for PhreakNIC 21 (⭐️2)
  • martin-ger/esp_slip_router - A SLIP to WiFi router [MIT License] (⭐️311)
  • martin-ger/esp_wifi_repeater - A full functional WiFi Repeater (correctly: a WiFi NAT Router) [MIT License] (⭐️5153)
  • matz/streem - prototype of stream based programming language [MIT License] (⭐️4599)
  • mempodippy/vlany - Linux LD_PRELOAD rootkit (x86 and x86_64 architectures) [GNU GPLv3] (⭐️976)
  • merbanan/rtl_433 - Program to decode radio transmissions from devices on the ISM bands (and other frequencies) [GNU GPLv2] (⭐️7356)
  • minipli/linux-unofficial_grsec - Unofficial forward ports of the last publicly available grsecurity patch (⭐️152)
  • mjolnirapp/mjolnir - Lightweight automation and productivity app for OS X (⭐️5210)
  • mlcsec/EDRenum-BOF - Identify common EDR processes, directories, and services. Simple BOF of Invoke-EDRChecker. (⭐️133)
  • morrownr/8821au-20210708 - Linux Driver for USB WiFi Adapters that are based on the RTL8811AU and RTL8821AU Chipsets - v5.12.5.2 (⭐️1100)
  • Mr-Bossman/pi-pico2-linux - RISC-V linux on the raspberry pi pico 2 (⭐️355)
  • Mr-Un1k0d3r/EDRs - (⭐️2176)
  • Mr-Un1k0d3r/RedTeamCCode - Red Team C code repo (⭐️569)
  • mrexodia/AppInitHook - Global user-mode hooking framework, based on AppInit_DLLs. The goal is to allow you to rapidly develop hooks to inject in an arbitrary process. [GNU GPLv3] (⭐️182)
  • msantos/libproxyproto - Proxy protocol v1 and v2 support via an LD_PRELOAD library [ISC License] (⭐️36)
  • mubix/post-exploitation - Post Exploitation Collection (⭐️1573)
  • mvp/uhubctl - uhubctl - USB hub per-port power control (⭐️2588)
  • mwh/dragon - Drag and drop source/target for X [GNU GPLv3] (⭐️1520)
  • n4sm/AD_1DA - Another linux ELF packer to evade hash detection. (⭐️35)
  • nalajcie/tuya-sign-hacking - Tools for reverse-engineering and description of new TUYA API sign algorithm (⭐️133)
  • nalgeon/sqlean - The ultimate set of SQLite extensions [MIT License] (⭐️4302)
  • nesfit/fitcrack - A hashcat-based distributed password cracking system (⭐️171)
  • netblue30/firejail - Linux namespaces and seccomp-bpf sandbox [GNU GPLv2] (⭐️7261)
  • netero1010/GhostTask - A tool employs direct registry manipulation to create scheduled tasks without triggering the usual event logs. [MIT License] (⭐️622)
  • neurobin/shc - Shell script compiler [GNU GPLv3] (⭐️2228)
  • NixOS/patchelf - A small utility to modify the dynamic linker and RPATH of ELF executables [GNU GPLv3] (⭐️4176)
  • njahrckstr/Windows_Kernel_Sploit_List - [MIT License] (⭐️36)
  • nonamecoder/FlipperZeroHondaFirmware - Custom Firmware for the Flipper Zero, to add support for Honda key fobs (FCC ID: KR5V2X) [MIT License] (⭐️785)
  • nongiach/sudo_inject - [Linux] Two Privilege Escalation techniques abusing sudo token (⭐️732)
  • Notselwyn/CVE-2024-1086 - Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images. [MIT License] (⭐️2441)
  • NuxiNL/cloudlibc - CloudABI's standard C library [BSD 2-Clause "Simplified" License] (⭐️301)
  • Octoberfest7/Inline-Execute-PE - Execute unmanaged Windows executables in CobaltStrike Beacons [Apache License 2.0] (⭐️717)
  • Octoberfest7/MemFiles - A CobaltStrike toolkit to write files produced by Beacon to memory instead of disk (⭐️474)
  • ofasgard/execute-assembly-pico - A PICO for Crystal Palace that implements CLR hosting to execute a .NET assembly in memory. [GNU GPLv2] (⭐️129)
  • outflanknl/C2-Tool-Collection - A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques. (⭐️1376)
  • outflanknl/nix_bof_template - Beacon Object File (BOF) Template [Apache License 2.0] (⭐️84)
  • OWASP/IoTGoat - IoTGoat is a deliberately insecure firmware created to educate software developers and security professionals with testing commonly found vulnerabilities in IoT devices. [MIT License] (⭐️881)
  • p2r3/bareiron - Minimalist Minecraft server for memory-restrictive embedded systems [GNU GPLv3] (⭐️4179)
  • Paul-Tew/lifer - Windows link file (shortcuts) examiner [GNU GPLv3] (⭐️68)
  • philipl/pifs - πfs - the data-free filesystem! [GNU GPLv3] (⭐️6890)
  • phra/PEzor - Open-Source Shellcode & PE Packer [GNU GPLv3] (⭐️2085)
  • pmq20/ruby-packer - Packing your Ruby application into a single executable. [MIT License] (⭐️1588)
  • portapack-mayhem/mayhem-firmware - The firmware for the HackRF+PortaPack H1/H2/H4/H4M [GNU GPLv3] (⭐️5013)
  • pr3y/bruce_old - M5 Cardputer firmware for offensive pranks (⭐️171) Archived!
  • prefiks/u2f4moz - U2F support extension for Firefox [GNU LGPLv2.1] (⭐️197)
  • PromyLOPh/pianobar - Console-based pandora.com player (⭐️1761)
  • proot-me/proot - chroot, mount --bind, and binfmt_misc without privilege/setup for Linux [GNU GPLv2] (⭐️2490)
  • q3k/cve-2019-5736-poc - Unweaponized Proof of Concept for CVE-2019-5736 (Docker escape) (⭐️208)
  • qmk/qmk_firmware - Open-source keyboard firmware for Atmel AVR and Arm USB families [GNU GPLv2] (⭐️20264)
  • quarkslab/dreamboot - UEFI bootkit (⭐️249)
  • quiet/org.quietmodem.Quiet - Quiet for Android - TCP over sound (⭐️1433)
  • r-a-w/TorProxy - TorProxy is a tool which uses netfilter hooks in the linux kernel to route all network traffic through the Tor network [GNU GPLv3] (⭐️166)
  • rackerlabs/boot.rackspace.com - This repo is no longer maintained, see: [Apache License 2.0] (⭐️99) Archived!
  • RalfHacker/Kerbeus-BOF - BOF for Kerberos abuse (an implementation of some important features of the Rubeus). (⭐️558)
  • redcanaryco/atomic-red-team - Small and highly portable detection tests based on MITRE's ATT&CK. [MIT License] (⭐️11773)
  • REDMED-X/OperatorsKit - Collection of Beacon Object Files (BOF) for Cobalt Strike [MIT License] (⭐️685)
  • RedSection/OffensivePH - OffensivePH - use old Process Hacker driver to bypass several user-mode access controls [GNU GPLv3] (⭐️333)
  • risinek/esp32-wifi-penetration-tool - Exploring possibilities of ESP32 platform to attack on nearby Wi-Fi networks. [MIT License] (⭐️2849)
  • RocketGod-git/HackRF-Treasure-Chest - HackRF software and captures by everyone and for everyone. Argh matey. [The Unlicense] (⭐️697)
  • RogueMaster/awesome-flipperzero-withModules - A collection of awesome resources & modules for the Flipper Zero device. Best used with Rogue Master Flipper Zero Custom Firmware. [Creative Commons Zero v1.0 Universal] (⭐️1923)
  • RogueMaster/flipperzero-firmware-wPlugins - RogueMaster Flipper Zero Firmware [GNU GPLv3] (⭐️6170)
  • rokups/virtual-reality - Stealthy backdoor for Windows operating systems [MIT License] (⭐️285)
  • rookuu/BOFs - Collection of beacon object files for use with Cobalt Strike to facilitate 🐚. (⭐️186)
  • rswier/c4 - C in four functions [GNU GPLv2] (⭐️10599)
  • rtecCyberSec/Packer_Development - Slides & Code snippets for a workshop held @ x33fcon 2024 [Modified BSD License] (⭐️281)
  • s-matyukevich/raspberry-pi-os - Learning operating system development using Linux kernel and Raspberry Pi [MIT License] (⭐️13789)
  • s0lst1c3/eaphammer - Targeted evil twin attacks against WPA2-Enterprise networks. Indirect wireless pivots using hostile portal attacks. [GNU GPLv3] (⭐️2480)
  • ScarredMonk/SysmonSimulator - Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detections and correlation rules by Blue teams. [GNU LGPLv2.1] (⭐️865)
  • screetsec/TheFatRat - Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection . [GNU GPLv3] (⭐️11119)
  • scrt/avcleaner - C/C++ source obfuscator for antivirus bypass [GNU GPLv3] (⭐️1067)
  • SecWiki/linux-kernel-exploits - linux-kernel-exploits Linux平台提权漏洞集合 [MIT License] (⭐️5591)
  • SecWiki/windows-kernel-exploits - windows-kernel-exploits Windows平台提权漏洞集合 [MIT License] (⭐️8628)
  • sensepost/hostapd-mana - SensePost's modified hostapd for wifi attacks. (⭐️606)
  • SentryPeer/SentryPeer - Protect your SIP Servers from bad actors at https://sentrypeer.org (⭐️207)
  • siemens/jailhouse - Linux-based partitioning hypervisor (⭐️1920)
  • silviov/TCP-LEDBAT - Kernel module which implemets the LEDBAT congestion control ontop of TCP (⭐️25)
  • singpolyma/mnemonicode - Fork of http://web.archive.org/web/20101031205747/http://www.tothink.com/mnemonic/ [MIT License] (⭐️166)
  • sjvermeu/cvechecker - Command-line utility to scan the system and report on potential vulnerabilities, based on public CVE data [GNU GPLv3] (⭐️269) Archived!
  • spacehuhn/wifi_ducky - Upload, save and run keystroke injection payloads with an ESP8266 + ATMEGA32U4 [MIT License] (⭐️1405)
  • Spooks4576/Ghost_ESP - Ghost ESP is a ESP32 Firmware that Revolutionizes the way we use ESP32 devices in a Pen Testing aspect [MIT License] (⭐️1140) Archived!
  • stephenfewer/ReflectiveDLLInjection - Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process. [Modified BSD License] (⭐️3256)
  • synacktiv/ica2tcp - A SOCKS proxy for Citrix. (⭐️97)
  • TarlogicSecurity/tickey - Tool to extract Kerberos tickets from Linux kernel keys. [GNU AGPLv3] (⭐️239)
  • taviso/ctypes.sh - A foreign function interface for bash. [MIT License] (⭐️2164)
  • Teach2Breach/openai - Red Team Projects with chat.openai.com. (⭐️17) Archived!
  • telekom-security/tpotce - 🍯 T-Pot - The All In One Multi Honeypot Platform 🐝 [GNU GPLv3] (⭐️9032)
  • thasmin/Podax - Podcast client for Android (⭐️164)
  • thefLink/Hunt-Sleeping-Beacons - Aims to identify sleeping beacons (⭐️664)
  • thurday/mujs - [GNU AGPLv3] (⭐️1)
  • timescale/timescaledb - A time-series database for high-performance real-time analytics packaged as a Postgres extension (⭐️22322)
  • tj/luna - luna programming language - a small, elegant VM implemented in C (⭐️2451) Archived!
  • tmk/tmk_keyboard - Keyboard firmwares for Atmel AVR and Cortex-M (⭐️4113)
  • topotam/PetitPotam - PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions. (⭐️2209)
  • Torlus/qemu - QEMU branch - rpi (Raspberry Pi) - No longer relevant, as it reached mainstream. (⭐️77)
  • Tribler/self-compile-Android - Autonomous smartphone app. Capable of self-compilation, mutation, and viral spreading. World-first proof-of-principle to bypass Internet kill switches. [GNU LGPLv2.1] (⭐️509)
  • trombik/esp_wireguard - WireGuard Implementation for ESP-IDF. (⭐️253)
  • trustedsec/COFFLoader - (⭐️627)
  • trustedsec/CS-Remote-OPs-BOF - Remote operations commands implemented using Beacon Object Files [GNU GPLv2] (⭐️1146)
  • trustedsec/CS-Situational-Awareness-BOF - Situational Awareness commands implemented using Beacon Object Files [GNU GPLv2] (⭐️1765)
  • trustedsec/trevorc2 - TrevorC2 is a legitimate website (browsable) that tunnels client/server communications for covert command execution. (⭐️1315)
  • tursodatabase/libsql - libSQL is a fork of SQLite that is both Open Source, and Open Contributions. [MIT License] (⭐️16576)
  • UberGuidoZ/Flipper - Playground (and dump) of stuff I make or modify for the Flipper Zero [GNU GPLv3] (⭐️16855)
  • VadimBoev/FlappyBird - Less than 100 Kilobytes. Works for Android 5.1 and above (⭐️2394)
  • ValdikSS/p0f-mtu - p0f with patches to save MTU value and export it via API (for VPN detection) (⭐️234)
  • valinet/ExplorerPatcher - This project aims to enhance the working environment on Windows [GNU GPLv2] (⭐️32127)
  • VirtualAlllocEx/DEFCON-31-Syscalls-Workshop - Contains all the material from the DEF CON 31 workshop "(In)direct Syscalls: A Journey from High to Low". (⭐️751)
  • vvaltchev/tilck - A Tiny Linux-Compatible Kernel [BSD 2-Clause "Simplified" License] (⭐️3078)
  • wavestone-cdt/EDRSandblast - (⭐️1801)
  • wavvs/nanorobeus - COFF file (BOF) for managing Kerberos tickets. (⭐️322)
  • weechat/weechat - The extensible chat client. [GNU GPLv3] (⭐️3292)
  • Wind4/vlmcsd - KMS Emulator in C (currently runs on Linux including Android, FreeBSD, Solaris, Minix, Mac OS, iOS, Windows with or without Cygwin) (⭐️8793) Archived!
  • Xfennec/progress - Linux tool to show progress for cp, mv, dd, ... (formerly known as cv) [GNU GPLv3] (⭐️8830)
  • xforcered/BokuLoader - A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features! [MIT License] (⭐️335)
  • xforcered/CredBandit - Proof of concept Beacon Object File (BOF) that uses static x64 syscalls to perform a complete in memory dump of a process and send that back through your already existing Beacon communication channel (⭐️244)
  • Xinyuan-LilyGO/T-Dongle-S3 - An ESP32S3 development board that can freely use WIFI, BLE, TF, LED, TFT_LCD functions. [MIT License] (⭐️356)
  • Xinyuan-LilyGO/TTGO_TWatch_Library - [MIT License] (⭐️1048)
  • XiphosResearch/netelf - Run executables from memory, over the network, on Windows, Linux, OpenVMS... routers... spaceships... toasters etc. (⭐️285)
  • xuanxuan0/TiEtwAgent - PoC memory injection detection agent based on ETW, for offensive and defensive research purposes (⭐️300)
  • Yours3lf/vkQuake3 - Its based on ioq3,I add a vulkan based modular render back end which originally from https://github.com/kennyalive/Quake-III-Arena-Kenny-Edition [GNU GPLv2] (⭐️34)
  • yrutschle/sslh - Applicative Protocol Multiplexer (e.g. share SSH and HTTPS on the same port) [GNU GPLv2] (⭐️5046)
  • zardus/preeny - Some helpful preload libraries for pwning stuff. [BSD 2-Clause "Simplified" License] (⭐️1649)
  • zeroSteiner/reflective-polymorphism - Reflective Polymorphism [Modified BSD License] (⭐️109)
  • zerotier/toss - Dead simple LAN file transfers from the command line (⭐️406) Archived!
  • ziutek/emgo - Emgo: Bare metal Go (language for programming embedded systems) [Modified BSD License] (⭐️1098)
  • zserge/partcl - ParTcl - a micro Tcl implementation [MIT License] (⭐️516)

C#

  • 0xthirteen/AssemblyHunter - Find .net assemblies locally [Modified BSD License] (⭐️133)
  • 3lp4tr0n/BeaconHunter - Detect and respond to Cobalt Strike beacons using ETW. (⭐️515)
  • 3xpl01tc0d3r/Obfuscator - The program is designed to obfuscate the shellcode. [GNU GPLv3] (⭐️204)
  • Aetsu/OffensivePipeline - OfensivePipeline allows you to download and build C# tools, applying certain modifications in order to improve their evasion for Red Team exercises. [GNU GPLv3] (⭐️817)
  • AnErrupTion/LoGiC.NET - A free and open-source .NET obfuscator using dnlib. [MIT License] (⭐️515) Archived!
  • BC-SECURITY/ScriptBlock-Smuggling - Example code samples from our ScriptBlock Smuggling Blog post [GNU GPLv3] (⭐️95)
  • BeichenDream/GodPotato - [Apache License 2.0] (⭐️2224)
  • bflattened/bflat - C# as you know it but with Go-inspired tooling (small, selfcontained, and native executables) [GNU AGPLv3] (⭐️3928)
  • bitwarden/server - Bitwarden infrastructure/backend (API, database, Docker, etc). (⭐️18374)
  • bohops/DynamicDotNet - A collection of various and sundry code snippets that leverage .NET dynamic tradecraft [GNU GPLv3] (⭐️145)
  • breakid/SharpPageGrab - [GNU GPLv3] (⭐️2) Archived!
  • breakid/SharpUtils - A collection of C# utilities intended to be used with Cobalt Strike's execute-assembly [GNU GPLv3] (⭐️46) Archived!
  • CCob/BeaconEye - Hunts out CobaltStrike beacons and logs operator command output (⭐️955)
  • CCob/PIVert - (⭐️105)
  • CCob/SharpBlock - A method of bypassing EDR's active projection DLL's by preventing entry point exection (⭐️1166)
  • CICADA8-Research/RemoteKrbRelay - Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework (⭐️639)
  • ConfusedPolarBear/intro-skipper - Fingerprint audio to automatically detect and skip intro sequences in Jellyfin [GNU GPLv3] (⭐️973) Archived!
  • cube0x0/CVE-2021-1675 - C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527 (⭐️1977)
  • cybersectroll/SharpPersistSD - (⭐️91)
  • DamonMohammadbagher/Meterpreter_Payload_Detection - Meterpreter_Payload_Detection.exe tool for detecting Meterpreter in memory like IPS-IDS and Forensics tool (⭐️165)
  • deadjakk/Reg1c1de - Registry permission scanner written in C# for finding potential privesc avenues within registry [GNU GPLv3] (⭐️86)
  • Dec0ne/DavRelayUp - DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the default settings). (⭐️568)
  • Dec0ne/KrbRelayUp - KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings). (⭐️1637)
  • decoder-it/KrbRelay-SMBServer - (⭐️234)
  • dnSpyEx/dnSpy - Unofficial revival of the well known .NET debugger and assembly editor, dnSpy [GNU GPLv3] (⭐️10041)
  • eksperience/KnockOutlook - A little tool to play with Outlook [Modified BSD License] (⭐️206)
  • eladshamir/Internal-Monologue - Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS (⭐️1649)
  • EncodeGroup/AggressiveGadgetToJScript - A Cobalt Strike Aggressor script to generate GadgetToJScript payloads [GNU GPLv3] (⭐️101)
  • FalconForceTeam/SOAPHound - SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Directory Web Services (ADWS) protocol. [GNU GPLv3] (⭐️866)
  • Flangvik/AMSI.fail - C# Azure Function with an HTTP trigger that generates obfuscated PowerShell snippets that break or disable AMSI for the current process. (⭐️440)
  • Flangvik/BetterSafetyKatz - Fork of SafetyKatz that dynamically fetches the latest pre-compiled release of Mimikatz directly from gentilkiwi GitHub repo, runtime patches signatures and uses SharpSploit DInvoke to PE-Load into memory. (⭐️881)
  • Flangvik/SharpDllProxy - Retrieves exported functions from a legitimate DLL and generates a proxy DLL source code/template for DLL proxy loading or sideloading (⭐️891)
  • foxglovesec/RottenPotato - RottenPotato local privilege escalation from service account to SYSTEM (⭐️693)
  • GhostPack/Certify - Active Directory certificate abuse. (⭐️1948)
  • GhostPack/Rubeus - Trying to tame the three-headed dog. (⭐️4954)
  • GhostPack/SafetyKatz - SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader (⭐️1314)
  • GhostPack/Seatbelt - Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives. (⭐️4538)
  • GhostPack/SharpDPAPI - SharpDPAPI is a C# port of some Mimikatz DPAPI functionality. (⭐️1404)
  • GhostPack/SharpUp - SharpUp is a C# port of various PowerUp functionality. (⭐️1481)
  • Hackplayers/Salsa-tools - Salsa Tools - ShellReverse TCP/UDP/ICMP/DNS/SSL/BINDTCP/Shellcode/SILENTTRINITY and AV bypass, AMSI patched [GNU GPLv3] (⭐️584)
  • huntandhackett/PassiveAggression - Source code and examples for PassiveAggression [MIT License] (⭐️64)
  • IceMoonHSV/Sim - C# User Simulation [GNU GPLv3] (⭐️33)
  • icsharpcode/AvaloniaILSpy - Avalonia-based .NET Decompiler (port of ILSpy) (⭐️1793) Archived!
  • jackullrich/universal-syscall-64 - Resolve syscall numbers at runtime for all Windows versions. [MIT License] (⭐️59)
  • jephthai/OpenPasswordFilter - An open source custom password filter DLL and userspace service to better protect / control Active Directory domain passwords. [GNU GPLv2] (⭐️403)
  • jfmaes/SharpLNKGen-UI - UI for creating LNKs [MIT License] (⭐️107)
  • jfmaes/SharpZipRunner - Executes position independent shellcode from an encrypted zip [GNU GPLv3] (⭐️304)
  • JLospinoso/beamgun - A rogue-USB-device defeat program for Windows. [GNU AGPLv3] (⭐️188)
  • Kareadita/Kavita - Kavita is a fast, feature rich, cross platform reading server. Built with the goal of being a full solution for all your reading needs. Setup your own server and share your reading collection with your friends and family. [GNU GPLv3] (⭐️10264)
  • Kevin-Robertson/Inveigh - .NET IPv4/IPv6 machine-in-the-middle tool for penetration testers [Modified BSD License] (⭐️2938)
  • knight0x07/ImpulsiveDLLHijack - C# based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can later be weaponized during Red Team Operations to evade EDR's. (⭐️553)
  • lambci/docker-lambda - Docker images and test runners that replicate the live AWS Lambda environment [MIT License] (⭐️5789) Archived!
  • Luct0r/KerberOPSEC - OPSEC safe Kerberoasting in C# [GNU GPLv3] (⭐️198) Archived!
  • mandiant/SharPersist - [Apache License 2.0] (⭐️1531) Archived!
  • mandiant/SilkETW - [Apache License 2.0] (⭐️830) Archived!
  • matterpreter/DefenderCheck - Identifies the bytes that Microsoft Defender flags on. [Modified BSD License] (⭐️2588)
  • matterpreter/OffensiveCSharp - Collection of Offensive C# Tooling [Modified BSD License] (⭐️1470)
  • matterpreter/Shhmon - Silencing Sysmon via driver unload [Modified BSD License] (⭐️236)
  • mgeeky/Stracciatella - OpSec-safe Powershell runspace from within C# (aka SharpPick) with AMSI, Constrained Language Mode and Script Block Logging disabled at startup [GNU GPLv3] (⭐️541)
  • mitchmoser/SharpShares - Multithreaded C# .NET Assembly to enumerate accessible network shares in a domain [MIT License] (⭐️376)
  • mkaring/ConfuserEx - An open-source, free protector for .NET applications [MIT License] (⭐️2828)
  • mobdk/HideCode - Hide code from dnSpy and other C# spying tools (⭐️42)
  • moom825/xeno-rat - Xeno-RAT is an open-source remote access tool (RAT) developed in C#, providing a comprehensive set of features for remote system management. Has features such as HVNC, live microphone, reverse proxy, and much much more! [MIT License] (⭐️1509)
  • NicolasConstant/BirdsiteLive - An ethical bridge from Twitter [GNU AGPLv3] (⭐️447)
  • NVISOsecurity/brown-bags - (⭐️112)
  • outflanknl/EvilClippy - A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows. [GNU GPLv3] (⭐️2236)
  • p3nt4/RunDLL.Net - Execute .Net assemblies using Rundll32.exe (⭐️116)
  • pkb1s/SharpRelay - (⭐️181)
  • plackyhacker/SandboxDefender - C# code to Sandbox Defender (and most probably other AV/EDRs). (⭐️167)
  • PwnDexter/SharpEDRChecker - Checks running processes, process metadata, Dlls loaded into your current process and the each DLLs metadata, common install directories, installed services and each service binaries metadata, installed drivers and each drivers metadata, all for the presence of known defensive products such as AV's, EDR's and logging tools. [Modified BSD License] (⭐️749)
  • RCStep/CSSG - Cobalt Strike Shellcode Generator [Modified BSD License] (⭐️671)
  • redteamsocietegenerale/DLLirant - DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary. [MIT License] (⭐️498)
  • reigningshells/npl - No PowerShell Logging (⭐️8)
  • ricardojoserf/NativeDump - Dump lsass using only NTAPI functions by hand-crafting Minidump files (without MiniDumpWriteDump!!!) (⭐️702)
  • ricardojoserf/TrickDump - Dump lsass using only NTAPI functions creating 3 JSON and 1 ZIP file... and generate the MiniDump file later! (⭐️541)
  • RiccardoAncarani/LiquidSnake - LiquidSnake is a tool that allows operators to perform fileless lateral movement using WMI Event Subscriptions and GadgetToJScript (⭐️346)
  • rmcrackan/Libation - Libation: Liberate your Library [GNU GPLv3] (⭐️5421)
  • rtecCyberSec/BitlockMove - Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking [MIT License] (⭐️439)
  • shantanu561993/SharpLoginPrompt - (⭐️133)
  • SpecterOps/SharpHound - C# Data Collector for BloodHound [GNU GPLv3] (⭐️1240)
  • Stratus-Security/Subdominator - The Internets #1 Subdomain Takeover Tool [MIT License] (⭐️301)
  • tevora-threat/SharpView - C# implementation of harmj0y's PowerView [MIT License] (⭐️1090)
  • ThunderGunExpress/OutlookToolbox_v2 - (⭐️34)
  • tylerdotrar/SigmaPotato - SeImpersonate privilege escalation tool for Windows 8 - 11 and Windows Server 2012 - 2022 with extensive PowerShell and .NET reflection support. [Apache License 2.0] (⭐️483)
  • xforcered/Dendrobate - Managed code hooking template. (⭐️108)
  • YOLOP0wn/POSTDump - (⭐️344)

C++

  • 01Space/ESP32-C3FH4-RGB - (⭐️73)
  • 0x09AL/RdpThief - Extracting Clear Text Passwords from mstsc.exe using API Hooking. (⭐️1437)
  • 0xpat/COFFInjector - PoC MSVC COFF Object file loader/injector. (⭐️186)
  • 0xVavaldi/ruleprocessorY - Rule Processor Y is a next-gen Rule processor with complex multibyte character support built to support Hashcat [Apache License 2.0] (⭐️37)
  • 7h30th3r0n3/Evil-M5Project - Evil-M5Project is an innovative tool developed for ethical hacking and exploration of WiFi networks. It's compatible with Cardputer, Atoms3, Fire, core2. You can scan, monitor, and interact with WiFi networks in a controlled environment. This project is designed for educational purposes, aiding in understanding network security and vulnerabilities (⭐️2108)
  • antonioCoco/JuicyPotatoNG - Another Windows Local Privilege Escalation from Service Account to System [MIT License] (⭐️949)
  • ArthurSonzogni/json-tui - A JSON terminal UI made in C++ [MIT License] (⭐️435)
  • ayushsharma82/ElegantOTA - OTA updates made slick and simple for everyone! (ESP8266, ESP32, RP2040+W, RP2350+W) [GNU AGPLv3] (⭐️949)
  • badgeek/svg2shenzhen - Convert Inkscape SVG drawings to KiCad PCB and footprint modules [GNU GPLv3] (⭐️856)
  • biomurph/Mouse - Repository for Open Source Mouse Firmware and Hardware [MIT License] (⭐️359)
  • bmorcelli/Launcher - Firmware Launcher for ESP32 boards like: M5Stack, Lilygo, Marauder and CYD devices. [MIT License] (⭐️1418)
  • CCob/lsarelayx - NTLM relaying for Windows made easy (⭐️580)
  • cepxeo/dll4shell - Shellcode launcher for AV bypass (⭐️214)
  • Chrismettal/flipper-zero-backpacks - Backpack-style addon boards for the Flipper Zero! (⭐️417)
  • crankyoldgit/IRremoteESP8266 - Infrared remote library for ESP8266/ESP32: send and receive infrared signals with multiple protocols. Based on: https://github.com/shirriff/Arduino-IRremote/ [GNU LGPLv2.1] (⭐️3406)
  • cvengler/sysget - One package manager to rule them all [GNU GPLv3] (⭐️685)
  • CyanogenMod/android_bootable_recovery - (⭐️464)
  • DaKaZ/esp8266-restclient - Arduino RESTful HTTP Request Library [MIT License] (⭐️123)
  • DarthTon/Blackbone - Windows memory hacking library [MIT License] (⭐️5380)
  • decoder-it/ADCSCoercePotato - (⭐️245)
  • devpack/android-python27 - Embed Python 2.7 (3.2 and others) interpreter and your scripts into an Android APK (⭐️159)
  • dslee2022/SignatureKid - (⭐️390) Archived!
  • es3n1n/defendnot - An even funnier way to disable windows defender. (through WSC api) [Apache License 2.0] (⭐️3344)
  • es3n1n/obfuscator - PE (and elf now!) bin2bin obfuscator [GNU GPLv3] (⭐️835)
  • espressif/arduino-esp32 - Arduino core for the ESP32 [GNU LGPLv2.1] (⭐️16562)
  • evgenybaskakov/v8m-rb - Port of Google v8 javascript engine to mips architecture (⭐️2)
  • exploitblizzard/Windows-Privilege-Escalation-CVE-2021-1732 - Read my blog for more info - (⭐️30)
  • falcosecurity/falco - Cloud Native Runtime Security [Apache License 2.0] (⭐️8833)
  • floe/backscrub - Virtual Video Device for Background Replacement with Deep Semantic Segmentation [Apache License 2.0] (⭐️743)
  • ggml-org/llama.cpp - LLM inference in C/C++ [MIT License] (⭐️102114)
  • GJDuck/RedFat - A binary hardening system [GNU GPLv3] (⭐️111)
  • google/nsjail - A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security. [Apache License 2.0] (⭐️3812)
  • hasherezade/pe_to_shellcode - Converts PE into a shellcode [BSD 2-Clause "Simplified" License] (⭐️2751)
  • hlldz/dazzleUP - A tool that detects the privilege escalation vulnerabilities caused by misconfigurations and missing updates in the Windows operating systems. [GNU GPLv3] (⭐️489) Archived!
  • i-am-shodan/USBArmyKnife - USB Army Knife – the ultimate close access tool for penetration testers and red teamers. [MIT License] (⭐️2421)
  • Idov31/Nidhogg - Windows rootkit for Intel x64 with 25+ features, demonstrating rootkit techniques compatible with all Windows 10 and Windows 11 versions. [GNU GPLv3] (⭐️2296)
  • input-leap/input-leap - Open-source KVM software (⭐️7705)
  • insecurityofthings/uC_mousejack - Mousejack for ATmega32u4 (⭐️243)
  • ION28/BLUESPAWN - An Active Defense and EDR software to empower Blue Teams [GNU GPLv3] (⭐️1318)
  • itm4n/CDPSvcDllHijacking - Windows 10 CDPSvc DLL Hijacking - From LOCAL SERVICE to SYSTEM (⭐️118) Archived!
  • itm4n/FullPowers - Recover the default privilege set of a LOCAL/NETWORK SERVICE account (⭐️676) Archived!
  • itm4n/Pentest-Windows - Windows internals and exploitation tricks (⭐️113)
  • jarulraj/sqlcheck - Automatically identify anti-patterns in SQL queries [Apache License 2.0] (⭐️2521)
  • johnboiles/esp-roomba-mqtt - ESP8266 MQTT Roomba controller (Useful for hooking up old Roombas to Home Assistant) (⭐️214)
  • justcallmekoko/ESP32Marauder - A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32 (⭐️10381)
  • kasmtech/KasmVNC - Modern VNC Server and client, web based and secure [GNU GPLv2] (⭐️4854)
  • kdrag0n/safetynet-fix - Google SafetyNet attestation workarounds for Magisk [MIT License] (⭐️6437)
  • KeckCAVES/SARndbox - Augmented reality application scanning a sand surface using a Kinect 3D camera, and projecting a real- time updated topography map with topographic contour lines, hillshading, and an optional real-time water flow simulation back onto the sand surface using a calibrated projector [GNU GPLv2] (⭐️249)
  • kkent030315/evil-mhyprot-cli - A PoC for Mhyprot2.sys vulnerable driver that allowing read/write memory in kernel/user via unprivileged user process. [MIT License] (⭐️353)
  • knolleary/pubsubclient - A client library for the Arduino Ethernet Shield that provides support for MQTT. [MIT License] (⭐️3999)
  • lasselukkari/aWOT - Arduino web server library. [MIT License] (⭐️311)
  • leoloobeek/COMProxy - PoC for proxying COM objects when hijacking [Modified BSD License] (⭐️218)
  • liskin/hybrid-screenclone - Clone a single Xinerama screen to another X server, in userspace. (⭐️20) Archived!
  • lozaning/The_Wifydra - Multi-headed 802.11 panopticon (⭐️263)
  • lraton/FlopperZiro - A Flipper Zero clone, but cheapest, DIY and simply Open Source, made with Arduino IDE [GNU GPLv3] (⭐️1581)
  • manticoresoftware/manticoresearch - Easy to use open source fast database for search | Good alternative to Elasticsearch | Drop-in replacement for E in the ELK stack [GNU GPLv3] (⭐️11743)
  • manyfacedllama/amsi-tracer - Leverage AMSI (Antimalware Scan Interface) technology to aid your analysis. This tool saves all buffers (scripts, .NET assemblies, etc) passed into AMSI during dynamic execution. [GNU GPLv3] (⭐️113)
  • me-no-dev/ESPAsyncWebServer - Async Web Server for ESP8266 and ESP32 [GNU LGPLv3] (⭐️4027) Archived!
  • mlin/sqlite_zstd_vfs - SQLite3 extension for read/write storage compression with Zstandard [Apache License 2.0] (⭐️198)
  • modzero/fix-windows-privacy - Fix Windows 10 Privacy (⭐️485)
  • monoxgas/Koppeling - Adaptive DLL hijacking / dynamic export forwarding [GNU GPLv3] (⭐️811)
  • mozilla-ai/llamafile - Distribute and run LLMs with a single file. (⭐️24030)
  • namazso/linux_injector - A simple ptrace-less shared library injector for x64 Linux [MIT License] (⭐️284)
  • nomic-ai/gpt4all - GPT4All: Run Local LLMs on Any Device. Open-source and available for commercial use. [MIT License] (⭐️77283)
  • NUL0x4C/EtwSessionHijacking - A Poc on blocking Procmon from monitoring network events [MIT License] (⭐️111)
  • OceanTroop/orca-one - A collection of alternatives for running Flipper Zero functions on more affordable devices such as M5Stack, Liligo and ESP32 in general. [GNU GPLv3] (⭐️368) Archived!
  • Offensive-Panda/ShadowDumper - Shadow Dumper is a powerful tool used to dump LSASS memory, often needed in penetration testing and red teaming. It uses multiple advanced techniques to dump memory, allowing to access sensitive data in LSASS memory. [MIT License] (⭐️573)
  • OGoodness/Minesweeper-Login - Minesweeper that cannot be exited in any way other than completing the game. Make it run while logging in and it will work as a second form of "auth". Used as a joke for Cyber Team --- Bypass with code - 6969420 [MIT License] (⭐️93)
  • ohpe/juicy-potato - A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM. [GNU GPLv3] (⭐️2755)
  • OpenSecurityResearch/dllinjector - dll injection tool that implements various methods (⭐️500)
  • opticron/ESP8266HueEmulator - Emulate a Philips Hue bridge running on an ESP8266 using the Arduino IDE. [MIT License] (⭐️7)
  • padraigfl/twsu-arcade-coder-esp32 - Custom library which covers all key operations for the Arcade Coder by Tech Will Save Us (an ewaste 12x12 RGB button matrix controlled by an on board ESP32 microcontroller) [MIT License] (⭐️13)
  • PatrickSt1991/Roomba-VirtualWall-ESP32 - (⭐️5)
  • polybar/polybar - A fast and easy-to-use status bar [MIT License] (⭐️15216)
  • Qrome/printer-monitor - OctoPrint 3D Printer Monitor using Wemos D1 Mini ESP8266 [MIT License] (⭐️490)
  • rain-1/filezilla-ng - A fresh and clean fork of the FTP client filezilla [GNU GPLv2] (⭐️57)
  • rasta-mouse/process-inject-kit - Port of Cobalt Strike's Process Inject Kit (⭐️193)
  • REDasmOrg/REDasm - The OpenSource Disassembler [GNU GPLv3] (⭐️1708)
  • royshil/obs-backgroundremoval - An OBS plugin for removing background in portrait images (video), making it easy to replace the background when recording or streaming. [GNU GPLv3] (⭐️4235)
  • s3fs-fuse/s3fs-fuse - FUSE-based file system backed by Amazon S3 [GNU GPLv2] (⭐️9783)
  • SaadAhla/BlockOpenHandle - Block any Process to open HANDLE to your process , only SYTEM is allowed to open handle to your process ,with that you can avoid remote memory scanners (⭐️173)
  • SafeBreach-Labs/PoolParty - A set of fully-undetectable process injection techniques abusing Windows Thread Pools [Modified BSD License] (⭐️1252)
  • securesocketfunneling/ssf - Secure Socket Funneling - Network tool and toolkit - TCP and UDP port forwarding, SOCKS proxy, remote shell, standalone and cross platform (⭐️1661)
  • shogunlab/building-c2-implants-in-cpp - The source code files that accompany the short book "Building C2 Implants in C++: A Primer" by Steven Patterson (@shogun_lab). [GNU GPLv3] (⭐️236)
  • spion/adbfs-rootless - Mount Android phones on Linux with adb. No root required. (⭐️1035)
  • stealth/opmsg - opmsg message encryption (⭐️756)
  • stevejabs/jollybadge-v2 - JollyBadge [V2] (⭐️7)
  • sysown/proxysql - High-performance proxy for MySQL and PostgreSQL [GNU GPLv3] (⭐️6668)
  • theevilbit/injection - (⭐️827)
  • thiagopeixoto/winsos-poc - A PoC demonstrating code execution via DLL Side-Loading in WinSxS binaries. [MIT License] (⭐️111)
  • thosakwe/t2b - A wicked-powerful text macro language for building binary files. [GNU GPLv3] (⭐️378)
  • tstack/lnav - Log file navigator [BSD 2-Clause "Simplified" License] (⭐️10131)
  • typesense/typesense - Open Source alternative to Algolia + Pinecone and an Easier-to-Use alternative to ElasticSearch ⚡ 🔍 ✨ Fast, typo tolerant, in-memory fuzzy Search Engine for building delightful search experiences [GNU GPLv3] (⭐️25538)
  • UMSKT/UMSKT - An open source toolkit designed to research Microsoft Pre-Vista licensing mechanisms [GNU AGPLv3] (⭐️2248)
  • USBGuard/usbguard - USBGuard is a software framework for implementing USB device authorization policies (what kind of USB devices are authorized) as well as method of use policies (how a USB device may interact with the system) [GNU GPLv2] (⭐️1320)
  • vah13/extractTVpasswords - tool to extract passwords from TeamViewer memory using Frida (⭐️464)
  • vitoplantamura/OnnxStream - Lightweight inference library for ONNX files, written in C++. It can run Stable Diffusion XL 1.0 on a RPI Zero 2 (or in 298MB of RAM) but also Mistral 7B on desktops and servers. ARM, x86, WASM, RISC-V supported. Accelerated by XNNPACK. Python, C# and JS(WASM) bindings available. (⭐️2056)
  • waldo-irc/MalMemDetect - Detect strange memory regions and DLLs [GNU GPLv3] (⭐️191)
  • wangyu-/udp2raw - A Tunnel which Turns UDP Traffic into Encrypted UDP/FakeTCP/ICMP Traffic by using Raw Socket,helps you Bypass UDP FireWalls(or Unstable UDP Environment) [MIT License] (⭐️8412)
  • WerWolv/ImHex - 🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM. [GNU GPLv2] (⭐️53086)
  • wheybags/glibc_version_header - Build portable Linux binaries without using an ancient distro [MIT License] (⭐️871)
  • XaFF-XaFF/Cronos-Rootkit - Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation. [MIT License] (⭐️944)
  • Yours3lf/rpi-vk-driver - VK driver for the Raspberry Pi (Broadcom Videocore IV) [MIT License] (⭐️1241)
  • zealdocs/zeal - Offline documentation browser inspired by Dash [GNU GPLv3] (⭐️12584)
  • ZeroMemoryEx/Amsi-Killer - Lifetime AMSI bypass (⭐️673)
  • zerovm/zerovm - Open-source lightweight virtualization platform [Apache License 2.0] (⭐️825)
  • zrax/pycdc - C++ python bytecode disassembler and decompiler [GNU GPLv3] (⭐️4374)

CSS

Clojure

CoffeeScript

  • jnordberg/wintersmith - A flexible static site generator [MIT License] (⭐️3488)
  • octoblu/meshblu - Meshblu is a cross-protocol IoT machine-to-machine messaging system. [MIT License] (⭐️815)

Common Lisp

  • turtl/api - (Deprecated) Turtl API. This is the server that responds to all client requests. [GNU AGPLv3] (⭐️238)

Crystal

  • Morantron/tmux-fingers - copy pasting in terminal with vimium/vimperator like hints. [MIT License] (⭐️1376)

DIGITAL Command Language

Dart

  • AppFlowy-IO/AppFlowy - Bring projects, wikis, and teams together with AI. AppFlowy is the AI collaborative workspace where you achieve more without losing control of your data. The leading open source Notion alternative. [GNU AGPLv3] (⭐️69337)

Dockerfile

Eagle

Elixir

  • ourway/imdb-api - APIs for fetching basic movie information from IMDB. [MIT License] (⭐️7)

Go

  • 0x09AL/go-deliver - Go-deliver is a payload delivery tool coded in Go. [Apache License 2.0] (⭐️115)
  • 42wim/matterbridge - bridge between mattermost, IRC, gitter, xmpp, slack, discord, telegram, rocketchat, twitch, ssh-chat, zulip, whatsapp, keybase, matrix, microsoft teams, nextcloud, mumble, vk and more with REST API (mattermost not required!) [Apache License 2.0] (⭐️7439)
  • 89luca89/pakkero - Pakkero is a binary packer written in Go made for fun and educational purpose. Its main goal is to take in input a program file (elf binary, script, even appimage) and compress it, protect it from tampering and intrusion. [GNU GPLv3] (⭐️272)
  • 99designs/gqlgen - go generate based graphql server library [MIT License] (⭐️10704)
  • a-h/templ - A language for writing HTML user interfaces in Go. [MIT License] (⭐️10207)
  • aacebedo/dnsdock - DNS service discovery for Docker containers [MIT License] (⭐️634)
  • aalex954/evilginx2-TTPs - Reverse engineered to remove IOCs, added Exchange Online Protection IP blacklist and bing-bot user-agent blocking, DNS configuration and notes on usage. [GNU GPLv3] (⭐️163)
  • aarondl/sqlboiler - Generate a Go ORM tailored to your database schema. (⭐️6985)
  • aaronjanse/3mux - Terminal multiplexer inspired by i3 [MIT License] (⭐️1844)
  • aarzilli/gdlv - GUI frontend for Delve (⭐️1411)
  • abice/go-enum - An enum generator for go [MIT License] (⭐️937)
  • achilleasa/bare-metal-gophers - Demo code and slides for my GolangUK '17 talk: "Bare Metal Gophers: Can you write a kernel in Go?" (⭐️162)
  • acln0/linuxkernel - Linux kernel utilities for Go. [ISC License] (⭐️17)
  • acme-dns/acme-dns - Limited DNS server with RESTful HTTP API to handle ACME DNS challenges easily and securely. [MIT License] (⭐️2706)
  • acorn-io/runtime - A simple application deployment framework built on Kubernetes [Apache License 2.0] (⭐️1127) Archived!
  • ahhh/GoRedLoot - A tool to collect secrets (keys and passwords) and stage (compress and encrypt) them for exfiltration. (⭐️61)
  • ahmetb/govvv - "go build" wrapper to add version info to Golang applications [Apache License 2.0] (⭐️539)
  • ahmetb/kubectx - Faster way to switch between clusters and namespaces in kubectl [Apache License 2.0] (⭐️19618)
  • air-verse/air - ☁️ Live reload for Go apps [GNU GPLv3] (⭐️23285)
  • akarki15/dbdot - Generate DOT description for postgres db schema [MIT License] (⭐️396)
  • akupila/go-wasm - WebAssembly binary file parser written in go [MIT License] (⭐️133)
  • akutz/memconn - MemConn is an in-memory network stack for Go. [Apache License 2.0] (⭐️553)
  • alash3al/go-smtpsrv - a tiny package that implements SMTP server for Go projects [MIT License] (⭐️107) Archived!
  • alash3al/lightify - a reverse proxy that boosts the web app performance! [MIT License] (⭐️192)
  • alash3al/wsify - A very simple general purpose websocket server that does the job (⭐️526)
  • albertito/chasquid - SMTP (email) server with a focus on simplicity, security, and ease of operation [mirror] (⭐️961)
  • albrow/fo - An experimental language which adds functional programming features to Go. (⭐️1226) Archived!
  • alecbcs/hyprspace - A Lightweight VPN Built on top of IPFS + Libp2p for Truly Distributed Networks. [Apache License 2.0] (⭐️543) Archived!
  • alecthomas/go_serialization_benchmarks - Benchmarks of Go serialization methods (⭐️1626)
  • alecthomas/gometalinter - DEPRECATED: Use https://github.com/golangci/golangci-lint [MIT License] (⭐️3478) Archived!
  • alegrey91/Gontainer - 🫙 Rudimentary namespace-based container for Linux [GNU GPLv3] (⭐️77)
  • alexanderGugel/wsd - 👊 cURL for WebSocket Servers [MIT License] (⭐️422)
  • alexellis/cli-progress-animation - Coloured progress-bar for your Golang CLI [MIT License] (⭐️55) Archived!
  • alexkohler/dogsled - dogsled is a Go static analysis tool to find assignments/declarations with too many blank identifiers. [MIT License] (⭐️74)
  • anacrolix/torrent - Full-featured BitTorrent client package and utilities [Mozilla Public License 2.0] (⭐️6007)
  • AnalogJ/scrutiny - Hard Drive S.M.A.R.T Monitoring, Historical Trends & Real World Failure Thresholds [MIT License] (⭐️7645)
  • anaskhan96/litfs - A FUSE file system in Go extended with persistent file storage [MIT License] (⭐️125)
  • andrewaeva/gobotnet - Pure HTTP and DNS Botnet written in Golang for Windows. (⭐️156)
  • andyleap/go-ssb - [GNU GPLv3] (⭐️42)
  • ankur-anand/simple-go-rpc - RPC explained by writing simple RPC framework in 300 lines of pure Golang. [MIT License] (⭐️565)
  • anthonynsimon/bild - Image processing algorithms in pure Go [MIT License] (⭐️4187)
  • antonholmquist/jason - Easy-to-use JSON Library for Go [MIT License] (⭐️1135)
  • antoniomika/sish - HTTP(S)/WS(S)/TCP Tunnels to localhost using only SSH. [MIT License] (⭐️4572)
  • antonmedv/gofx - 🐾 fx-like command-line JSON processing tool [MIT License] (⭐️232) Archived!
  • anywherelan/awl - Securely connect your devices into a private network. Mesh VPN, socks5 proxy server/client [Mozilla Public License 2.0] (⭐️507)
  • aotimme/gocsv - Command-line CSV processing utility. [MIT License] (⭐️210)
  • aperturerobotics/bifrost - Modular networking for Go with pluggable transports, RPC, WebRTC, WebAssembly support. [Apache License 2.0] (⭐️569)
  • aquasecurity/kube-bench - Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark [Apache License 2.0] (⭐️8005)
  • aquasecurity/kubectl-who-can - Show who has RBAC permissions to perform actions on different resources in Kubernetes [Apache License 2.0] (⭐️912)
  • aquasecurity/tfsec - Tfsec is now part of Trivy [MIT License] (⭐️6975)
  • arafatkatze/DataViz - Build and Visualize data structures in Golang (⭐️425)
  • ardanlabs/gotraining - Go Training Class Material : (⭐️12190)
  • arl/statsviz - Visualise Go runtime metrics in real time [MIT License] (⭐️3633)
  • armon/consul-api - Golang API client for Consul [Mozilla Public License 2.0] (⭐️124)
  • armon/go-socks5 - SOCKS5 server in Golang [MIT License] (⭐️2115)
  • asaskevich/govalidator - [Go] Package of validators and sanitizers for strings, numerics, slices and structs [MIT License] (⭐️6199)
  • ashishb/gabo - GitHub Actions Boilerplate Generator to avoid common pitfalls (https://ashishb.net/programming/common-pitfalls-of-github-actions/) [Apache License 2.0] (⭐️126)
  • atmanos/atmanos - Build Go programs that run directly on the Xen hypervisor [Modified BSD License] (⭐️712)
  • atredispartners/flamingo - Flamingo captures credentials sprayed across the network by various IT and security products. [BSD 2-Clause "Simplified" License] (⭐️492)
  • atsaki/termeter - Visualize data in the terminal [MIT License] (⭐️458)
  • attic-labs/noms - The versioned, forkable, syncable database [Apache License 2.0] (⭐️7427) Archived!
  • augmentable-dev/tickgit - Manage your repository's TODOs, tickets and checklists as config in your codebase. [MIT License] (⭐️323)
  • authelia/authelia - The Single Sign-On Multi-Factor portal for web apps, now OpenID Certified™ [Apache License 2.0] (⭐️27431)
  • auyer/steganography - Pure Golang Library that allows LSB steganography on images using ZERO dependencies [MIT License] (⭐️352)
  • avelino/awesome-go - A curated list of awesome Go frameworks, libraries and software [MIT License] (⭐️169271)
  • awalterschulze/goderive - Derives and generates mundane golang functions that you do not want to maintain yourself [Apache License 2.0] (⭐️1265)
  • awnumar/memguard - Software sandbox for storage of sensitive information in memory. [Apache License 2.0] (⭐️2725)
  • aws/aws-sdk-go - This SDK has reached end-of-support. The AWS SDK for Go v2 is available here: https://github.com/aws/aws-sdk-go-v2 [Apache License 2.0] (⭐️8699) Archived!
  • ayoul3/reflect-pe - Reflectively load PE (⭐️106)
  • banzaicloud/chartsec - Helm Chart security scanner [Apache License 2.0] (⭐️49)
  • barakmich/stroop - A console-only Github Issues board inspired by Waffle.io [BSD 2-Clause "Simplified" License] (⭐️16)
  • bcicen/jstream - Streaming JSON parser for Go [MIT License] (⭐️602)
  • bcicen/tinycron - A very small replacement for cron [MIT License] (⭐️86)
  • beego/beego - beego is an open-source, high-performance web framework for the Go programming language. (⭐️32401)
  • bemasher/rtlamr - An rtl-sdr receiver for Itron ERT compatible smart meters operating in the 900MHz ISM band. [GNU AGPLv3] (⭐️2438)
  • benbjohnson/postlite - Postgres wire compatible SQLite proxy. [Apache License 2.0] (⭐️1229) Archived!
  • benchkram/errz - Error Handling In One Line [MIT License] (⭐️41)
  • benhoyt/goawk - A POSIX-compliant AWK interpreter written in Go, with CSV support [MIT License] (⭐️2019)
  • benjojo/six-onions - Like Tor2Web, but not just HTTP ( using IPv6 ) [BSD 2-Clause "Simplified" License] (⭐️127)
  • benjojo/totp-ssh-fluxer - Take security by obscurity to the next level (this is a bad idea, don't really use this please) (⭐️939)
  • bet365/jingo - This package provides the ability to encode golang structs to a buffer as JSON very quickly. [Apache License 2.0] (⭐️734)
  • bfirsh/go-dcgi - CGI, but with Docker containers [Apache License 2.0] (⭐️13)
  • Binject/backdoorfactory - A from-scratch rewrite of The Backdoor Factory - a MitM tool for inserting shellcode into all types of binaries on the wire. [GNU GPLv3] (⭐️379)
  • Binject/binjection - Injects additional machine instructions into various binary formats. [GNU GPLv3] (⭐️288)
  • Binject/universal - Universal Shared Library User-space Loader [GNU GPLv3] (⭐️236)
  • BishopFox/sliver - Adversary Emulation Framework [GNU GPLv3] (⭐️10965)
  • bitfield/script - Making it easy to write shell-like scripts in Go [MIT License] (⭐️6952)
  • blang/semver - Semantic Versioning (semver) library written in golang [MIT License] (⭐️1044)
  • blastrain/octillery - Go package for sharding databases ( Supports every ORM or raw SQL ) [MIT License] (⭐️200)
  • blushft/go-diagrams - Create beautiful system diagrams with Go [MIT License] (⭐️5228)
  • boramalper/magnetico - Autonomous (self-hosted) BitTorrent DHT search engine suite. [GNU AGPLv3] (⭐️3135) Archived!
  • botherder/kraken - Cross-platform Yara scanner written in Go [GNU GPLv3] (⭐️328)
  • bradfitz/gitbrute - brute-force a git commit hash (⭐️397)
  • bradfitz/minimal-qemu-linux - experimenting with a minimal Linux kernel under qemu-system for testing (⭐️23)
  • bradfitz/shotizam - Shotizam analyzes the size of Go binaries [Modified BSD License] (⭐️614)
  • bradleyjkemp/godoc-playground - Play with GoDoc syntax and preview your changes in realtime [MIT License] (⭐️113)
  • bradleyjkemp/memviz - Visualize your Go data structures using graphviz [MIT License] (⭐️1293)
  • brianhealey/meshtastic_tile_downloader - (⭐️3)
  • brimdata/super - An analytics database that puts JSON and relational tables on equal footing (⭐️1540)
  • buildertools/entropy - An entropy and failure injection management API for Docker platforms. (⭐️163)
  • burrowers/garble - Obfuscate Go builds [Modified BSD License] (⭐️5376)
  • bvwells/go-patterns - Design patterns for the Go programming language [MIT License] (⭐️626)
  • bytecodealliance/wasmtime-go - Go WebAssembly runtime powered by Wasmtime [Apache License 2.0] (⭐️897)
  • C-Sto/BananaPhone - It's a go variant of Hells gate! (directly calling windows kernel functions, but from Go!) [MIT License] (⭐️527)
  • c9s/bbgo - The modern cryptocurrency trading bot framework written in Go. [GNU AGPLv3] (⭐️1619)
  • caarlos0/fork-cleaner - Quickly clean up unused forks on your github account. [MIT License] (⭐️370)
  • caddyserver/certmagic - Automatic HTTPS for any Go program: fully-managed TLS certificate issuance and renewal [Apache License 2.0] (⭐️5522)
  • calebcase/ibf - [MIT License] (⭐️5)
  • campoy/csvql - cvsql: a SQL server for CSV files [Apache License 2.0] (⭐️35)
  • camptocamp/terraboard - 🌍 📋 A web dashboard to inspect Terraform States [Apache License 2.0] (⭐️2004)
  • canonical/go-dqlite - Go bindings for libdqlite [Apache License 2.0] (⭐️471)
  • capnspacehook/pandorasbox - An intuitive and encrypted in-memory filesystem (VFS) [MIT License] (⭐️101)
  • cenkalti/rain - 🌧 BitTorrent client and library in Go [MIT License] (⭐️1116)
  • cgzirim/seek-tune - An implementation of Shazam's song recognition algorithm. [MIT License] (⭐️5573)
  • chaisql/chai - Modern embedded SQL database [MIT License] (⭐️1679)
  • ChandraNarreddy/sillyproxy - SillyProxy - Dynamic SNI based TLS proxy for terminating TLS (>=1.1) HTTP connections to multiple domains. [MIT License] (⭐️23)
  • charmbracelet/bubbletea - A powerful little TUI framework 🏗 [MIT License] (⭐️41275)
  • checkmake/checkmake - Linter/analyzer for Makefiles [MIT License] (⭐️1185)
  • ChimeraCoder/gojson - Automatically generate Go (golang) struct definitions from example JSON [GNU GPLv3] (⭐️2690)
  • chrislusf/glow - Glow is an easy-to-use distributed computation system written in Go, similar to Hadoop Map Reduce, Spark, Flink, Storm, etc. I am also working on another similar pure Go system, https://github.com/chrislusf/gleam , which is more flexible and more performant. (⭐️3221)
  • ChrisRx/dungeonfs - A FUSE filesystem and dungeon crawling adventure game engine [BSD 2-Clause "Simplified" License] (⭐️1092)
  • christophberger/grada - A DIY dashboard based on Grafana [Modified BSD License] (⭐️45)
  • chzchzchz/goword - spell checking for golang source [BSD 2-Clause "Simplified" License] (⭐️34)
  • claudiodangelis/i3-timer - ⏰ A simple timer for the i3 window manager [MIT License] (⭐️49)
  • claudiodangelis/qrcp - ⚡ Transfer files over wifi from your computer to your mobile device by scanning a QR code without leaving the terminal. [MIT License] (⭐️10438)
  • climech/grit - Multitree-based personal task manager [MIT License] (⭐️1699)
  • codegangsta/essential-go - (⭐️175)
  • coder/wush - simplest & fastest way to transfer files between computers via WireGuard [Creative Commons Zero v1.0 Universal] (⭐️1435)
  • codetainerapp/codetainer - A Docker container in your browser. [MIT License] (⭐️1068)
  • cointop-sh/cointop - A fast and lightweight interactive terminal based UI application for tracking cryptocurrencies 🚀 by @miguelmota [Apache License 2.0] (⭐️4383) Archived!
  • containers/image - Work with containers' images [Apache License 2.0] (⭐️963)
  • containers/skopeo - Work with remote images registries - retrieving information, images, signing content [Apache License 2.0] (⭐️10664)
  • ContainerSolutions/ImageWolf - Fast Distribution of Docker Images on Clusters (⭐️143)
  • ContainerSSH/ContainerSSH - ContainerSSH: Launch containers on demand [Apache License 2.0] (⭐️3020)
  • ContainX/docker-volume-netshare - Docker NFS, AWS EFS, Ceph & Samba/CIFS Volume Plugin [Apache License 2.0] (⭐️1141)
  • coreos/fleet - fleet ties together systemd and etcd into a distributed init system [Apache License 2.0] (⭐️2417) Archived!
  • coreos/ignition - First boot installer and configuration tool [Apache License 2.0] (⭐️946)
  • corneliusweig/rakkess - Review Access - kubectl plugin to show an access matrix for k8s server resources [Apache License 2.0] (⭐️1388)
  • cornelk/go-benchmark - Golang benchmarks used for optimizing code [Apache License 2.0] (⭐️329)
  • CovenantSQL/CovenantSQL - A decentralized, trusted, high performance, SQL database with blockchain features [Apache License 2.0] (⭐️1531)
  • craigmulligan/sandy - A tiny "sandbox" to run untrusted code 🏖️ (⭐️335) Archived!
  • crawshaw/littleboss - littleboss: supervisor construction kit [ISC License] (⭐️638)
  • cretz/bine - Go library for accessing and embedding Tor clients and servers [MIT License] (⭐️809)
  • crosbymichael/skydock - Service discovery via DNS for docker [MIT License] (⭐️1049)
  • crowdsecurity/crowdsec - CrowdSec - the open-source and participative security solution offering crowdsourced protection against malicious IPs and access to the most advanced real-world CTI. [MIT License] (⭐️12974)
  • cube2222/jql - Easy JSON Query Processor with a Lispy syntax in Go [MIT License] (⭐️906)
  • cube2222/octosql - OctoSQL is a query tool that allows you to join, analyse and transform data from multiple databases and file formats using SQL. [Mozilla Public License 2.0] (⭐️5249)
  • CUCyber/ja3transport - Impersonating JA3 signatures [MIT License] (⭐️398)
  • cybertec-postgresql/pg_timetable - pg_timetable: Advanced scheduling for PostgreSQL (⭐️1344)
  • cycloidio/inframap - Read your tfstate or HCL to generate a graph specific for each provider, showing only the resources that are most important/relevant. [MIT License] (⭐️2007)
  • d2r2/gotk3 - GTK+ golang bindings (improved GOTK3) with Cool App example. [ISC License] (⭐️25)
  • D3Ext/maldev - Golang library for malware development [MIT License] (⭐️387)
  • danielmiessler/Fabric - Fabric is an open-source framework for augmenting humans using AI. It provides a modular system for solving specific problems using a crowdsourced set of AI prompts that can be used anywhere. [MIT License] (⭐️40449)
  • dariubs/GoBooks - List of Golang books (⭐️19303)
  • DataHenHQ/till - DataHen Till is a companion tool to your existing web scraper that instantly makes it scalable, maintainable, and more unblockable, with minimal code changes on your scraper. Integrates with any scraper in 5 minutes. [Apache License 2.0] (⭐️815)
  • dathoangnd/gonet - Neural Network for Go. [MIT License] (⭐️82)
  • dave/jennifer - Jennifer is a code generator for Go [MIT License] (⭐️3609)
  • davecheney/gophercon2018-performance-tuning-workshop - GopherCon 2018 Performance Tuning Workshop (⭐️930)
  • davecheney/httpstat - It's like curl -v, with colours. [MIT License] (⭐️7210)
  • dche423/temi - Simple terminal-based dashboard for golang memory statistic [BSD 2-Clause "Simplified" License] (⭐️44)
  • dearplain/goloader - load and run golang code at runtime. (WARNING: this repo has not been maintained for a long time, please take a look at https://github.com/pkujhd/goloader) [Apache License 2.0] (⭐️620)
  • dennis-tra/pcp - 📦 Command line peer-to-peer data transfer tool based on libp2p. [Apache License 2.0] (⭐️1099) Archived!
  • derailed/popeye - 👀 A Kubernetes cluster resource sanitizer (⭐️6256)
  • DevSecOpsDocs/nuclearpond - Nuclear Pond is a utility leveraging Nuclei to perform internet wide scans for the cost of a cup of coffee. [MIT License] (⭐️185)
  • diamondburned/gtkcord3 - A Gtk3 Discord client in Golang [GNU GPLv3] (⭐️627) Archived!
  • diljith369/OffensiveGo - Offensive go lang series (⭐️34)
  • diljith369/reversehellgo - rev shell and manager in go (⭐️20)
  • DimitarPetrov/stegify - 🔍 Go tool for LSB steganography, capable of hiding any file within an image. [MIT License] (⭐️1262)
  • diogomonica/actuary - An actuary is a business professional who analyzes the financial consequences of risk. (⭐️82)
  • distribyted/distribyted - Torrent client with HTTP, fuse, and WebDAV interfaces. Start exploring your torrent files right away, even zip, rar, or 7zip archive contents! [GNU GPLv3] (⭐️1117)
  • divan/expvarmon - TermUI based monitor for Go apps using expvars (/debug/vars). Quickest way to monitor your Go app(s). [MIT License] (⭐️2043)
  • dkumor/acmewrapper - Automated wrapper to add let's encrypt support to go servers [MIT License] (⭐️245)
  • dlvhdr/gh-dash - A rich terminal UI for GitHub that doesn't break your flow. [MIT License] (⭐️11285)
  • dmjones/goreadme - Generate README.md files from Go package docs [Apache License 2.0] (⭐️6)
  • dnaeon/gru - Orchestration made easy with Go and Lua (⭐️465)
  • dnaeon/makefile-graph - Turn your Makefile into a graph [BSD 2-Clause "Simplified" License] (⭐️192)
  • docker-archive-public/docker.libcompose - Unmaintained/Deprecated An experimental go library providing Compose-like functionality [Apache License 2.0] (⭐️581) Archived!
  • DominicBreuker/pspy - Monitor linux processes without root permissions [GNU GPLv3] (⭐️5952)
  • dop251/goja - ECMAScript/JavaScript engine in pure Go [MIT License] (⭐️6807)
  • dpapathanasiou/simple-graph-go - This is the Go implementation of simple-graph (https://github.com/dpapathanasiou/simple-graph) [MIT License] (⭐️24)
  • dpw/vendetta - A minimal tool for managing golang project dependencies as submodules [BSD 2-Clause "Simplified" License] (⭐️238)
  • dradtke/gopherpc - Automated generation of RPC over HTTP code for GopherJS or Web Assembly. (⭐️6)
  • dragonflyoss/dragonfly-archived - This repository has be archived and moved to the new repository https://github.com/dragonflyoss/Dragonfly2. [Apache License 2.0] (⭐️5945) Archived!
  • drakkan/sftpgo - Full-featured and highly configurable SFTP, HTTP/S, FTP/S and WebDAV server - S3, Google Cloud Storage, Azure Blob [GNU AGPLv3] (⭐️11884)
  • driusan/dewm - A pure go autotiling window manager written with literate programming (⭐️288)
  • drk1wi/Modlishka - Modlishka. Reverse Proxy. (⭐️5303)
  • DrmagicE/gmqtt - Gmqtt is a flexible, high-performance MQTT broker library that fully implements the MQTT protocol V3.x and V5 in golang [MIT License] (⭐️1034)
  • dshills/goauto - Go package for building automation tools [MIT License] (⭐️269) Archived!
  • dstotijn/hetty - An HTTP toolkit for security research. [MIT License] (⭐️9365)
  • dutchcoders/marija - Data exploration and visualisation for Elasticsearch and Splunk. [GNU AGPLv3] (⭐️233)
  • dvyukov/go-fuzz - Randomized testing for Go [Apache License 2.0] (⭐️4849)
  • dwisiswant0/go-dork - The fastest dork scanner written in Go. [MIT License] (⭐️1276)
  • eapache/channels - Golang channel helpers and special types [MIT License] (⭐️809)
  • earthboundkid/versioninfo - Importable package that parses version info from debug.ReadBuildInfo(). [MIT License] (⭐️293)
  • earthly/earthly - Super simple build framework with fast, repeatable builds and an instantly familiar syntax – like Dockerfile and Makefile had a baby. [Mozilla Public License 2.0] (⭐️12010)
  • EddieIvan01/iox - Tool for port forwarding & intranet proxy [MIT License] (⭐️1200)
  • EgeBalci/amber - Reflective PE packer. [MIT License] (⭐️1408)
  • EgeBalci/sgn - Shikata ga nai (仕方がない) encoder ported into go with several improvements [MIT License] (⭐️1937)
  • elazarl/go-bindata-assetfs - Serves embedded files from jteeuwen/go-bindata with net/http [BSD 2-Clause "Simplified" License] (⭐️864)
  • elazarl/goproxy - An HTTP proxy library for Go [Modified BSD License] (⭐️6652)
  • eldondev/meadinthemiddle - A tiny mitm prox (⭐️1)
  • eliben/raft - 🚣 Raft implementation in Go [The Unlicense] (⭐️1274)
  • elisescu/tty-share - Share your linux or osx terminal over the Internet. [MIT License] (⭐️977)
  • elliotforbes/go-webassembly-framework - A Go Based WebAssembly framework for building frontend applications in Go! (⭐️396)
  • emersion/go-imap - 📥 An IMAP library for Go clients and servers [MIT License] (⭐️2315)
  • emersion/go-ostatus - An OStatus library written in Go [MIT License] (⭐️34) Archived!
  • emersion/go-smtp - 📤 An SMTP library for Go clients and servers [MIT License] (⭐️2008)
  • emirozer/kubectl-doctor - kubectl cluster triage plugin for k8s - 🏥 (brew doctor equivalent) [Apache License 2.0] (⭐️368)
  • emirpasic/gods - GoDS (Go Data Structures) - Sets, Lists, Stacks, Maps, Trees, Queues, and much more (⭐️17412)
  • empathicqubit/gioui-gomobile-example - An example of GioUI working with GoMobile bindings on Android, iOS, and desktop platforms (⭐️4)
  • enescakir/emoji - A minimalistic emoji package for Go (golang) [MIT License] (⭐️459)
  • ergochat/ergo - A modern IRC server (daemon/ircd) written in Go. [MIT License] (⭐️3175)
  • esell/deb-simple - A lightweight, bare-bones apt repository server [MIT License] (⭐️242)
  • esell/sir-forksalot - Make updating your forks complex and messy [MIT License] (⭐️3)
  • esimov/diagram - CLI app to convert ASCII arts into hand drawn diagrams. [MIT License] (⭐️896)
  • esimov/pigo - Fast face detection, pupil/eyes localization and facial landmark points detection library in pure Go. [MIT License] (⭐️4703)
  • estesp/manifest-tool - Command line tool to create and query container image manifest list/indexes [Apache License 2.0] (⭐️835)
  • etcd-io/zetcd - Serve the Apache Zookeeper API but back it with an etcd cluster [Apache License 2.0] (⭐️1085) Archived!
  • evanphx/json-patch - A Go library to apply RFC6902 patches and create and apply RFC7386 patches [Modified BSD License] (⭐️1213)
  • evilsocket/quijote - Quijote is an highly configurable HTTP middleware for API security. (⭐️47)
  • expr-lang/expr - Expression language and expression evaluation for Go [MIT License] (⭐️7777)
  • fabiolb/fabio - Consul Load-Balancing made simple [MIT License] (⭐️7337)
  • facebookarchive/grace - Graceful restart & zero downtime deploy for Go servers. [MIT License] (⭐️4890) Archived!
  • FairwindsOps/polaris - Validation of best practices in your Kubernetes clusters [Apache License 2.0] (⭐️3356)
  • fanpei91/torsniff - torsniff - a sniffer that sniffs torrents from BitTorrent network [MIT License] (⭐️4024) Archived!
  • fatedier/frp - A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet. [Apache License 2.0] (⭐️105856)
  • ffuf/ffuf - Fast web fuzzer written in Go [MIT License] (⭐️15866)
  • fiatjaf/ijq - interactive jq, a REPL (⭐️29)
  • FiloSottile/mkcert - A simple zero-config tool to make locally trusted development certificates with any names you'd like. [Modified BSD License] (⭐️58456)
  • fin3ss3g0d/evilgophish - evilginx3 + gophish [MIT License] (⭐️1977)
  • fission/fission - Fast and Simple Serverless Functions for Kubernetes [Apache License 2.0] (⭐️8844)
  • flant/shell-operator - Shell-operator is a tool for running event-driven scripts in a Kubernetes cluster [Apache License 2.0] (⭐️2588)
  • flike/kingshard - A high-performance MySQL proxy (⭐️6414)
  • fluhus/godoc-tricks - A comprehensive godoc guide. [MIT License] (⭐️425)
  • flyingmutant/rapid - Rapid is a modern Go property-based testing library [Mozilla Public License 2.0] (⭐️768)
  • flyteorg/flytestdlib - A apache commons style library in Golang, use by the Flyte project. Contains utilities for metrics, pflags, config management, storage abstraction, caching etc [Apache License 2.0] (⭐️60) Archived!
  • foxcpp/maddy - ✉️ Composable all-in-one mail server. [GNU GPLv3] (⭐️5913)
  • fragmenta/fragmenta - A command line tool for creating, running and deploying golang websites, part of the fragmenta go web framework [MIT License] (⭐️295)
  • francoispqt/gojay - high performance JSON encoder/decoder with stream API for Golang [MIT License] (⭐️2135)
  • Freezerburn/go-coroutine - Simple Golang coroutine implementation. [MIT License] (⭐️8)
  • friendsofgo/graphiql - An adapter on GO to serve the GraphiQL in-browser IDE. [MIT License] (⭐️70)
  • fsouza/go-dockerclient - Go client for the Docker Engine API. [BSD 2-Clause "Simplified" License] (⭐️2234)
  • fullstorydev/grpcurl - Like cURL, but for gRPC: Command-line tool for interacting with gRPC servers [MIT License] (⭐️12557)
  • fuskovic/nw - 🔧 CLI utility for various networking operations [MIT License] (⭐️26)
  • future-architect/vuls - Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices [GNU GPLv3] (⭐️12098)
  • fvbock/endless - Zero downtime restarts for go servers (Drop in replacement for http.ListenAndServe) [MIT License] (⭐️4165)
  • fzipp/pythia - Browser based user interface for the Go source code guru [Modified BSD License] (⭐️338)
  • g0ldencybersec/CloudRecon - [MIT License] (⭐️521)
  • g0ldencybersec/EasyEASM - Zero-dollar attack surface management tool [MIT License] (⭐️319)
  • g0ldencybersec/gungnir - CT Log Scanner [MIT License] (⭐️531)
  • g3n/engine - Go 3D Game Engine (http://g3n.rocks) [BSD 2-Clause "Simplified" License] (⭐️3073)
  • galeone/tfgo - Tensorflow + Go, the gopher way [Apache License 2.0] (⭐️2495)
  • gbbr/breakcheck - Backwards compatibility linter for Go. (⭐️68)
  • gen0cide/gscript - framework to rapidly implement custom droppers for all three major operating systems [GNU AGPLv3] (⭐️704)
  • gen0cide/hasherbasher - SQL injection via bruteforced MD5 hash reflection of random strings (⭐️53)
  • gen2brain/goiv - Small and simple image viewer written in pure Go. [GNU GPLv3] (⭐️202) Archived!
  • gen2brain/iup-go - Cross-platform UI library with native controls [MIT License] (⭐️363)
  • genuinetools/binctr - Fully static, unprivileged, self-contained, containers as executable binaries. [MIT License] (⭐️2521)
  • genuinetools/img - Standalone, daemon-less, unprivileged Dockerfile and OCI compatible container image builder. [MIT License] (⭐️3986)
  • gernest/wow - 😮❗❗ Wow❗ now my Go commandline app is spinning with 🌈 and 🐴 [MIT License] (⭐️509) Archived!
  • getsops/sops - Simple and flexible tool for managing secrets [Mozilla Public License 2.0] (⭐️21396)
  • ghodss/yaml - A better way to marshal and unmarshal YAML in Golang (⭐️1061)
  • GideonRed-zz/dockerdoomd - (⭐️48)
  • git-chglog/git-chglog - [DEPRECATED] CHANGELOG generator implemented in Go (Golang) -> Use now the actively maintained git-cliff [MIT License] (⭐️2878) Archived!
  • gizak/termui - Golang terminal dashboard [MIT License] (⭐️13533)
  • glanceapp/glance - A self-hosted dashboard that puts all your feeds in one place [GNU AGPLv3] (⭐️33038)
  • glauth/glauth - A lightweight LDAP server for development, home use, or CI [MIT License] (⭐️2813)
  • glerchundi/parkeeper - a ZooKeeper service which seamlessly bridges all requests to etcd or consul. (⭐️173)
  • gliderlabs/ssh - Easy SSH servers in Golang [Modified BSD License] (⭐️4117)
  • gliderlabs/sshfront - Programmable SSH frontend [MIT License] (⭐️325)
  • go-bootstrap/go-bootstrap - Generates a lean and mean Go web project. [MIT License] (⭐️1589)
  • go-chi/chi - lightweight, idiomatic and composable router for building Go HTTP services [MIT License] (⭐️21915)
  • go-echarts/go-echarts - 🎨 The adorable charts library for Golang. [MIT License] (⭐️7597)
  • go-fed/activity - ActivityStreams & ActivityPub in golang, oh my! [Modified BSD License] (⭐️730)
  • go-gandi/terraform-provider-gandi - Terraform provider for the Gandi Domain services [Mozilla Public License 2.0] (⭐️154)
  • go-git/go-git - A highly extensible Git implementation in pure Go. [Apache License 2.0] (⭐️7311)
  • go-gitea/gitea - Git with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CD [MIT License] (⭐️54756)
  • go-rod/rod - A Chrome DevTools Protocol driver for web automation and scraping. [MIT License] (⭐️6841)
  • go-shiori/shiori - Simple bookmark manager built with Go [MIT License] (⭐️11408)
  • go-task/task - A fast, cross-platform build tool inspired by Make, designed for modern workflows. [MIT License] (⭐️15261)
  • go-toolsmith/minformat - gominfmt makes the Go code more compact to aid further compression; revert with gofmt [MIT License] (⭐️28)
  • gobuffalo/buffalo - Rapid Web Development w/ Go [MIT License] (⭐️8362)
  • gobuffalo/packr - The simple and easy way to embed static files into Go binaries. [MIT License] (⭐️3398) Archived!
  • gobwas/ws - Tiny WebSocket library for Go. [MIT License] (⭐️6447)
  • goccy/go-graphviz - Go bindings for Graphviz [MIT License] (⭐️823)
  • gocelery/gocelery - Celery Distributed Task Queue in Go [MIT License] (⭐️2482)
  • gocircuit/circuit - Circuit: Dynamic cloud orchestration http://gocircuit.org [Apache License 2.0] (⭐️1979)
  • gocolly/colly - Elegant Scraper and Crawler Framework for Golang [Apache License 2.0] (⭐️25205)
  • gogearbox/gearbox - Gearbox ⚙️ is a web framework written in Go with a focus on high performance [MIT License] (⭐️800)
  • gokrazy/rsync - rsync in Go! implements client and server, which can send or receive files (upload, download, all directions supported) [Modified BSD License] (⭐️746)
  • golang-migrate/migrate - Database migrations. CLI and Golang library. (⭐️18324)
  • golang/gddo - Go Doc Dot Org [Modified BSD License] (⭐️1102) Archived!
  • golang/go - The Go programming language [Modified BSD License] (⭐️133291)
  • golangci/awesome-go-linters - A curated list of awesome Go linters. More than 60 linters and tools! [MIT License] (⭐️1088) Archived!
  • golangci/golangci-lint - Fast linters runner for Go [GNU GPLv3] (⭐️18763)
  • gomini/go-mips32 - Golang1.4.2 based gc compiler ported to MIPS32/LE. Hello OpenWRT~ [Modified BSD License] (⭐️134)
  • gomods/athens - A Go module datastore and proxy [MIT License] (⭐️4728)
  • gomuks/gomuks - A Matrix client written in Go. [GNU AGPLv3] (⭐️1620)
  • google/git-appraise - Distributed code review system for Git repos [Apache License 2.0] (⭐️5307)
  • google/gnostic - A compiler for APIs described by the OpenAPI Specification with plugins for code generation and other API support tasks. [Apache License 2.0] (⭐️2274)
  • google/go-licenses - A lightweight tool to report on the licenses used by a Go package and its dependencies. Highlight! Versioned external URL to licenses can be found at the same time. [Apache License 2.0] (⭐️991)
  • google/gops - A tool to list and diagnose Go processes currently running on your system [Modified BSD License] (⭐️7004)
  • GoogleContainerTools/container-diff - container-diff: Diff your Docker containers [Apache License 2.0] (⭐️3799) Archived!
  • GoogleContainerTools/kaniko - Build Container Images In Kubernetes [Apache License 2.0] (⭐️15766) Archived!
  • GoogleContainerTools/skaffold - Easy and Repeatable Kubernetes Development [Apache License 2.0] (⭐️15793)
  • googlesamples/mugo - Sample on how to transpile a small subset of go to Arduino sketches [Apache License 2.0] (⭐️48) Archived!
  • gopherjs/gopherjs - A compiler from Go to JavaScript for running Go code in a browser [BSD 2-Clause "Simplified" License] (⭐️13134)
  • goplus/xgo - XGo is a programming language that reads like plain English. But it's also incredibly powerful — it lets you leverage assets from C/C++, Go, Python, and JavaScript/TypeScript, creating a unified software engineering ecosystem. Our vision is to enable everyone to become a builder of the world. [Apache License 2.0] (⭐️9411)
  • goreleaser/nfpm - nFPM is Not FPM - a simple deb, rpm, apk, ipk, and arch linux packager written in Go [MIT License] (⭐️2521)
  • gosuri/uiprogress - A go library to render progress bars in terminal applications [MIT License] (⭐️2141)
  • gotify/server - A simple server for sending and receiving messages in real-time per WebSocket. (Includes a sleek web-ui) (⭐️14840)
  • gotoz/runq - run regular Docker images in KVM/Qemu [Apache License 2.0] (⭐️845)
  • gowebapi/webapi - Go Lang Web Assembly bindings for DOM, HTML etc [Modified BSD License] (⭐️182)
  • grafov/bcast - Broadcasting library for Go. Broadcast message of any type on a set of channels. WIP [Modified BSD License] (⭐️102)
  • gravitl/netmaker - Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks. (⭐️11530)
  • grumpyhome/grumpy - Grumpy is a Python to Go source code transcompiler and runtime. [Apache License 2.0] (⭐️431)
  • gruntwork-io/terragrunt - Terragrunt is a flexible orchestration tool that allows Infrastructure as Code written in OpenTofu/Terraform to scale. [MIT License] (⭐️9455)
  • gtank/cryptopasta - copy & paste-friendly golang crypto [Creative Commons Zero v1.0 Universal] (⭐️1808)
  • guitmz/go-weather-indicator - Minimalistic GTK weather indicator written in GoLang. [MIT License] (⭐️28)
  • guptarohit/asciigraph - Go package to make lightweight ASCII line graph ╭┈╯ in command line apps with no other dependencies. [Modified BSD License] (⭐️2996)
  • h2non/gock - HTTP traffic mocking and testing made easy in Go ༼ʘ̚ل͜ʘ̚༽ [MIT License] (⭐️2217)
  • hardentools/hardentools - Hardentools simply reduces the attack surface on Microsoft Windows computers by disabling low-hanging fruit risky features. [GNU GPLv3] (⭐️3086)
  • harness/harness - Harness Open Source is an end-to-end developer platform with Source Control Management, CI/CD Pipelines, Hosted Developer Environments, and Artifact Registries. [Apache License 2.0] (⭐️34484)
  • Harry-027/go-audio - An offline solution to convert pdfs into audiobooks [MIT License] (⭐️190)
  • Hashcracky/ptt - Password Transformation Tool (ptt) is a versatile utility designed for password cracking. [GNU GPLv3] (⭐️12)
  • hashicorp/terraform-provider-scaffolding - Quick start repository for creating a Terraform provider [Mozilla Public License 2.0] (⭐️410) Archived!
  • hasura/gitkube - Build and deploy docker images to Kubernetes using git push [Apache License 2.0] (⭐️3851)
  • HavocFramework/Havoc - The Havoc Framework [GNU GPLv3] (⭐️8264) Archived!
  • hbollon/go-edlib - 📚 String comparison and edit distance algorithms library, featuring : Levenshtein, LCS, Hamming, Damerau levenshtein (OSA and Adjacent transpositions algorithms), Jaro-Winkler, Cosine, etc... [MIT License] (⭐️598)
  • hdm/ctail - Tail Certificate Transparency logs and extract hostnames [BSD 2-Clause "Simplified" License] (⭐️128)
  • henrygd/beszel - Lightweight server monitoring with historical data, docker stats, and alerts. [MIT License] (⭐️20648)
  • henvic/httpretty - Package httpretty prints the HTTP requests you make with Go pretty on your terminal. [MIT License] (⭐️412)
  • hmarr/codeowners - 🔒 Command line tool and Go library for CODEOWNERS files [MIT License] (⭐️229)
  • hybridgroup/gocv - Go package for computer vision using OpenCV 4 and beyond. Includes support for DNN, CUDA, OpenCV Contrib, and OpenVINO. (⭐️7416)
  • hyperhq/hyperd - HyperContainer Daemon [Apache License 2.0] (⭐️2063) Archived!
  • hyperhq/runv - Hypervisor-based Runtime for OCI [Apache License 2.0] (⭐️830) Archived!
  • i3/go-i3 - Package i3 provides a convenient interface to the i3 window manager (⭐️136)
  • iamatypeofwalrus/shim - HTTP Handler shim for Go projects running on AWS Lambda [MIT License] (⭐️65)
  • icexin/gocraft - A Minecraft like game written in go [MIT License] (⭐️1899)
  • ichinaski/pxl - Display images in the terminal [Modified BSD License] (⭐️778)
  • icrowley/fake - Fake data generator for Go (Golang) [MIT License] (⭐️598)
  • iDigitalFlame/Redteam-Toolbox - Red Teaming utilities that I can open source. Used in various tests and CTFS [GNU AGPLv3] (⭐️12)
  • iDigitalFlame/XMT - eXtensiable Malware Toolkit: Full Featured Golang C2 Framework with Awesome Features [GNU GPLv3] (⭐️104)
  • itamaro/gcp-go-night-king - A service for resurrecting pre-empted GCE instances. [Apache License 2.0] (⭐️12)
  • ivanilves/lstags - Explore Docker registries and manipulate Docker images! [Apache License 2.0] (⭐️341)
  • ivoras/daisy - A private proof of authority blockchain where blocks are SQLite databases, in Go (⭐️603)
  • iwittkau/auto-frontend - Automatically generate frontends for go programs [MIT License] (⭐️40)
  • iyear/tdl - 📥 A Telegram toolkit written in Golang [GNU AGPLv3] (⭐️7340)
  • izqui/blockchain - A basic blockchain implementation written in Go (⭐️849)
  • jackc/pgx - PostgreSQL driver and toolkit for Go [MIT License] (⭐️13579)
  • jaeles-project/jaeles - The Swiss Army knife for automated Web Application Testing [MIT License] (⭐️2324)
  • jedib0t/go-pretty - Table-writer and more in golang! [MIT License] (⭐️3414)
  • Jeffail/gabs - For parsing, creating and editing unknown or dynamic JSON in Go [MIT License] (⭐️3530)
  • JeremyLoy/config - 12 factor configuration as a typesafe struct in as little as two function calls [MIT License] (⭐️338)
  • jessfraz/onion - Tor networking plugin for Docker containers. Route all container tcp traffic through Tor. [MIT License] (⭐️203) Archived!
  • jetstack/jetstack-secure - Open-source components of CyberArk Certificate Manager for Kubernetes Discovery. [Apache License 2.0] (⭐️260)
  • jetstack/version-checker - Kubernetes utility for exposing image versions in use, compared to latest available upstream, as metrics. [Apache License 2.0] (⭐️766)
  • jimlambrt/gldap - Build LDAP services w/ Go [MIT License] (⭐️120)
  • jinzhu/now - Now is a time toolkit for golang [MIT License] (⭐️4682)
  • jm33-m0/emp3r0r - Self‑healing Gossip Mesh C2 with Assisted Peer Discovery, Modular Post‑Exploitation, and OPSEC‑Focused Transport [MIT License] (⭐️1700)
  • jmmcatee/cracklord - Queue and resource system for cracking passwords [MIT License] (⭐️392)
  • jmoiron/sqlx - general purpose extensions to golang's database/sql [MIT License] (⭐️17561)
  • joewalnes/websocketd - Turn any program that uses STDIN/STDOUT into a WebSocket server. Like inetd, but for WebSockets. [BSD 2-Clause "Simplified" License] (⭐️17629)
  • jondot/goweight - A tool to analyze and troubleshoot a Go binary size. [MIT License] (⭐️1709)
  • josharian/impl - impl generates method stubs for implementing an interface. [MIT License] (⭐️1097)
  • jpillora/chisel - A fast TCP/UDP tunnel over HTTP [MIT License] (⭐️15848)
  • jpoles1/gopherbadger - Generate coverage badge images using Go! (⭐️88)
  • jrhouston/tfk8s - A tool for converting Kubernetes YAML manifests to Terraform HCL [MIT License] (⭐️1053)
  • jroimartin/gocui - Minimalist Go package aimed at creating Console User Interfaces. [Modified BSD License] (⭐️10542)
  • jrudio/go-plex-client - A Plex.tv and Plex Media Server Go client [Apache License 2.0] (⭐️138)
  • jstemmer/gotags - ctags-compatible tag generator for Go [MIT License] (⭐️861)
  • juanfont/headscale - An open source, self-hosted implementation of the Tailscale control server [Modified BSD License] (⭐️37165)
  • julienschmidt/httprouter - A high performance HTTP request router that scales well [Modified BSD License] (⭐️17115)
  • jung-kurt/gofpdf - A PDF document generator with high level support for text, drawing and images [MIT License] (⭐️4469) Archived!
  • jwilder/dockerize - Utility to simplify running applications in docker containers [MIT License] (⭐️5203)
  • K-Phoen/dark - (grafana) Dashboards As Resources in Kubernetes [MIT License] (⭐️435)
  • K-Phoen/grabana - User-friendly Go library for building Grafana dashboards [MIT License] (⭐️729)
  • kadeessh/kadeessh - Kadeessh (formerly Caddy-SSH) is a general-purpose, extensible, modular, memory-safe SSH server built in Go [Apache License 2.0] (⭐️562)
  • kahing/goofys - a high-performance, POSIX-ish Amazon S3 file system written in Go [Apache License 2.0] (⭐️5523)
  • kairos-io/kairos - The immutable Linux meta-distribution for edge Kubernetes. [Apache License 2.0] (⭐️1695)
  • kardianos/service - Run go programs as a service on major platforms. [zlib License] (⭐️4786)
  • kariudo/gopushbullet - a complete go library for PushBullet notifications [MIT License] (⭐️4)
  • karmarun/karma.link - Connect classical systems to the blockchain [GNU AGPLv3] (⭐️26) Archived!
  • kashav/go-url-shortener - Shorten URLs with GitHub repositories and the http-equiv attribute. [MIT License] (⭐️146)
  • kataras/versioning - 🆕 API Versioning for Go [MIT License] (⭐️50)
  • KatelynHaworth/go-tproxy - Linux Transparent Proxy library for Golang [MIT License] (⭐️330)
  • kedgeproject/kedge - Kedge : Simple, Concise & Declarative Kubernetes Applications [Apache License 2.0] (⭐️298) Archived!
  • kellegous/go - Another Google-like Go short link service [MIT License] (⭐️637)
  • kelseyhightower/confd - Manage local application configuration files using templates and data from etcd or consul [MIT License] (⭐️8424)
  • kennylevinsen/sshmuxd - sshmux frontend [MIT License] (⭐️805) Archived!
  • KiExitDispatcher/GoDefender - Anti Virtulization, Anti Debugging, AntiVM, Anti Virtual Machine, Anti Debug, Anti Sandboxie, Anti Sandbox, VM Detect package. Windows ONLY. (⭐️848) Archived!
  • kljensen/golang-html5-sse-example - HTML5 Server Sent Events with Go (⭐️320)
  • knadh/koanf - Simple, extremely lightweight, extensible, configuration management library for Go. Supports JSON, TOML, YAML, env, command line, file, S3 etc. Alternative to viper. [MIT License] (⭐️3954)
  • knadh/listmonk - High performance, self-hosted, newsletter and mailing list manager with a modern dashboard. Single binary app. [GNU AGPLv3] (⭐️19468)
  • kobolog/tesson - NUMA-aware sharding with Docker [GNU LGPLv3] (⭐️84)
  • koki/short - Manageable Kubernetes manifests through a composable, reusable syntax [Apache License 2.0] (⭐️123)
  • kovetskiy/manul - 😼 The madness vendoring utility for Golang programs [MIT License] (⭐️662)
  • krisnova/naml - Convert Kubernetes YAML to Golang [Apache License 2.0] (⭐️1261)
  • ksimka/go-is-not-good - A curated list of articles complaining that go (golang) isn't good enough (⭐️3839)
  • ktr0731/evans - Evans: more expressive universal gRPC client [MIT License] (⭐️4462)
  • kubepug/kubepug - Kubernetes PreUpGrade (Checker) [Apache License 2.0] (⭐️1806)
  • kubernetes-sigs/krew - 📦 Find and install kubectl plugins [Apache License 2.0] (⭐️6929)
  • kubernetes/client-go - Go client for Kubernetes. [Apache License 2.0] (⭐️9799)
  • kubernetes/kompose - Convert Compose to Kubernetes [Apache License 2.0] (⭐️10487)
  • kubernetes/kube-state-metrics - Add-on agent to generate and expose cluster-level metrics. [Apache License 2.0] (⭐️6103)
  • kurehajime/flagstone - flagstone is a Go library to convert flags to web UI. [MIT License] (⭐️22)
  • labstack/echo - High performance, minimalist Go web framework [MIT License] (⭐️32289)
  • lastbackend/lastbackend - System for containerized apps management. From build to scaling. [Apache License 2.0] (⭐️1659)
  • lc/gau - Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl. [MIT License] (⭐️4879)
  • lclarkmichalek/etcdhcp - A DHCP server backed by etcd [GNU GPLv3] (⭐️260)
  • LeanerCloud/AutoSpotting - Saves up to 90% of AWS EC2 costs by automating the use of spot instances on existing AutoScaling groups. Installs in minutes using CloudFormation or Terraform. Convenient to deploy at scale using StackSets. Uses tagging to avoid launch configuration changes. Automated spot termination handling. Reliable fallback to on-demand instances. [Open Software License 3.0] (⭐️2365)
  • ledongthuc/pdf - PDF reader [Modified BSD License] (⭐️586)
  • leg100/pug - Drive terraform at terminal velocity. [Mozilla Public License 2.0] (⭐️671)
  • Legit-Labs/legitify - Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets [Apache License 2.0] (⭐️840)
  • letsencrypt/boulder - An ACME-based certificate authority, written in Go. [Mozilla Public License 2.0] (⭐️5681)
  • lgtmco/lgtm - LGTM is a simple pull request approval system [ARCHIVE] [Apache License 2.0] (⭐️990) Archived!
  • liamg/shox - 🍫 A customisable, universally compatible terminal status bar [The Unlicense] (⭐️728)
  • liamg/traitor - ⬆️ ☠️ 🔥 Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock [MIT License] (⭐️7118)
  • libp2p/go-libp2p - libp2p implementation in Go [MIT License] (⭐️6773)
  • lithammer/go-wiki - A simple HTTP server rendering Markdown styled documents [MIT License] (⭐️302) Archived!
  • lizrice/containers-from-scratch - Writing a container in a few lines of Go code, as seen at DockerCon 2017 and on O'Reilly Safari [MIT License] (⭐️2000)
  • lizrice/strace-from-scratch - As seen at Gophercon 2017 [Apache License 2.0] (⭐️333)
  • lnenad/newser - Newser is a simple utility to generate a pdf with you favorite news articles (⭐️91)
  • loov/goda - Go Dependency Analysis toolkit [MIT License] (⭐️1690)
  • lopezator/sqlfmt - SQL Formatter (⭐️67)
  • lucasepe/crumbs - Turn asterisk-indented text lines into mind maps [MIT License] (⭐️108)
  • lucasepe/draft - Generate High Level Cloud Architecture diagrams using YAML syntax. [MIT License] (⭐️578) Archived!
  • luk4z7/go-concurrency-guide - Practical concurrency guide in Go, communication by channels, patterns (⭐️2859)
  • lukechampine/jsteg - JPEG steganography [MIT License] (⭐️639)
  • maliceio/malice - VirusTotal Wanna Be - Now with 100% more Hipster [Apache License 2.0] (⭐️1854) Archived!
  • mandiant/gocrack - GoCrack is a management frontend for password cracking tools written in Go [MIT License] (⭐️1278)
  • manifoldco/heighliner - Continuous Delivery from GitHub to your Kubernetes cluster [Modified BSD License] (⭐️282) Archived!
  • maragudk/gomponents - HTML components in pure Go. [MIT License] (⭐️1806)
  • marco-lancini/goscan - Interactive Network Scanner [MIT License] (⭐️1038)
  • marcusolsson/tui-go - A UI library for terminal applications. [MIT License] (⭐️2115) Archived!
  • martinrue/cadet - cadet is a library for creating simple HTTP-RPC servers in Go [MIT License] (⭐️39)
  • maruel/panicparse - Crash your app in style (Golang) [Apache License 2.0] (⭐️3716)
  • masayukioguni/go-cloudatcost - go-cloudatcost is a Go client library for accessing the cloudatcost [MIT License] (⭐️6)
  • MasslessParticle/GoQ - Lightweight message queue in Golang [MIT License] (⭐️119)
  • matcornic/hermes - Golang package that generates clean, responsive HTML e-mails for sending transactional mail [Apache License 2.0] (⭐️3028)
  • matrix-org/dendrite - Dendrite is a second-generation Matrix homeserver written in Go! [Apache License 2.0] (⭐️5644) Archived!
  • matrix-org/go-neb - Extensible matrix bot written in Go [Apache License 2.0] (⭐️281) Archived!
  • matryer/silk - Markdown based document-driven RESTful API testing. [GNU GPLv2] (⭐️941)
  • matryer/xbar - Put the output from any script or program into your macOS Menu Bar (the BitBar reboot) [MIT License] (⭐️18013)
  • mattbostock/go-ldpreload-backdoor - LD_PRELOAD libc hooking using Go [MIT License] (⭐️159)
  • matthewmueller/joy - A delightful Go to Javascript compiler (ON HOLD) [GNU GPLv3] (⭐️1319)
  • mattn/go-sixel - DRCS/Sixel Encoder/Decoder [MIT License] (⭐️167)
  • maxence-charriere/go-app - A package to build progressive web apps with Go programming language and WebAssembly. [MIT License] (⭐️8873)
  • maxence-charriere/lofimusic - Lofimusic.app is an installable Progressive web app (PWA) that lists and displays famous YouTube Lo-Fi radios. [MIT License] (⭐️608)
  • maxpert/marmot - A distributed SQLite server with MySQL wire compatible interface [MIT License] (⭐️2764)
  • mcuadros/go-candyjs - fully transparent bridge between Go and the JavaScript [MIT License] (⭐️451) Archived!
  • mdlayher/wol - Package wol implements a Wake-on-LAN client. MIT Licensed. [MIT License] (⭐️110)
  • meehow/peer-id-generator - Vanity public key generator for use with IPFS and IPNS (⭐️40)
  • meshbird/meshbird - Distributed private networking [Apache License 2.0] (⭐️3525)
  • mewmew/guldkorn - Tool for finding interesting forks of projects on GitHub. [The Unlicense] (⭐️39)
  • mfridman/tparse - CLI tool for summarizing go test output. Pipe friendly. CI/CD friendly. [MIT License] (⭐️1241)
  • mgechev/revive - 🔥 ~6x faster, stricter, configurable, extensible, and beautiful drop-in replacement for golint [MIT License] (⭐️5474)
  • mhausenblas/cinf - Command line tool to view namespaces and cgroups, useful for low-level container prodding [Apache License 2.0] (⭐️486)
  • mholt/archiver - DEPRECATED. Please use mholt/archives instead. [MIT License] (⭐️4396) Archived!
  • mholt/caddy-l4 - Layer 4 (TCP/UDP) app for Caddy [Apache License 2.0] (⭐️1607)
  • MichaelMure/mdr - MarkDown Renderer for the terminal [MIT License] (⭐️441)
  • michenriksen/gitrob - Reconnaissance tool for GitHub organizations [MIT License] (⭐️6156) Archived!
  • mikeflynn/go-alexa - A collection of Amazon Echo / Alexa tools for Go development. [MIT License] (⭐️259)
  • minio/minio - MinIO is a high-performance, S3 compatible object store, open sourced under GNU AGPLv3 license. [GNU AGPLv3] (⭐️60621) Archived!
  • mitranim/jsonfmt - Flexible JSON formatter. Supports comments, multi-line with single-line chunks within width limit, fixes punctuation. Library and optional CLI. [The Unlicense] (⭐️15)
  • mjl-/duit - pure go, cross-platform, MIT-licensed ui toolkit for developers [MIT License] (⭐️968)
  • mlabouardy/komiser - Open-source cloud-environment inspector. Supporting AWS, GCP, Azure, and more! Your cloud resources will have nowhere to hide! (⭐️4112)
  • mmatczuk/go-http-tunnel - Fast and secure tunnels over HTTP/2 [GNU AGPLv3] (⭐️3382)
  • mmcgrana/gobyexample - Go by Example (⭐️8053)
  • mmcloughlin/profile - Simple profiling for Go [Modified BSD License] (⭐️76)
  • mmercedes/ghb - A tool for performing backups and deletions of Github gists and starred repositories (⭐️10)
  • MohamedBassem/Smock - Smock ( Previously: RequestBin ) is a golang package for testing the outgoing http requests initiated from a function. The package creates a mock server and passes the URL to the function to be tested and then collects all the requests that the server received. (⭐️49)
  • moloch--/denim - Automated compiler obfuscation for nim [GNU GPLv3] (⭐️137) Archived!
  • monmohan/xferspdy - Xferspdy provides binary diff and patch library in golang. [Mentioned in Awesome Go, https://github.com/avelino/awesome-go] [Modified BSD License] (⭐️101)
  • monsti/monsti - Simple and resource efficient CMS for small sites [GNU AGPLv3] (⭐️345)
  • MontFerret/ferret - Declarative web scraping [Apache License 2.0] (⭐️5959)
  • mosn/holmes - self-aware Golang profile dumper [Apache License 2.0] (⭐️1145)
  • mozilla-services/heka - DEPRECATED: Data collection and processing made easy. (⭐️3451) Archived!
  • mperham/gobox - How to use Golang's NaCl crypto API (⭐️10)
  • mpolden/echoip - A simple IP address lookup service. [Modified BSD License] (⭐️4284)
  • mrwilson/helixdns - DNS server that serves records from etcd. [MIT License] (⭐️94)
  • mubeng/mubeng - An incredibly fast proxy checker & IP rotator with ease. [Apache License 2.0] (⭐️2080)
  • muesli/beehive - A flexible event/agent & automation system with lots of bees 🐝 [GNU AGPLv3] (⭐️6483)
  • muesli/coral - Coral, a friendly Cobra fork with nearly all its features, but only 4 dependencies [Apache License 2.0] (⭐️430)
  • muesli/gamut - Go package to generate and manage color palettes & schemes 🎨 [MIT License] (⭐️573)
  • muesli/mango - mango is a man-page generator for the Go flag, pflag, cobra, coral, and kong packages [MIT License] (⭐️322)
  • multiprocessio/dsq - Commandline tool for running SQL queries against JSON, CSV, Excel, Parquet, and more. (⭐️3864)
  • MultSec/MultCheck - Identifies bad bytes from static analysis with any Anti-Virus scanner. [GNU GPLv3] (⭐️129)
  • mum4k/termdash - Terminal based dashboard. [Apache License 2.0] (⭐️2986)
  • mununki/go-graphql-api-boilerplate - A Boilerplate of GraphQL API built in Go + graphql-go + gorm [MIT License] (⭐️82)
  • mvdan/github-actions-golang - GitHub Actions as CI for Go [Modified BSD License] (⭐️1047)
  • mvdan/gofumpt - A stricter gofmt [Modified BSD License] (⭐️3905)
  • mvdan/sh - A shell parser, formatter, and interpreter with bash and zsh support; includes shfmt [Modified BSD License] (⭐️8635)
  • myitcv/gobin - gobin is an experimental, module-aware command to install/run main packages. [Modified BSD License] (⭐️219) Archived!
  • nabla-containers/runnc - OCI-interfacing Container runtime for Nabla Containers [ISC License] (⭐️259) Archived!
  • Narasimha1997/tor-proxy - An experimental Tor-Proxy serivce written in Go using Go-proxy and Go-libtor. [GNU GPLv3] (⭐️36)
  • natefinch/gorram - It's like go run for any go function [MIT License] (⭐️1050)
  • NateGraff/blessedvirginmary - LLVM IR to Bash Transpiler [MIT License] (⭐️65)
  • natesales/q - A tiny command line DNS client with support for UDP, TCP, DoT, DoH, DoQ and ODoH. [GNU GPLv3] (⭐️2391)
  • naughtygopher/webgo - A microframework to build web apps; with handler chaining, middleware support, and most of all; standard library compliant HTTP handlers(i.e. http.HandlerFunc). [MIT License] (⭐️307)
  • ncruces/go-sqlite3 - Go bindings to SQLite using wasm2go [MIT License] (⭐️962)
  • Ne0nd0g/go-clr - A PoC package for hosting the CLR and executing .NET from Go [Do What The Fck You Want To Public License*] (⭐️78)
  • Ne0nd0g/go-shellcode - A repository of Windows Shellcode runners and supporting utilities. The applications load and execute Shellcode using various API calls or techniques. [GNU GPLv3] (⭐️1180)
  • Ne0nd0g/merlin - Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang. [GNU GPLv3] (⭐️5532)
  • nelhage/llama - [Apache License 2.0] (⭐️607)
  • netvarun/docket - Docket - Custom docker registry that allows for lightning fast deploys through bittorrent [MIT License] (⭐️709)
  • netzkern/butler - 🤵 Welcome to Butler, your personal assistent to scaffold new projects. Shipped with binaries for Mac, Win and Linux. [MIT License] (⭐️81)
  • nginx-proxy/docker-gen - Generate files from docker container meta-data [MIT License] (⭐️4622)
  • ngrok/ngrok-go - Embed ngrok secure ingress into your Go apps as a net.Listener with a single line of code. [MIT License] (⭐️849)
  • ngrok/sqlmw - Interceptors for database/sql [MIT License] (⭐️514)
  • nicocha30/ligolo-ng - An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface. [GNU GPLv3] (⭐️4440)
  • nikolaydubina/go-recipes - 🦩 Tools for Go projects [MIT License] (⭐️4474)
  • nishanths/exhaustive - Check exhaustiveness of switch statements of enum-like constants in Go source code. [BSD 2-Clause "Simplified" License] (⭐️339)
  • nishitm/goBox - GO sandbox to run untrusted code (⭐️42)
  • nknorg/nnet - nnet: a fast, scalable, and developer-friendly p2p overlay network stack [Apache License 2.0] (⭐️131)
  • nobonobo/wecty - Frontend ToolKit for Go and TinyGo. [BSD 2-Clause "Simplified" License] (⭐️33) Archived!
  • nodauf/GoMapEnum - User enumeration and password bruteforce on Azure, ADFS, OWA, O365, Teams and gather emails on Linkedin [GNU GPLv3] (⭐️488)
  • noelyahan/mergi - go library for image programming (merge, crop, resize, watermark, animate, ease, transit) [MIT License] (⭐️243)
  • nopbrick/SeeProxy - Golang reverse proxy with CobaltStrike malleable profile validation. (⭐️110)
  • nosequeldeebee/blockchain-tutorial - Write and publish your own blockchain in less than 200 lines of Go [MIT License] (⭐️1609)
  • nsqio/nsq - A realtime distributed messaging platform [MIT License] (⭐️25875)
  • nurdism/neko - A self hosted virtual browser (rabb.it clone) that runs in docker. [Apache License 2.0] (⭐️2071) Archived!
  • nytimes/gizmo - A Microservice Toolkit from The New York Times [Apache License 2.0] (⭐️3771)
  • nzoschke/gofaas - A boilerplate Go and AWS Lambda app. Demonstrates an expert configuration of 10+ AWS services to support running Go functions-as-a-service (FaaS). [Apache License 2.0] (⭐️803)
  • oapi-codegen/oapi-codegen - Generate Go client and server boilerplate from OpenAPI 3 specifications [Apache License 2.0] (⭐️8212)
  • oauth2-proxy/oauth2-proxy - A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers. [MIT License] (⭐️14153)
  • octavore/lightproxy - lightweight local proxy [MIT License] (⭐️118)
  • olebedev/when - A natural language date/time parser with pluggable rules [Apache License 2.0] (⭐️1461)
  • oligot/go-mod-upgrade - Update outdated Go dependencies interactively [MIT License] (⭐️1084)
  • ollama/ollama - Get up and running with Kimi-K2.5, GLM-5, MiniMax, DeepSeek, gpt-oss, Qwen, Gemma and other models. [MIT License] (⭐️167776)
  • ollybritton/proxyfinder - proxyfinder is a simple Go package for finding proxies. (⭐️23)
  • oniony/TMSU - TMSU lets you tags your files and then access them through a nifty virtual filesystem from any other application. (⭐️2227)
  • open-lambda/open-lambda - An open source serverless computing platform [Apache License 2.0] (⭐️1013)
  • open-policy-agent/conftest - Write tests against structured configuration data using the Open Policy Agent Rego query language (⭐️3151)
  • opencontainers/umoci - umoci modifies Open Container images [Apache License 2.0] (⭐️907)
  • opencost/opencost - Cost monitoring for Kubernetes workloads and cloud costs [Apache License 2.0] (⭐️6465)
  • openfaas/faas - OpenFaaS - Serverless Functions Made Simple (⭐️26127)
  • optiv/Go365 - An Office365 User Attack Tool [MIT License] (⭐️647)
  • optiv/Ivy - Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by utilizing programmatical access in the VBA object environment to load, decrypt and execute shellcode. [MIT License] (⭐️745) Archived!
  • optiv/Mangle - Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs [MIT License] (⭐️1232) Archived!
  • optiv/ScareCrow - ScareCrow - Payload creation framework designed around EDR bypass. (⭐️2881) Archived!
  • orkunkaraduman/go-tcpserver - Go TCP Server library [Modified BSD License] (⭐️69)
  • ortuman/jackal - 💬 Instant messaging server for the Extensible Messaging and Presence Protocol (XMPP). [Apache License 2.0] (⭐️1431) Archived!
  • ory/dockertest - Write better integration tests! Dockertest helps you boot up ephermal docker images for your Go tests with minimal work. [Apache License 2.0] (⭐️4485)
  • ossf/scorecard - OpenSSF Scorecard - Security health metrics for Open Source [Apache License 2.0] (⭐️5355)
  • out-of-tree/out-of-tree - out-of-tree kernel {module, exploit} development tool [GNU AGPLv3] (⭐️230)
  • OWASP/Go-SCP - Golang Secure Coding Practices guide [Creative Commons Attribution Share Alike 4.0 International] (⭐️5269)
  • owncast/owncast - Take control over your live stream video by running it yourself. Streaming + chat out of the box. [MIT License] (⭐️11147)
  • Oxygem/Kanmail - 📥 Turn your inbox into a kanban board. (⭐️1353)
  • P3GLEG/Whaler - Program to reverse Docker images into Dockerfiles [GNU GPLv3] (⭐️1184)
  • PagerDuty/terraform-provider-pagerduty - Terraform PagerDuty provider [Mozilla Public License 2.0] (⭐️217)
  • paraterraform/para - Para - community plugin manager and a "swiss army knife" for Terraform/Terragrunt - just 1 tool to facilitate all your workflows. [MIT License] (⭐️58)
  • paypal/gatt - Gatt is a Go package for building Bluetooth Low Energy peripherals [Modified BSD License] (⭐️1166)
  • peco/peco - Simplistic interactive filtering tool [MIT License] (⭐️7882)
  • perlin-network/noise - A decentralized P2P networking stack written in Go. [MIT License] (⭐️1825)
  • Phantas0s/devdash - 🍱 Highly Configurable Terminal Dashboard for Developers and Creators [Apache License 2.0] (⭐️1632) Archived!
  • photonlines/Go-Web-Server - A Go web server with built in logging, tracing, health check, and graceful shutdown. It also includes a few demo applications showing the Go HTML temple functionality. [MIT License] (⭐️263)
  • phuslu/iploc - Fastest IP To Country Library [MIT License] (⭐️308)
  • pingcap/tidb - TiDB - the open-source, cloud-native, distributed SQL database designed for modern applications. [Apache License 2.0] (⭐️39908)
  • pion/webrtc - Pure Go implementation of the WebRTC API [MIT License] (⭐️16188)
  • pirsch-analytics/pirsch - Pirsch is a drop-in, server-side, no-cookie, and privacy-focused analytics solution for Go. [GNU AGPLv3] (⭐️1014)
  • pitstopcloud/virtualbox-go - Most complete golang library for virtualbox (⭐️83)
  • pkujhd/goloader - load and run golang code at runtime. [Apache License 2.0] (⭐️569)
  • playwright-community/playwright-go - Playwright for Go a browser automation library to control Chromium, Firefox and WebKit with a single API. [MIT License] (⭐️3291)
  • pltanton/yags - Go powered statusline generator [MIT License] (⭐️19)
  • pmezard/licenses - licenses lists Go packages dependencies licenses [MIT License] (⭐️182)
  • po3rin/dockerdot - 🐳 dockerdot shows dockerfile dependenciy graph. This is useful to understand how build dockerfile. This uses Go WebAssembly + BuildKit package. (⭐️98)
  • po3rin/gofmtmd - 📐gofmtmd formats go source code block in Markdown. detects fenced code & formats code using gofmt. [Apache License 2.0] (⭐️95)
  • pocketbase/pocketbase - Open Source realtime backend in 1 file [MIT License] (⭐️57423)
  • pojntfx/weron - Overlay networks based on WebRTC. [GNU AGPLv3] (⭐️2041)
  • posener/goreadme - Generate readme file from Go doc. Now available as a Github action! [MIT License] (⭐️219)
  • praetorian-inc/goffloader - A Go implementation of Cobalt Strike style BOF/COFF loaders. [Apache License 2.0] (⭐️269)
  • presmihaylov/todocheck - A static code analyser for annotated TODO comments [MIT License] (⭐️434)
  • pressly/goose - A database migration tool. Supports SQL migrations and Go functions. (⭐️10425)
  • projectdiscovery/dnsx - dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers. [MIT License] (⭐️2696)
  • projectdiscovery/httpx - httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library. [MIT License] (⭐️9784)
  • projectdiscovery/naabu - A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests [MIT License] (⭐️5866)
  • projectdiscovery/nuclei - Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations. [MIT License] (⭐️27796)
  • projectdiscovery/subfinder - Fast passive subdomain enumeration tool. [MIT License] (⭐️13372)
  • projectdiscovery/tlsx - Fast and configurable TLS grabber focused on TLS based data collection. [MIT License] (⭐️1086)
  • proofrock/ws4sqlite - Query sqlite via json+http [ISC License] (⭐️556)
  • ProtonMail/gopenpgp - A high-level OpenPGP library [MIT License] (⭐️1220)
  • psampaz/go-mod-outdated - Find outdated dependencies of your Go projects. go-mod-outdated provides a table view of the go list -u -m -json all command which lists all dependencies of a Go project and their available minor and patch updates. It also provides a way to filter indirect dependencies and dependencies without updates. [MIT License] (⭐️667)
  • psampaz/gothanks - GoThanks automatically stars Go's official repository and your go.mod github dependencies, providing a simple way to say thanks to the maintainers of the modules you use and the contributors of Go itself. [MIT License] (⭐️128)
  • puzzlepeaches/ffufw - (⭐️144)
  • pwaller/goupx - Fix golang compiled binaries on x86_64 so that they can be packed with UPX [MIT License] (⭐️343)
  • qdm12/gluetun - VPN client in a thin Docker container for multiple VPN providers, written in Go, and using OpenVPN or Wireguard, DNS over TLS, with a few proxy servers built-in. [MIT License] (⭐️13720)
  • quii/learn-go-with-tests - Learn Go with test-driven development [MIT License] (⭐️23577)
  • r00tman/corrupter - Simple image glitcher suitable for producing nice looking lockscreens [BSD 2-Clause "Simplified" License] (⭐️367)
  • ramr/go-reaper - Process (Grim) reaper library for golang - this is useful for cleaning up zombie processes inside docker containers (which do not have an init process running as pid 1). [MIT License] (⭐️131)
  • rancher/wrangler-cli - A trivial wrapper around spf13/cobra to simplify some basic patterns [Apache License 2.0] (⭐️21) Archived!
  • raphaelreyna/latte - Programatic document generation as a HTTP service. Render PDFs using LaTeX templates and JSON. [MIT License] (⭐️221)
  • raspi/heksa - CLI hex dumper with colors [Apache License 2.0] (⭐️152)
  • rclone/rclone - "rsync for cloud storage" - Google Drive, S3, Dropbox, Backblaze B2, One Drive, Swift, Hubic, Wasabi, Google Cloud Storage, Azure Blob, Azure Files, Yandex Files [MIT License] (⭐️56507)
  • realzhangliu/socks5-go - PURE GOLANG SOCKS5 SERVER ,FULL PROTOCOL FEATURES! [MIT License] (⭐️78)
  • rebuy-de/aws-nuke - Nuke a whole AWS account and delete all its resources. [MIT License] (⭐️5806) Archived!
  • reconquest/tubekit - 🧪 kubectl alternative with quick context switching, kubectl on steroids [MIT License] (⭐️216)
  • redcode-labs/Coldfire - Golang malware development library [MIT License] (⭐️977)
  • redcode-labs/neurax - A framework for constructing self-spreading binaries [MIT License] (⭐️1019)
  • redcode-labs/SNOWCRASH - A polyglot payload generator [MIT License] (⭐️244)
  • reddec/tinc-boot - Bootstrap your Tinc node quickly and easy [Mozilla Public License 2.0] (⭐️162)
  • redpanda-data/connect - Fancy stream processing made operationally mundane (⭐️8625)
  • redspread/spread - Docker to Kubernetes in one command [Apache License 2.0] (⭐️1826)
  • RedTeamPentesting/pretender - Your MitM sidekick for relaying attacks featuring DHCPv6 DNS takeover as well as mDNS, LLMNR and NetBIOS-NS spoofing. [MIT License] (⭐️1275)
  • remeh/diago - Diago is a visualization tool for CPU profiles and heap snapshots generated with pprof. [Apache License 2.0] (⭐️358)
  • rfyiamcool/go-shell - golang easy shell && command lib (⭐️84)
  • rhaidiz/broxy - An HTTP/HTTPS intercept proxy written in Go. [GNU GPLv3] (⭐️1010)
  • ribtoks/tdg-github-action - GitHub action for project management using TODO comments [MIT License] (⭐️66)
  • ricoberger/vault-secrets-operator - Create Kubernetes secrets from Vault for a secure GitOps based workflow. [MIT License] (⭐️679)
  • ricochet2200/go-disk-usage - Get disk usage information like how much space is available, free, and used [The Unlicense] (⭐️131)
  • rivo/tview - Terminal UI library with rich, interactive widgets — written in Golang [MIT License] (⭐️13743)
  • riyaz-ali/sqlite - Golang library to build sqlite extensions 🚀 (⭐️179)
  • riza/indextree - Generates the tree of the directory listing page. (⭐️51)
  • roblillack/spot - React-like desktop GUI toolkit for Go [MIT License] (⭐️1258)
  • roboll/helmfile - Deploy Kubernetes Helm Charts [MIT License] (⭐️4041)
  • robscott/kube-capacity - A simple CLI that provides an overview of the resource requests, limits, and utilization in a Kubernetes cluster [Apache License 2.0] (⭐️2596)
  • rogpeppe/gohack - Make temporary edits to your Go module dependencies [Modified BSD License] (⭐️913)
  • ropnop/go-windapsearch - Utility to enumerate users, groups and computers from a Windows domain through LDAP queries [Modified BSD License] (⭐️395)
  • rotisserie/eris - Error handling library with readable stack traces and flexible formatting support 🎆 [MIT License] (⭐️1785)
  • rs/zerolog - Zero Allocation JSON Logger [MIT License] (⭐️12311)
  • rsc/2fa - Two-factor authentication on the command line [Modified BSD License] (⭐️1937)
  • rsms/ghp - Go Hypertext Preprocessor [MIT License] (⭐️38)
  • rtr7/router7 - router7 is a small home internet router completely written in Go. It is implemented as a gokrazy appliance. [Apache License 2.0] (⭐️2752)
  • rubenv/sql-migrate - SQL schema migration tool for Go. [MIT License] (⭐️3409)
  • rverst/stargazer - Stargazer creates a sorted list of your stared GitHub repositories - your personal awesome-list. [MIT License] (⭐️60)
  • rwtodd/Go.Sed - An implementation of sed in Go. Just because! (⭐️144)
  • ryanskidmore/GoWork - Go Library for distributing work to workers [MIT License] (⭐️314)
  • rykov/paperboy - 💌💨 Email Campaign Delivery built with GoLang inspired by GoHugo (⭐️500)
  • rzane/docker2exe - Convert a Docker image to an executable (⭐️2191)
  • sad0p/d0zer - Elf binary infector written in Go. [MIT License] (⭐️215)
  • samber/lo - 💥 A Lodash-style Go library based on Go 1.18+ Generics (map, filter, contains, find...) [MIT License] (⭐️21175)
  • sampointer/dy - Construct YAML from a directory tree [GNU GPLv3] (⭐️125) Archived!
  • schemalex/schemalex - Generate difference sql of two mysql schema [MIT License] (⭐️481)
  • schollz/croc - Easily and securely send things from one computer to another 🐊 📦 [MIT License] (⭐️34574)
  • schollz/find3 - High-precision indoor positioning framework, version 3. [MIT License] (⭐️4774)
  • schollz/hostyoself - Host yo' self from your browser, your phone, your toaster. [MIT License] (⭐️1847)
  • schollz/peerdiscovery - Pure-Go library for cross-platform local peer discovery using UDP multicast 👩 🔁 👩 [MIT License] (⭐️669)
  • securego/gosec - Go security checker [Apache License 2.0] (⭐️8751)
  • semihalev/sdns - A high-performance, recursive DNS resolver server with DNSSEC support, focused on preserving privacy. [MIT License] (⭐️1033)
  • sensepost/gowitness - 🔍 gowitness - a golang, web screenshot utility using Chrome Headless [GNU GPLv3] (⭐️4225)
  • sensepost/ruler - A tool to abuse Exchange services (⭐️2304)
  • sethvargo/go-githubactions - Go SDK for GitHub Actions - easily author GitHub Actions in Go [Apache License 2.0] (⭐️515)
  • sethvargo/terraform-provider-googlecalendar - A @HashiCorp Terraform provider for managing Google Calendar events. [MIT License] (⭐️137) Archived!
  • sgreben/jp - dead simple terminal plots from JSON data. single binary, no dependencies. linux, osx, windows. [MIT License] (⭐️1338)
  • sh4hin/GoPurple - Yet another shellcode runner consists of different techniques for evaluating detection capabilities of endpoint security solutions (⭐️495)
  • shadyabhi/jqtop - Analyze json logs in realtime [MIT License] (⭐️14)
  • sherifabdlnaby/sched - In-process Go Job Scheduler. Supports Fixed, Timely, and Cron Expression Intervals. Instrument and Expose Scheduler's Job Metrics. [MIT License] (⭐️57)
  • shihanng/tfvar - Terraform's variable definitions template generator. [MIT License] (⭐️230)
  • shirou/gopsutil - psutil for golang (⭐️11768)
  • shivamMg/ppds - Pretty Print Data Structures in Go [MIT License] (⭐️346)
  • Shivangx01b/BountyIt - A fuzzer made in golang for finding issues like xss, lfi, rce, ssti...that detects issues using change in content length and verify it using signatures (⭐️62)
  • shiyanhui/dht - BitTorrent DHT Protocol && DHT Spider. [MIT License] (⭐️2779)
  • Shopify/kubeaudit - kubeaudit helps you audit your Kubernetes clusters against common security controls [MIT License] (⭐️1934) Archived!
  • shuntaka9576/kanban - :octocat: Simple terminal UI for GitHub Project [MIT License] (⭐️29) Archived!
  • shurcooL-legacy/Conception-go - An unfinished Go implementation of Conception. (⭐️270)
  • simeji/jid - json incremental digger [MIT License] (⭐️7093)
  • six2dez/OneListForAll - Rockyou for web fuzzing (⭐️3109)
  • SixGenInc/Noctilucent - Using TLS 1.3 to evade censors, bypass network defenses, and blend in with the noise (⭐️684)
  • skx/sysbox - sysadmin/scripting utilities, distributed as a single binary [GNU GPLv2] (⭐️284) Archived!
  • skx/tunneller - Allow internal services, running on localhost, to be accessed over the internet.. [GNU GPLv2] (⭐️491) Archived!
  • skx/webmail - A golang webmail server. [GNU GPLv2] (⭐️54) Archived!
  • skynetservices/skydns - DNS service discovery for etcd [MIT License] (⭐️2205)
  • skynetservices/skydns1 - DNS for skynet or any other service discovery [MIT License] (⭐️523)
  • slack-go/slack - Slack API in Go [BSD 2-Clause "Simplified" License] (⭐️4923)
  • slackhq/go-audit - go-audit is an alternative to the auditd daemon that ships with many distros [MIT License] (⭐️1655)
  • slackhq/nebula - A scalable overlay networking tool with a focus on performance, simplicity and security [MIT License] (⭐️17136)
  • slicebit/qb - The database toolkit for go [GNU LGPLv2.1] (⭐️514)
  • slimtoolkit/slim - Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source) [Apache License 2.0] (⭐️23120)
  • smallstep/cli - 🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc. [Apache License 2.0] (⭐️4178)
  • solo-io/unik - The Unikernel & MicroVM Compilation and Deployment Platform [Apache License 2.0] (⭐️2810)
  • sosedoff/gitkit - Git toolkit for Go: Smart HTTP server, SSH server, hook receiver [MIT License] (⭐️314)
  • sourcegraph/appdash - Application tracing system for Go, based on Google's Dapper. (⭐️1710) Archived!
  • sourcegraph/checkup - Distributed, lock-free, self-hosted health checks and status pages [MIT License] (⭐️3460)
  • sourcegraph/syntaxhighlight - Go package for syntax highlighting of code [Modified BSD License] (⭐️271)
  • sourcegraph/thyme - Automatically track which applications you use and for how long. [MIT License] (⭐️2240) Archived!
  • sourcegraph/webloop - WebLoop: Scriptable, headless WebKit with a Go API. Like PhantomJS, but for Go. [Modified BSD License] (⭐️1367)
  • spacecloud-io/space-cloud - Open source Firebase + Heroku to develop, scale and secure serverless apps on Kubernetes [Apache License 2.0] (⭐️3997)
  • SpecterOps/BloodHound - Six Degrees of Domain Admin [Apache License 2.0] (⭐️2940)
  • spilled-ink/spilld - Email server (⭐️314)
  • sqlc-dev/sqlc - Generate type-safe code from SQL [MIT License] (⭐️17305)
  • sqshq/sampler - Tool for shell commands execution, visualization and alerting. Configured with a simple YAML file. [GNU GPLv3] (⭐️14522)
  • src-d/gitbase - SQL interface to git repositories, written in Go. https://docs.sourced.tech/gitbase [Apache License 2.0] (⭐️2085)
  • src-d/go-license-detector - Reliable project licenses detector. (⭐️237)
  • src-d/go-mysql-server - An extensible MySQL server implementation in Go. [Apache License 2.0] (⭐️1036) Archived!
  • st3fan/tinydoh - Minimal DNS-Over-HTTPS Server [Mozilla Public License 2.0] (⭐️128)
  • stacklok/toolhive - ToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers. [Apache License 2.0] (⭐️1700)
  • stapelberg/airscan - Go package to scan paper documents 📄 from a scanner 🖨️ via the network 🕸️ using the Apple AirScan (eSCL) protocol. [Apache License 2.0] (⭐️166)
  • storozhukBM/verifier - Package verifier provides simple defensive programing primitives. [Apache License 2.0] (⭐️267)
  • storyicon/grbac - 👮 grbac is a fast, elegant and concise RBAC(role-based access control) framework [Apache License 2.0] (⭐️327)
  • superfly/litefs - FUSE-based file system for replicating SQLite databases across a cluster of machines [Apache License 2.0] (⭐️4729)
  • syncthing/syncthing - Open Source Continuous File Synchronization [Mozilla Public License 2.0] (⭐️81483)
  • sysdream/chashell - Chashell is a Go reverse shell that communicates over DNS. It can be used to bypass firewalls or tightly restricted networks. (⭐️1084)
  • t94j0/satellite - easy-to-use payload hosting [MIT License] (⭐️275)
  • tdewolff/minify - Go minifiers for web formats [MIT License] (⭐️4087)
  • teh-cmc/go-internals - A book about the internals of the Go programming language. (⭐️7930)
  • terraform-docs/terraform-docs - Generate documentation from Terraform modules in various output formats [MIT License] (⭐️4734)
  • terraform-linters/tflint - A Pluggable Terraform Linter [Mozilla Public License 2.0] (⭐️5666)
  • tgragnato/magnetico - Autonomous (self-hosted) BitTorrent DHT search engine suite [GNU AGPLv3] (⭐️129)
  • thaliaarchi/gocipher - A Go library implementing many classical ciphers [MIT License] (⭐️11)
  • thepudds/fzgo - fzgo is a prototype of "make fuzzing a first class citizen" in the go command. Supports rich signatures & generating fuzz functions. [Apache License 2.0] (⭐️114)
  • therecipe/qt - Qt binding for Go (Golang) with support for Windows / macOS / Linux / FreeBSD / Android / iOS / Sailfish OS / Raspberry Pi / AsteroidOS / Ubuntu Touch / JavaScript / WebAssembly [GNU LGPLv3] (⭐️10783)
  • threatgrid/jq-go - A Go language binding for the JQ JSON filter library [GNU GPLv2] (⭐️22)
  • threatgrid/jqpipe-go - A Go Wrapper for JQ [BSD 2-Clause "Simplified" License] (⭐️12)
  • tianon/rawdns - a direct, raw DNS interface to the Docker API [GNU GPLv3] (⭐️213)
  • tid4l/GoWard - A robust Red Team proxy written in Go. [GNU GPLv3] (⭐️164)
  • tidwall/buntdb - BuntDB is an embeddable, in-memory key/value database for Go with custom indexing and geospatial support [MIT License] (⭐️4842)
  • tidwall/redcon - Redis compatible server framework for Go [MIT License] (⭐️2300)
  • tidwall/summitdb - In-memory NoSQL database with ACID transactions, Raft consensus, and Redis API (⭐️1412) Archived!
  • timest/goscan - goscan is a simple and efficient IPv4 network scanner that discovers all active devices on local subnet. [Apache License 2.0] (⭐️798)
  • timwhitez/Doge-Assembly - Golang evasion tool, execute-assembly .Net file (⭐️98)
  • timwhitez/Doge-BlockDLLs - Preventing 3rd Party DLLs from Injecting into your Malware (⭐️25)
  • tingold/updatekate - A utility that updates a Kubernetes deployment based on a Quay.io webhook -- and itself emits a webhook on sucess [Apache License 2.0] (⭐️1)
  • tinygo-org/espflasher - Go CLI and library for flashing firmware to Espressif ESP8266 and ESP32-family microcontrollers [Modified BSD License] (⭐️81)
  • tinygo-org/tinygo - Go compiler for small places. Microcontrollers, WebAssembly (WASM/WASI), and command-line tools. Based on LLVM. (⭐️17319)
  • tj/go-termd - Package termd provides terminal markdown rendering, with code block syntax highlighting support. [MIT License] (⭐️224)
  • tmrts/boilr - ⚡ boilerplate template manager that generates files or directories from template repositories [Apache License 2.0] (⭐️1759)
  • tobias-kuendig/hacompanion - Daemon that sends local hardware information to Home Assistant [MIT License] (⭐️132)
  • tomnomnom/assetfinder - Find domains and subdomains related to a given domain [MIT License] (⭐️3568)
  • tomnomnom/gron - Make JSON greppable! [MIT License] (⭐️14418)
  • traefik/traefik - The Cloud Native Application Proxy [MIT License] (⭐️62507)
  • traefik/yaegi - Yaegi is Another Elegant Go Interpreter [Apache License 2.0] (⭐️8159)
  • trapion/faas - Function-as-a-Service for Docker [Apache License 2.0] (⭐️47)
  • travisjeffery/jocko - Kafka implemented in Golang with built-in coordination (No ZK dep, single binary install, Cloud Native) [MIT License] (⭐️5011)
  • TritonDataCenter/containerpilot - A service for autodiscovery and configuration of applications running in containers [Mozilla Public License 2.0] (⭐️1132)
  • tucnak/store - A dead simple configuration manager for Go applications [MIT License] (⭐️274)
  • turbot/steampipe - Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required. [GNU AGPLv3] (⭐️7749)
  • TwiN/gatus - Automated developer-oriented status page with alerting and incident support [Apache License 2.0] (⭐️10584)
  • twitchtv/twirp - A simple RPC framework with protobuf service definitions [Apache License 2.0] (⭐️7503)
  • twpayne/go-jsonstruct - Generate Go structs from multiple JSON or YAML objects. [BSD 2-Clause "Simplified" License] (⭐️361)
  • txthinking/brook - A cross-platform programmable network tool [GNU GPLv3] (⭐️15120)
  • txthinking/nami - A clean and tidy decentralized package manager. [GNU GPLv3] (⭐️354)
  • Tylous/Freeze - Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods [MIT License] (⭐️132)
  • Tylous/Limelighter - A tool for generating fake code signing certificates or signing real ones [MIT License] (⭐️970)
  • u-root/gobusybox - Tools for compiling many Go commands into one binary to save space. Builds are supported for vendor-based Go and module-based Go [Modified BSD License] (⭐️191)
  • u-root/u-root - A fully Go userland with Linux bootloaders! u-root can create a one-binary root file system (initramfs) containing a busybox-like set of tools written in Go. [Modified BSD License] (⭐️3011)
  • ua-nick/Data-Structures-and-Algorithms - Data Structures and Algorithms implementation in Go [MIT License] (⭐️2774)
  • udhos/conbox - conbox is a Go implementation of unix-like utilities as single static executable intended for small container images. [MIT License] (⭐️45)
  • UKHomeOffice/kd - Minimalistic kubernetes resources deployment tool with templating [MIT License] (⭐️88)
  • Ullaakut/nmap - Idiomatic nmap library for go developers [MIT License] (⭐️1040)
  • un-versed/whatsapp-cats - This a simple Whatsapp automation that sends random cat pictures when you receive "cat" in all chats and groups. 😽 (⭐️36)
  • unixpickle/model3d - Create & render beautiful 3D models [BSD 2-Clause "Simplified" License] (⭐️163)
  • unrolled/secure - HTTP middleware for Go that facilitates some quick security wins. [MIT License] (⭐️2338)
  • upmc-enterprises/kubernetes-secret-manager - Manage secrets with Vault inside a Kubernetes cluster (⭐️229)
  • ursiform/sleuth - A Go library for master-less peer-to-peer autodiscovery and RPC between HTTP services [MIT License] (⭐️388)
  • usememos/memos - Open-source, self-hosted note-taking tool built for quick capture. Markdown-native, lightweight, and fully yours. [MIT License] (⭐️58604)
  • valyala/fasthttp - Fast HTTP package for Go. Tuned for high performance. Zero memory allocations in hot paths. Up to 10x faster than net/http [MIT License] (⭐️23315)
  • varbhat/exatorrent - 🧲 Easy to Use Torrent Client. Can be hosted in Cloud. Files can be streamed in Browser/Media Player. [GNU GPLv3] (⭐️1973) Archived!
  • vektah/gorunpkg - go run, the way it should be (⭐️27) Archived!
  • VictoriaMetrics/metrics - Lightweight alternative to github.com/prometheus/client_golang [MIT License] (⭐️687)
  • VictoriaMetrics/VictoriaMetrics - VictoriaMetrics: fast, cost-effective monitoring solution and time series database [Apache License 2.0] (⭐️16700)
  • vieux/docker-volume-sshfs - sshfs docker volume plugin [MIT License] (⭐️599) Archived!
  • vitessio/vitess - Vitess is a database clustering system for horizontal scaling of MySQL. [Apache License 2.0] (⭐️20867)
  • vmihailenco/msgpack - msgpack.org[Go] MessagePack encoding for Golang [BSD 2-Clause "Simplified" License] (⭐️2648)
  • vmware-archive/healthcheck - A library for implementing Kubernetes liveness and readiness probe handlers in your Go application. [Apache License 2.0] (⭐️686) Archived!
  • vugu/vugu - Vugu: A modern UI library for Go+WebAssembly (experimental) [MIT License] (⭐️4988)
  • vyrus001/go-mimikatz - A wrapper around a pre-compiled version of the Mimikatz executable for the purpose of anti-virus evasion. (⭐️629)
  • wader/fq - jq for binary formats - tool, language and decoders for working with binary and text formats (⭐️10471)
  • wagoodman/dive - A tool for exploring each layer in a docker image [MIT License] (⭐️53711)
  • wasmerio/wasmer-go - 🐹🕸️ WebAssembly runtime for Go [MIT License] (⭐️2952)
  • wazero/wazero - wazero: the zero dependency WebAssembly runtime for Go developers [Apache License 2.0] (⭐️6056)
  • wcharczuk/go-chart - go chart is a basic charting library in go. [MIT License] (⭐️3989) Archived!
  • weaveworks/weave - Simple, resilient multi-host containers networking and more. [Apache License 2.0] (⭐️6618) Archived!
  • webui-dev/go-webui - Use any web browser as GUI, with Go in the backend and modern web technologies in the frontend. [MIT License] (⭐️261)
  • wendigo/go-bind-plugin - go-bind-plugin generates API for exported plugin symbols (-buildmode=plugin) - go1.8+ only (http://golang.org/pkg/plugin) [Apache License 2.0] (⭐️182)
  • whytheplatypus/switchboard - Simple mDNS based reverse proxy for personal infrastructure. [The Unlicense] (⭐️287)
  • willscott/go-nfs - golang NFSv3 server [Apache License 2.0] (⭐️770)
  • windtf/wireproxy - Wireguard client that exposes itself as a socks5 proxy [ISC License] (⭐️5513)
  • woodpecker-ci/woodpecker - Woodpecker is a simple, yet powerful CI/CD engine with great extensibility. [Apache License 2.0] (⭐️6777)
  • Workiva/go-datastructures - A collection of useful, performant, and threadsafe Go datastructures. [Apache License 2.0] (⭐️7913)
  • wspl/go-quickjs - QuickJS bindings for Go [MIT License] (⭐️158)
  • WTFox/jsonfind - A fast and lightweight utility to easily find paths to values in JSON files. [MIT License] (⭐️31)
  • wtfutil/wtf - The personal information dashboard for your terminal [Mozilla Public License 2.0] (⭐️16833)
  • wthorp/crypto8949 - Takes a spreadsheet of cryptocurrency transactions and outputs an IRS form 8949 [Apache License 2.0] (⭐️7)
  • xarantolus/upduck - simple web server that integrates with DuckDNS & Let's Encrypt [MIT License] (⭐️100) Archived!
  • xeoncross/goworkqueue - Super simple, concurrent worker queue in golang (⭐️68)
  • xing/kubernetes-oom-event-generator - Generate a Kubernetes Event when a Pod's container has been OOMKilled [Apache License 2.0] (⭐️170)
  • xitongsys/gogw - A fast port forwarding or reverse forwarding tool over HTTP1.0/HTTP1.1 (⭐️52)
  • xlab/android-go - The android-go project provides a platform for writing native Android apps in Go programming language. [MIT License] (⭐️1087)
  • xo/usql - Universal command-line interface for SQL databases [MIT License] (⭐️9897)
  • xyproto/algernon - Small self-contained pure-Go web server with Lua, Teal, Markdown, Ollama, HTTP/2, QUIC, Redis, SQLite and PostgreSQL support ++ [Modified BSD License] (⭐️2997)
  • xyproto/wallutils - 🌆 Utilities for handling monitors, resolutions, wallpapers and timed wallpapers [Modified BSD License] (⭐️516)
  • yaacov/kubectl-sql - kubectl-sql is a kubectl plugin that use SQL like language to query the Kubernetes cluster manager [Apache License 2.0] (⭐️74)
  • YelpArchive/dockersh - A shell which places users into individual docker containers [Apache License 2.0] (⭐️1274) Archived!
  • yggdrasil-network/yggdrasil-go - An experiment in scalable routing as an encrypted IPv6 overlay network (⭐️4958)
  • yhat/scrape - A simple, higher level interface for Go web scraping. [BSD 2-Clause "Simplified" License] (⭐️1514) Archived!
  • yongman/leto - A key value storage example powered by hashicorp raft and BadgerDB [MIT License] (⭐️102)
  • yongman/tidis - Distributed transactional NoSQL database, Redis protocol compatible using tikv as backend [MIT License] (⭐️1446)
  • yudai/gotty - Share your terminal as a web application [MIT License] (⭐️19454)
  • yvesago/shodan-cli - Simple golang shodan cli [MIT License] (⭐️49)
  • Zamony/wmwm - Pure Go autotiling window manager [MIT License] (⭐️140) Archived!
  • zapier/preoomkiller-controller - Preoomkiller Controller evicts pods gracefully before they get OOMKilled by Kubernetes [MIT License] (⭐️27)
  • zincsearch/zincsearch - ZincSearch . A lightweight alternative to elasticsearch that requires minimal resources, written in Go. (⭐️17812)
  • ziutek/rrd - Bindings to rrdtool (⭐️154)
  • zmap/zgrab2 - Fast Application Layer Scanner (⭐️2101)
  • zquestz/s - Open a web search in your terminal. [MIT License] (⭐️2544)
  • Zxilly/go-size-analyzer - A tool for analyzing the size of compiled Go binaries, offering cross-platform support, detailed breakdowns, and multiple output formats. [GNU AGPLv3] (⭐️2115)
  • zyn3rgy/ClickonceHunter - Golang search engine scraper intended for identification of published ClickOnce deployments [GNU GPLv3] (⭐️92)
  • zznop/sploit - Go package that aids in binary analysis and exploitation [MIT License] (⭐️179)

Groovy

  • atcol/docker-registry-ui - A web frontend/UI for easy private/local Docker Registry integration [GNU GPLv3] (⭐️895) Archived!

HCL

HTML

  • aekaplan/grid - A simple guide to responsive design. (⭐️1270)
  • akivaron/miminium - DISCONTINUED - Miminium Admin Template [MIT License] (⭐️496)
  • allo-/ffprofile - A tool to create firefox profiles with personalized defaults. [GNU AGPLv3] (⭐️848)
  • alpinejs/alpine - A rugged, minimal framework for composing JavaScript behavior in your markup. [MIT License] (⭐️31408)
  • ankythshukla/underexpress - A free, responsive, ready to use website ui kit, built with bootstrap 4. [MIT License] (⭐️212)
  • arnaudsm/raito - Mini Markdown Wiki/CMS in 8kb of JavaScript [MIT License] (⭐️133)
  • aviranzerioniac/awesome-piracy - This is oftentimes a clone of the original awesome piracy repo. At times, i just go along editing a little too many links from the collection, and it becomes something else. [Creative Commons Zero v1.0 Universal] (⭐️467)
  • benpickles/peity - 🍰 Progressive pie, donut, bar and line charts [MIT License] (⭐️4227)
  • bitvijays/bitvijays.github.io - (⭐️52)
  • calebmpeterson/rebootstrap - Fresh themes for Bootstrap (⭐️3)
  • certsimple/nginx-http2-load-balancing-config - An nginx config for your first million users (⭐️356)
  • cferdinandi/atomic - A tiny, Promise-based vanilla JS Ajax/HTTP plugin with great browser support. [MIT License] (⭐️541)
  • CheckPointSW/Evasions - Evasions encyclopedia gathers methods used by malware to evade detection when run in virtualized environment. Methods are grouped into categories for ease of searching and understanding. Also provided are code samples, signature recommendations and countermeasures within each category for the described techniques. [MIT License] (⭐️444)
  • cipher387/osint_stuff_tool_collection - A collection of several hundred online tools for OSINT (⭐️7738)
  • clong/DetectionLab - Automate the creation of a lab environment complete with security tooling and logging best practices [MIT License] (⭐️4935)
  • ColorlibHQ/gentelella - Free Bootstrap 5 Admin Dashboard Template [MIT License] (⭐️21325)
  • coreui/coreui-free-bootstrap-admin-template - Free Bootstrap Admin & Dashboard Template Built for AI-Assisted Development [MIT License] (⭐️12223)
  • coreui/coreui-free-bootstrap-admin-template-ajax - CoreUI Ajax is free bootstrap admin template [MIT License] (⭐️61) Archived!
  • creativetimofficial/light-bootstrap-dashboard-angular2 - Light Bootstrap Dashboard Angular 2 [MIT License] (⭐️321)
  • creativetimofficial/material-kit - Free and Open Source UI Kit for Bootstrap 5, React, Vue.js, React Native and Sketch based on Google's Material Design [MIT License] (⭐️5931)
  • cstate/cstate - 🔥 Open source static (serverless) status page. Uses hyperfast Go & Hugo, minimal HTML/CSS/JS, customizable, outstanding browser support (IE8+), preloaded CMS, read-only API, badges & more. [MIT License] (⭐️2843)
  • davatron5000/FitText.js - A jQuery plugin for inflating web type (⭐️6736)
  • davecheney/the-zen-of-go - https://the-zen-of-go.netlify.com (⭐️246)
  • DeepSociety/AIOPhish - [GNU GPLv3] (⭐️349)
  • DeviaVir/zenbot - Zenbot is a command-line cryptocurrency trading bot using Node.js and MongoDB. [MIT License] (⭐️8281) Archived!
  • drduh/YubiKey-Guide - Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto. [MIT License] (⭐️12260)
  • edwardtufte/tufte-css - Style your webpage like Edward Tufte’s handouts. [MIT License] (⭐️6460)
  • ellekasai/resumecards - [Unmaintained] A Markdown based resume generator. It looks great on mobile/desktop and can be saved as PDF. (⭐️741)
  • everestpipkin/tools-list - Open source, experimental, and tiny tools roundup (⭐️1769)
  • f/prompts.chat - f.k.a. Awesome ChatGPT Prompts. Share, discover, and collect prompts from the community. Free and open source — self-host for your organization with complete privacy. [Creative Commons Zero v1.0 Universal] (⭐️157711)
  • FoamyGuy/CircuitPython_Web_CTF - [MIT License] (⭐️1)
  • foundation/foundation-emails - Quickly create responsive HTML emails that work on any device and client. Even Outlook. [MIT License] (⭐️7790)
  • froala/design-blocks - A set of 170+ Bootstrap based design blocks ready to be used to create clean modern websites. (⭐️13790)
  • gowebexamples/gowebexamples - Go Web Examples Generator [MIT License] (⭐️284)
  • grassmunk/Chicago95 - A rendition of everyone's favorite 1995 Microsoft operating system for Linux. (⭐️5697)
  • hdks-bug/exploitnotes - A security research site. (⭐️796)
  • honze-net/nmap-bootstrap-xsl - A Nmap XSL implementation with Bootstrap. (⭐️968)
  • htmlstreamofficial/awesome-dashboard-ui-kit - Awesome Dashboard UI Kit is a beautiful Open Source Bootstrap 4 Dashboard UI Kit crafted by Htmlstream. [MIT License] (⭐️124)
  • htmlstreamofficial/stream-ui-kit - Stream - UI Kit. A beautiful Open Source Bootstrap 4 UI Kit under MIT license for better web! [MIT License] (⭐️340)
  • hunzaboy/CodedMailsFree - Ready to use 50+ responsive HTML email templates - Codedmails Free (⭐️429)
  • im-tomu/tomu.im - tomu.im website (⭐️75)
  • imthenachoman/nGitHubTOC - a simple web page to quickly create table of content markdown for GitHub markdown files [MIT License] (⭐️54)
  • invertase/rdash-angular - AngularJS implementation of the RDash admin dashboard theme [MIT License] (⭐️4653) Archived!
  • JPCERTCC/ToolAnalysisResultSheet - Tool Analysis Result Sheet (⭐️358)
  • juliocesarfort/public-pentesting-reports - A list of public penetration test reports published by several consulting firms and academic security groups. (⭐️9484)
  • keen/dashboards - Responsive dashboard templates 📊✨ [MIT License] (⭐️11034)
  • kristopolous/BOOTSTRA.386 - A vintage 1980s DOS inspired Twitter Bootstrap theme [Apache License 2.0] (⭐️6850)
  • leemunroe/responsive-html-email-template - A free simple responsive HTML email template [MIT License] (⭐️13704)
  • mixmark-io/turndown - 🛏 An HTML to Markdown converter written in JavaScript [MIT License] (⭐️11013)
  • mono-company/mono-icons - (⭐️996)
  • MtnMesh/mtnmesh.github.io - MtnMesh GitHub Pages (⭐️17)
  • nu11secur1ty/Windows10Exploits - Microsoft » Windows 10 : Security Vulnerabilities (⭐️922)
  • owickstrom/the-monospace-web - A minimalist design exploration [MIT License] (⭐️3122)
  • oxalorg/sakura - 🌸 a minimal css framework/theme. [MIT License] (⭐️4361)
  • payloadartist/offensive-chatgpt - Offensive security use cases of ChatGPT (⭐️75)
  • phishman3579/android-motion-detection - Android code to detection motion by comparing two images. [Apache License 2.0] (⭐️102)
  • potch/unmaintained.tech - No Maintenance Intended (⭐️649)
  • privacytools/privacytools.io - 🛡🛠 You are being watched. Protect your privacy against global mass surveillance. [Creative Commons Zero v1.0 Universal] (⭐️3149) Archived!
  • rapid7/metasploitable3 - Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities. (⭐️5505)
  • redfish64/paper_otp - One time pad message which can be decoded using only paper and a light source [MIT License] (⭐️45)
  • ripienaar/free-for-dev - A list of SaaS, PaaS and IaaS offerings that have free tiers of interest to devops and infradev (⭐️120588)
  • rs/dashplay - Easy dashboard screen management [MIT License] (⭐️67)
  • SamPom100/UnusualVolumeDetector - Gets the last 5 months of volume history for every ticker, and alerts you when a stock's volume exceeds 10 standard deviations from the mean within the last 3 days [MIT License] (⭐️973)
  • sendwithus/templates - Sendwithus Open Source Email Templates [Apache License 2.0] (⭐️1817)
  • sensepost/mana - DEPRECATED mana toolkit for wifi rogue AP attacks and MitM (⭐️1097)
  • sovereign/sovereign - A set of Ansible playbooks to build and maintain your own private cloud: email, calendar, contacts, file sync, IRC bouncer, VPN, and more. (⭐️10469)
  • SpacehuhnTech/HackHeld - Hackable Handheld (⭐️267)
  • strandjs/IntroLabs - These are the labs for my Intro class. Yes, this is public. Yes, this is intentional. (⭐️1772)
  • tabler/tabler - Tabler is free and open-source HTML Dashboard UI Kit built on Bootstrap [MIT License] (⭐️40919)
  • themesberg/volt-bootstrap-5-dashboard - Free and open source Bootstrap 5 Admin Dashboard Template with vanilla Javascript [MIT License] (⭐️2681)
  • threatexpress/metatwin - The project is designed as a file resource cloner. Metadata, including digital signature, is extracted from one file and injected into another. [MIT License] (⭐️370)
  • topmonks/solidity_quick_ref - Quick reference for Solidity language [MIT License] (⭐️28) Archived!
  • tylercrumpton/crump-bingo - A cute little HTML+CSS bingo board for things I think would be awesome to accomplish this year! [MIT License] (⭐️3)
  • vincentdoerig/latex-css - LaTeX.css is a CSS library that makes your website look like a LaTeX document [MIT License] (⭐️3441)
  • WADComs/WADComs.github.io - WADComs is an interactive cheat sheet, containing a curated list of offensive security tools and their respective commands, to be used against Windows/AD environments. [GNU GPLv3] (⭐️1648)
  • windmill-labs/windmill - Open-source developer platform to power your entire infra and turn scripts into webhooks, workflows and UIs. Fastest workflow engine (13x vs Airflow). Open-source alternative to Retool and Temporal. (⭐️16157)
  • yogeshojha/rengine - reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless. [GNU GPLv3] (⭐️8543)
  • zardus/wargame-nexus - A sorted and updated list of security wargame sites. [GNU GPLv3] (⭐️1192)
  • zserge/awfice - The world smallest office suite [MIT License] (⭐️3634)

Hack

Handlebars

  • flatlogic/sing-app - 💥Free and open-source admin dashboard template built with Bootstrap 4.5 💥 [MIT License] (⭐️1271)

Haskell

  • CDSoft/pp - PP - Generic preprocessor (with pandoc in mind) - macros, literate programming, diagrams, scripts... [GNU GPLv3] (⭐️257) Archived!
  • fossas/fossa-cli - Fast, portable and reliable dependency analysis for any codebase. Supports license & vulnerability scanning for large monoliths. Language-agnostic; integrates with 20+ build systems. (⭐️1472)
  • hadolint/hadolint - Dockerfile linter, validate inline bash, written in Haskell [GNU GPLv3] (⭐️12044)
  • jaspervdj/patat - Terminal-based presentations using Pandoc [GNU GPLv2] (⭐️2696)
  • koalaman/shellcheck - ShellCheck, a static analysis tool for shell scripts [GNU GPLv3] (⭐️39243)
  • marhop/literate-binary - Integrate handcrafted binary and documentation [MIT License] (⭐️36)
  • michowski/jsn - An absolutely simple & terse CLI app to manipulate JSON data [MIT License] (⭐️111)
  • phuhl/linux_notification_center - A notification daemon/center for linux [Modified BSD License] (⭐️1050)

Inno Setup

JSON

  • upptime/upptime - ⬆️ GitHub Actions uptime monitor & status page by @AnandChowdhary [MIT License] (⭐️16967)

Java

  • amitshekhariitbhu/Fast-Android-Networking - 🚀 A Complete Fast Android Networking Library that also supports HTTP/2 🚀 [Apache License 2.0] (⭐️5891)
  • appium-boneyard/sign - Sign.jar automatically signs an apk with the Android test certificate. (⭐️428)
  • asLody/AndHook - Android dynamic instrumentation framework [MIT License] (⭐️781)
  • Bearded-Hen/Android-Bootstrap - Bootstrap style widgets for Android, with Glyph Icons [MIT License] (⭐️7252)
  • caseylmanus/go-react-native - (⭐️168)
  • chrisk44/Hijacker - Aircrack, Airodump, Aireplay, MDK3 and Reaver GUI Application for Android [GNU GPLv3] (⭐️2520) Archived!
  • factionsecurity/faction - Pen Test Report Generation and Assessment Collaboration [GNU GPLv2] (⭐️594)
  • federicodotta/Brida - The new bridge between Burp Suite and Frida! [MIT License] (⭐️1865)
  • ggsava/block-this - Block This - FREE DNS based Ad Blocker for Android [GNU GPLv3] (⭐️375)
  • guardianproject/lildebi - UNMAINTAINED please adopt! we can no longer maintain this [GNU GPLv3] (⭐️233) Archived!
  • hyperboria/android - Android app for mesh networking with cjdns [GNU GPLv3] (⭐️163)
  • Jasonette/JASONETTE-Android - 📡 Native App over HTTP, on Android (⭐️1594)
  • jenkinsci/blueocean-plugin - Blue Ocean is a reboot of the Jenkins CI/CD User Experience [MIT License] (⭐️2884)
  • leebyron/streamgraph - Processing applet which creates the images seen in the Streamgraph paper (⭐️285)
  • LSPosed/LSPosed - LSPosed Framework [GNU GPLv3] (⭐️23367) Archived!
  • M66B/element53 - DNS tunnel (⭐️62) Archived!
  • MagicTunnel/MagicTunnelAndroid - DNS Tunneling App for Android (⭐️34)
  • Marlinski/Rumble - Rumble allows the sharing of messages and pictures without relying on the Internet, in a Delay Tolerant Fashion following the Store-Carry and Forward paradigm [GNU GPLv3] (⭐️308)
  • moloch--/burp-multiplayer - Burp with Friends (⭐️102)
  • OpenAPITools/openapi-generator - OpenAPI Generator allows generation of API client libraries (SDK generation), server stubs, documentation and configuration automatically given an OpenAPI Spec (v2, v3) [Apache License 2.0] (⭐️26071)
  • paddybyers/anode - Android framework for node.js applications (⭐️581)
  • payatu/diva-android - DIVA Android - Damn Insecure and vulnerable App for Android [GNU GPLv3] (⭐️1094)
  • redpen-cc/redpen - RedPen is an open source proofreading tool to check if your technical documents meet the writing standard. RedPen supports various markup text formats (Markdown, Textile, AsciiDoc, Re:VIEW, reStructuredText and LaTeX). [Apache License 2.0] (⭐️604)
  • rewanthtammana/Damn-Vulnerable-Bank - Damn Vulnerable Bank is designed to be an intentionally vulnerable android application. This provides an interface to assess your android application security hacking skills. [MIT License] (⭐️742)
  • RikudouSage/AiWallpaperChanger - Generate a new wallpaper every hour on your Android phone. [MIT License] (⭐️8)
  • rtyley/agit - Agit - Git client for Android [GNU GPLv3] (⭐️518)
  • sheimi/SGit - A Git client for Android. [GNU GPLv3] (⭐️375)
  • shellsharks/assorted - (⭐️15)
  • termux/termux-app - Termux - a terminal emulator application for Android OS extendible by variety of packages. (⭐️52998)
  • theonedev/onedev - Git Server with CI/CD, Kanban, and Packages. Seamless integration. Unparalleled experience. [MIT License] (⭐️14834)
  • victordiaz/PHONK - PHONK is a coding playground for new and old Android devices [GNU GPLv3] (⭐️497)
  • xjcook/ShowDialpad - [Xposed] [MOD] Automatically show dialpad in Google Dialer [Apache License 2.0] (⭐️3)
  • yacy/yacy_search_server - Distributed Peer-to-Peer Web Search Engine and Intranet Search Appliance (⭐️3864)
  • yeriomin/YalpStore - Download apks from Google Play Store [GNU GPLv2] (⭐️2503)

JavaScript

  • 0dayCTF/reverse-shell-generator - Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs) [MIT License] (⭐️3893)
  • AD-Security/AD_Miner - AD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses [GNU GPLv3] (⭐️1514)
  • afonsof/jenkins-material-theme - Beautify your Jenkins with the Material Design theme! [MIT License] (⭐️1718)
  • Ahaz1701/EvilWorker - A new AiTM attack framework — based on leveraging service workers — designed to conduct credential phishing campaigns. Thanks to its minimalist, robust, and highly adaptable architecture, this solution can be easily deployed on PaaS. [BSD 2-Clause "Simplified" License] (⭐️150)
  • ahmadnassri/action-dependabot-auto-merge - Automatically merge Dependabot PRs when version comparison is within range [MIT License] (⭐️356)
  • akafugu/MIFARE-Classic-1K-Access-Bits-Calculator - (⭐️32)
  • akveo/blur-admin - AngularJS Bootstrap Admin Panel Framework (⭐️11319)
  • alexcasalboni/aws-lambda-power-tuning - AWS Lambda Power Tuning is an open-source tool that can help you visualize and fine-tune the memory/power configuration of Lambda functions. It runs in your own AWS account - powered by AWS Step Functions - and it supports three optimization strategies: cost, speed, and balanced. [Apache License 2.0] (⭐️5993)
  • alvaromontoro/almond.css - Collection of CSS styles to make simple websites look nicer [MIT License] (⭐️1167)
  • amark/gun - An open source cybersecurity protocol for syncing decentralized graph data. (⭐️19008)
  • angularjs-nvd3-directives/angularjs-nvd3-directives - Angular.js directives for nvd3.js [Apache License 2.0] (⭐️1167)
  • anuraghazra/github-readme-stats - ⚡ Dynamically generated stats for your github readmes [MIT License] (⭐️78975)
  • apsdehal/awesome-ctf - A curated list of CTF frameworks, libraries, resources and softwares [Creative Commons Zero v1.0 Universal] (⭐️11430)
  • arfct/itty-bitty - Itty.bitty is a tool to create links that contain small sites [MIT License] (⭐️3450)
  • arschles/go-in-5-minutes - Code and website for Go in 5 Minutes Screencasts [Apache License 2.0] (⭐️1352)
  • asciinema/asciinema-player - Web player for terminal session recordings and streams [Apache License 2.0] (⭐️2875)
  • astefanutti/kubebox - ⎈❏ Terminal and Web console for Kubernetes [MIT License] (⭐️2227)
  • atomiks/floating-ui - JavaScript positioning library for tooltips, popovers, dropdowns, and more [MIT License] (⭐️1533) Archived!
  • balanced/balanced-dashboard - The Balanced dashboard. (⭐️2264)
  • benjojo/Gmail_GeoIPTagger - An app script that will label your email from where in the world it was sent from [MIT License] (⭐️89)
  • benweet/stackedit - In-browser Markdown editor [Apache License 2.0] (⭐️22877)
  • bketelsen/slides - create, live-preview, edit, and publish reveal.js slide decks (⭐️86)
  • blackhat-go/bhg - Code samples for No Starch Press Black Hat Go [MIT License] (⭐️1239)
  • breser/git2consul - Mirrors the contents of a git repository into Consul KVs. (⭐️769)
  • browsh-org/browsh - A fully-modern text-based browser, rendering to TTY and browsers [GNU LGPLv2.1] (⭐️18711)
  • carbon-app/carbon - 🖤 Create and share beautiful images of your source code [MIT License] (⭐️36005)
  • chbrown/unmap - Unpack a JavaScript Source Map back into filesystem structure (⭐️186)
  • chieffancypants/angular-loading-bar - A fully automatic loading / progress bar for your angular apps. [MIT License] (⭐️5130) Archived!
  • chill117/proxy-lists - Node.js module and CLI tool to get proxies from publicly available proxy lists. [MIT License] (⭐️632)
  • chintanbanugaria/92five - Self hosted project management application (⭐️1157)
  • choojs/choo - 🚂🚋 - sturdy 4kb frontend framework [MIT License] (⭐️6772)
  • chr15m/bugout - Back end web app services over WebRTC. [MIT License] (⭐️636)
  • cjb/GitTorrent - A decentralization of GitHub using BitTorrent and Bitcoin [MIT License] (⭐️4772)
  • cjb/serverless-webrtc - A demo of using WebRTC with no signaling server. (⭐️1568)
  • Coalfire-Research/npk - A mostly-serverless distributed hash cracking platform (⭐️823)
  • codebox/homoglyph - A big list of homoglyphs and some code to detect them [MIT License] (⭐️631)
  • comoyo/ffos-list-detail - A list/detail/view template for an Open Web App [MIT License] (⭐️366) Archived!
  • copy/v86 - x86 PC emulator and x86-to-wasm JIT, running in the browser [BSD 2-Clause "Simplified" License] (⭐️22398)
  • creationix/js-git - A JavaScript implementation of Git. [MIT License] (⭐️3845)
  • cure53/H5SC - HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors [Mozilla Public License 2.0] (⭐️2989)
  • D00MFist/PersistentJXA - Collection of macOS persistence methods and miscellaneous tools in JXA [Modified BSD License] (⭐️287)
  • dariusk/rss-to-activitypub - An RSS to ActivityPub converter. [MIT License] (⭐️582)
  • derhuerst/tcp-over-websockets - Tunnel TCP through WebSockets. [ISC License] (⭐️715)
  • devgutt/wdr-render-basic - [MIT License] (⭐️88)
  • dhleong/reverb - Unofficial Push-based Amazon Echo API (⭐️11)
  • dhowe/AdNauseamV1 - *** This is not the current AdNauseam repository: please find the current repo here: [GNU GPLv3] (⭐️382)
  • djenriquez/vault-ui - Vault-UI — A beautiful UI to manage your Vault, written in React (⭐️1308) Archived!
  • dockersamples/docker-swarm-visualizer - A visualizer for Docker Swarm Mode using the Docker Remote API, Node.JS, and D3 [Apache License 2.0] (⭐️3351)
  • DockerSecurityPlayground/DSP - A Microservices-based framework for the study of Network Security and Penetration Test techniques [MIT License] (⭐️630)
  • dolevf/Damn-Vulnerable-GraphQL-Application - Damn Vulnerable GraphQL Application is an intentionally vulnerable GraphQL service implementation designed for learning about and practising GraphQL Security. [MIT License] (⭐️1676)
  • dortania/OpenCore-Install-Guide - Repo for the OpenCore Install Guide (⭐️4166)
  • dstein64/workflows - View the status of GitHub workflows. [MIT License] (⭐️12)
  • Dukweeno/Duckuino - Simple DuckyScript to Arduino C converter. [MIT License] (⭐️373)
  • Dynalon/mdwiki - CMS/Wiki system using Javascript for 100% client side single page application using Markdown. (⭐️3199)
  • egoist/maid - Markdown driven task runner. [MIT License] (⭐️2035)
  • eirikb/weecloud - WeeChat web interface (⭐️124)
  • evilsocket/arc - A manager for your secrets. [GNU GPLv3] (⭐️961)
  • Excelian/Angular-Material-ECMA6-Dashboard - This is an opinionated AngularJS dashboard using Material Design, ECMA6 and Traceur [GNU GPLv2] (⭐️127)
  • feathericons/feather - Simply beautiful open-source icons [MIT License] (⭐️25868)
  • fluid-player/fluid-player - Fluid Player - an open source VAST compliant HTML5 video player [MIT License] (⭐️931)
  • forbesmyester/esqlate - Build minimum viable admin panels quickly with just SQL [GNU GPLv3] (⭐️1377)
  • Freeboard/freeboard - A damn-sexy, open source real-time dashboard builder for IOT and other web mashups. A free open-source alternative to Geckoboard. [MIT License] (⭐️6498)
  • gabemarshall/microctfs - Small CTF challenges running on Docker (⭐️158)
  • gchq/CyberChef - The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis [Apache License 2.0] (⭐️34504)
  • gethomepage/homepage - A highly customizable homepage (or startpage / application dashboard) with Docker and service API integrations. [GNU GPLv3] (⭐️29373)
  • gildas-lormeau/Polyglot-HTML-ZIP-PNG - Learn How to Create HTML/ZIP/PNG Polyglot Files! [MIT License] (⭐️248)
  • git-tips/tips - Most commonly used git tips and tricks. [MIT License] (⭐️21693)
  • GladysAssistant/Gladys - A privacy-first, open-source home assistant [Apache License 2.0] (⭐️3040)
  • gloomyson/SC_Js - Classic RTS game using html5 canvas and javascript, only js codes, all copyrighted materials removed [MIT License] (⭐️590)
  • goabstract/Awesome-Design-Tools - The best design tools and plugins for everything 👉 [MIT License] (⭐️39496)
  • gokrazy/gokrazy - turn your Go program(s) into an appliance running on the Raspberry Pi 3, Pi 4, Pi 5, Pi Zero 2 W, or PCs (x86_64 or ARM64)! [Modified BSD License] (⭐️3454)
  • gorhill/uMatrix - uMatrix: Point and click matrix to filter net requests according to source, destination and type [GNU GPLv3] (⭐️4669) Archived!
  • graphile/graphile-engine - Monorepo home of graphile-build, graphile-build-pg, graphile-utils, postgraphile-core and graphql-parse-resolve-info. Build a high-performance easily-extensible GraphQL schema by combining plugins! (⭐️765)
  • grnadav/databind - Two way data binding, dependant on nothing, not opinionated (⭐️95)
  • gwatts/jquery.sparkline - A plugin for the jQuery javascript library to generate small sparkline charts directly in the browser (⭐️1238)
  • hakimel/reveal.js - The HTML Presentation Framework [MIT License] (⭐️70936)
  • HumbleSoftware/Flotr2 - Graphs and Charts for Canvas in JavaScript. [MIT License] (⭐️2442)
  • infinitered/apisauce - Axios + standardized errors + request/response transforms. [MIT License] (⭐️2885)
  • instantpage/instant.page - Make your site’s pages instant in 1 minute and improve your conversion rate by 1% [MIT License] (⭐️6221)
  • jakswa/martai-old - (DEPRECATED) I rewrote this in ionic, then react, look at jakswa/marta_ui (⭐️17)
  • jcchurch/HuntTheYetiAlexa - Play the game Hunt the Yeti on the Amazon Echo (⭐️17)
  • jheising/HAPI - A spec for Humanized web APIs, aka HAPI. The goal of HAPI is to define a standard for creating Web-based APIs that are machine ready but human friendly— a self-documenting API. [MIT License] (⭐️294)
  • jtrussell/bedecked - Turn markdown files into html presentations you can share with dropbox (or S3, or...) [MIT License] (⭐️109)
  • ks888/LambStatus - [Maintenance mode] Serverless Status Page System [Apache License 2.0] (⭐️1291) Archived!
  • KuroLabs/stegcloak - Hide secrets with invisible characters in plain text securely using passwords 🧙🏻‍♂️⭐ (⭐️3780)
  • lair-framework/lair - Lair is a reactive attack collaboration framework and web application built with meteor. [MIT License] (⭐️383)
  • Laverna/laverna - Laverna is a JavaScript note taking application with Markdown editor and encryption support. Consider it like open source alternative to Evernote. [Mozilla Public License 2.0] (⭐️9204)
  • lirantal/dockly - Immersive terminal interface for managing docker containers and services [MIT License] (⭐️4013)
  • loadingio/css-spinner - small, elegant pure css spinner for ajax or loading animation (⭐️1765)
  • logicalhacking/DVHMA - Damn Vulnerable Hybrid Mobile App (DVHMA) is an hybrid mobile app (for Android) that intentionally contains vulnerabilities. [Apache License 2.0] (⭐️269)
  • lrsjng/h5ai - HTTP web server index for Apache httpd, lighttpd and nginx. (⭐️6063)
  • lukeed/ganalytics - A tiny (312B) client-side module for tracking with Google Analytics [MIT License] (⭐️576)
  • mandatoryprogrammer/CursedChrome - Chrome-extension implant that turns victim Chrome browsers into fully-functional HTTP proxies, allowing you to browse sites as your victims. [MIT License] (⭐️1713)
  • maryrosecook/gitlet - Git implemented in JavaScript [MIT License] (⭐️2163)
  • Mermade/widdershins - OpenAPI / Swagger, AsyncAPI & Semoasa definitions to (re)Slate compatible markdown [MIT License] (⭐️1568)
  • mermaidjs/mermaid.cli - Development has been moved to https://github.com/mermaid-js/mermaid-cli [MIT License] (⭐️1090) Archived!
  • Mini-Conf/Mini-Conf - Run a conference from your backyard. [MIT License] (⭐️539)
  • mjmlio/mjml - MJML: the only framework that makes responsive-email easy [MIT License] (⭐️17978)
  • MrTurvey/PluggedIn - A Chromium-based browser OSINT extension that extracts employee names from LinkedIn company pages and generates username lists in multiple formats. (⭐️6)
  • muaz-khan/RTCMultiConnection - RTCMultiConnection is a WebRTC JavaScript library for peer-to-peer applications (screen sharing, audio/video conferencing, file sharing, media streaming etc.) [MIT License] (⭐️2617)
  • node-red/node-red - Low-code programming for event-driven applications [Apache License 2.0] (⭐️22991)
  • novus/nvd3 - A reusable charting library written in d3.js (⭐️7246)
  • osnr/TabFS - 🗄 Mount your browser tabs as a filesystem. [GNU GPLv3] (⭐️3934)
  • ottomatica/slim - Build and run tiny vms from Dockerfiles. Small and sleek. [Apache License 2.0] (⭐️2128)
  • ovity/octotree - GitHub on steroids [GNU AGPLv3] (⭐️23183)
  • paradoxxxzero/gnome-shell-system-monitor-applet - Display system informations in gnome shell status bar, such as memory usage, cpu usage, network rates… [GNU GPLv3] (⭐️1766)
  • pascalopitz/unoffical-sonos-controller-for-linux - An Electron based linux app for controlling your sonos system. [MIT License] (⭐️572)
  • peterbe/minimalcss - Extract the minimal CSS used in a set of URLs with puppeteer [MIT License] (⭐️357)
  • philschatz/gh-board - :octocat: "Serverless" Kanban for GitHub Issues using gh-pages [GNU AGPLv3] (⭐️425)
  • play-with-docker/play-with-docker - You know it, you use it, now it's time to improve it. PWD!. [MIT License] (⭐️3184)
  • postlight/parser - 📜 Extract meaningful content from the chaos of a web page [Apache License 2.0] (⭐️5779)
  • raunofreiberg/interfaces - A non-exhaustive list of details that make a good web interface. (⭐️1900)
  • ray-lothian/UserAgent-Switcher - A User-Agent spoofer browser extension that is highly configurable [Mozilla Public License 2.0] (⭐️1385)
  • rebane2001/WeirdM - Resizing WebM maker [The Unlicense] (⭐️52)
  • RestyaPlatform/board - Trello like kanban board. Based on Restya platform. [Open Software License 3.0] (⭐️2085)
  • resume/resume.github.com - Resumes generated using the GitHub informations (⭐️62827)
  • reveal/multiplex - The reveal.js Multiplex Plugin [MIT License] (⭐️146)
  • RoganDawes/P4wnP1_aloa - P4wnP1 A.L.O.A. by MaMe82 is a framework which turns a Rapsberry Pi Zero W into a flexible, low-cost platform for pentesting, red teaming and physical engagements ... or into "A Little Offensive Appliance". [GNU GPLv3] (⭐️4323)
  • ruyadorno/ipt - Interactive Pipe To: The Node.js cli interactive workflow [MIT License] (⭐️856)
  • s-blu/obsidian_dataview_example_vault - A example vault to collect and showcase various dataview queries. Created on behalf of AB1908 (⭐️839)
  • samyk/poisontap - Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js. (⭐️6450)
  • sandstorm-io/sandstorm - Sandstorm is a self-hostable web productivity suite. It's implemented as a security-hardened web app package manager. | Actively sponsored by our friends at TestMu AI (⭐️7021)
  • sathomas/continental - Symbol font with maps of European countries. (⭐️57)
  • schollz/cowyo - A feature-rich wiki webserver for minimalists 🐮 💬 [MIT License] (⭐️961)
  • secgroundzero/warberry - WarBerryPi - Tactical Exploitation (⭐️2223)
  • Semantic-Org/Semantic-UI - Semantic is a UI component framework based around useful principles from natural language. [MIT License] (⭐️51120)
  • serverless-dns/serverless-dns - The RethinkDNS resolver that deploys to Cloudflare Workers, Deno Deploy, Fastly, and Fly.io [Mozilla Public License 2.0] (⭐️3436)
  • sgoran/micro - Small client side router and tpl library [MIT License] (⭐️18)
  • shadow-workers/shadow-workers - Shadow Workers is a free and open source C2 and proxy designed for penetration testers to help in the exploitation of XSS and malicious Service Workers (SW) [MIT License] (⭐️244)
  • sharafian/jpipe - A sed/awk replacement, using javascript (⭐️13)
  • ShoppinPal/ng-mobile-menu - An AngularJS module that provides a slide out menu for your application. [MIT License] (⭐️98)
  • sigalor/whatsapp-web-reveng - Reverse engineering WhatsApp Web. [MIT License] (⭐️6356)
  • simon-engledew/dockerweb - Connect a browser to a docker container (⭐️53)
  • simple-icons/simple-icons - SVG icons for popular brands [Creative Commons Zero v1.0 Universal] (⭐️24835)
  • simplewebrtc/SimpleWebRTC - Simplest WebRTC ever (⭐️4689)
  • sindresorhus/cli-spinners - Spinners for use in the terminal [MIT License] (⭐️2829)
  • Smashing/smashing - The exceptionally handsome dashboard framework in Ruby and Coffeescript. [MIT License] (⭐️3298)
  • soheilpro/mailwind - Use Tailwind CSS to design HTML emails. [MIT License] (⭐️3201)
  • SpaceApi-archive/OpenSpaceLint - The space API validator. (⭐️7)
  • sparkbox/email-lab - 📩 Starter project for designing and testing HTML email templates (⭐️282)
  • spicetify/cli - Command-line tool to customize Spotify client. Supports Windows, macOS, and Linux. [GNU LGPLv2.1] (⭐️22711)
  • sql-js/sql.js - A javascript library to run SQLite on the web. (⭐️13599)
  • svaarala/duktape - Duktape - embeddable Javascript engine with a focus on portability and compact footprint [MIT License] (⭐️6197)
  • swapagarwal/swag-for-dev - 😎 swag opportunities for developers [Creative Commons Zero v1.0 Universal] (⭐️4371)
  • t1v0/lair - Personal edits of lair framework [MIT License] (⭐️1)
  • tailwindlabs/heroicons - A set of free MIT-licensed high-quality SVG icons for UI development. [MIT License] (⭐️23441)
  • TargetProcess/tauCharts - D3 based data-focused charting library. Designed with passion. Flexible. (⭐️1904)
  • tengbao/vanta - Animated 3D backgrounds for your website [MIT License] (⭐️6483)
  • textAngular/textAngular - A radically powerful Text-Editor/Wysiwyg editor for Angular.js! Create multiple editor instances, two-way-bind HTML content, watch editors for changes and more! (⭐️3965)
  • textileio/encryptoid - Browser ĐApp for encrypting and sending ephemeral secret messages over IPFS [MIT License] (⭐️12) Archived!
  • thebinarypenguin/raml-cop - Command line RAML validator [MIT License] (⭐️28)
  • thomas4019/pgmongo - Replace MongoDB with PostgreSQL using jsonb fields (⭐️140)
  • tianhaoz95/readable-readme - If README is not readable, nothing else will be. A linter/proofread CI for READMEs built with GitHub Actions. It's naive for now, but let's make it better together ;) [MIT License] (⭐️23)
  • timothystewart6/littlelink-server - A lightweight, open source, stateless, and self-hosted alternative to linktree in a Docker container! [MIT License] (⭐️1119)
  • tobilg/api2html - A CLI tool to transform Swagger/OpenAPI/AsyncAPI docs to beautiful HTML pages via Shins/Widdershins. [MIT License] (⭐️120)
  • turt2live/matrix-appservice-webhooks - Slack-compatible webhooks for matrix [GNU GPLv3] (⭐️108)
  • TweekFawkes/White_Lightning - Platform for Browser Exploitation (⭐️34)
  • umdjs/umd - UMD (Universal Module Definition) patterns for JavaScript modules that work everywhere. [MIT License] (⭐️7447)
  • vercel/pkg - Package your Node.js project into an executable [MIT License] (⭐️24400) Archived!
  • vexorian/dizquetv - Create live TV channels from your own media. Access the streams using the simulated HDHomerun tuner or the generated M3U URl. [zlib License] (⭐️1746)
  • VGraupera/1on1-questions - Mega list of 1 on 1 meeting questions compiled from a variety to sources [MIT License] (⭐️9622)
  • vjeantet/hugo-theme-docdock - Declination of @matcornic Learn theme to Hugo [MIT License] (⭐️616)
  • webrtcHacks/adapter - Shim to insulate apps from spec changes and prefix differences. Latest adapter.js release: [Modified BSD License] (⭐️3737)
  • wekan/wekan - The Open Source kanban, built with Meteor. GitHub issues/PRs are only for FLOSS Developers, not for support, support is at https://wekan.fi/commercial-support/ . New English strings for new features at imports/i18n/data/en.i18n.json . Non-English translations at https://app.transifex.com/wekan/wekan only. [MIT License] (⭐️20894)
  • whs/ipfs-encrypted-share - IPFS Encrypted Share [MIT License] (⭐️22)
  • wiedehopf/tar1090 - Provides an improved webinterface for use with ADS-B decoders readsb / dump1090-fa (⭐️1737)
  • xat/castnow - commandline chromecast player [MIT License] (⭐️3821)
  • xyzzy/qrpicture - Picture to colour QR code converter hosted on https://QRpicture.com [GNU AGPLv3] (⭐️577)
  • yabwe/medium-editor - Medium.com WYSIWYG editor clone. Uses contenteditable API to implement a rich text solution. (⭐️16121)
  • yalabot/angular-foundation - (⭐️1043)
  • yaronn/blessed-contrib - Build terminal dashboards using ascii/ansi art and javascript [MIT License] (⭐️15723)
  • yuanqing/cuba - 🇨🇺 Google Sheets + SQL = JSON [MIT License] (⭐️56)
  • ziahamza/webui-aria2 - The aim for this project is to create the worlds best and hottest interface to interact with aria2. Very simple to use, just download and open index.html in any web browser. [MIT License] (⭐️10310)

Jinja

  • netbootxyz/netboot.xyz - Your favorite operating systems in one place. A network-based bootable operating system installer based on iPXE. [Apache License 2.0] (⭐️11605)
  • warhorse/warhorse - Infrastructure Automation [MIT License] (⭐️357) Archived!

Jupyter Notebook

  • amueller/quick-ml-intro - One hour interactive training for ML with scikit-learn [MIT License] (⭐️73)
  • DataExpert-io/data-engineer-handbook - This is a repo with links to everything you'd ever want to learn about data engineering (⭐️40896)
  • deepsecoss/MITREembed - Map MITRE attack to n dimensional embeddings and vise versa [Apache License 2.0] (⭐️18)
  • lakiw/Jupyter-Password-Cracking-Framework - A JupyterLab notebook with functionality to help manage password cracking sessions. Specifically geared towards helping with password cracking competitions. (⭐️6)
  • mxrch/penglab - 🐧 Abuse of Google Colab for cracking hashes. (⭐️969)
  • neonbjb/tortoise-tts - A multi-voice TTS system trained with an emphasis on quality [Apache License 2.0] (⭐️14830)
  • nolanaatama/sd-1click-colab - (⭐️1086)
  • openai/openai-cookbook - Examples and guides for using the OpenAI API [MIT License] (⭐️72611)
  • someshkar/colabcat - 😺 Running Hashcat on Google Colab with session backup and restore. [MIT License] (⭐️744)
  • suno-ai/bark - 🔊 Text-Prompted Generative Audio Model [MIT License] (⭐️39072)
  • The-Art-of-Hacking/h4cker - This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.org [MIT License] (⭐️25859)

Kotlin

  • ligi/IPFSDroid - Android App for the InterPlanetary File System(IPFS) [GNU GPLv3] (⭐️313)
  • pacien/tincapp - Android binding and user interface for the tinc mesh VPN daemon. [GNU GPLv3] (⭐️176)
  • ubergeek42/weechat-android - Simple Weechat-Relay Android Client (⭐️555)

Lua

MDX

  • all-contributors/allcontributors.org - ✨ The all-contributors bot website and documentation. Recognize all contributors, not just the ones who push code ✨ [MIT License] (⭐️8035)
  • dair-ai/Prompt-Engineering-Guide - 🐙 Guides, papers, lessons, notebooks and resources for prompt engineering, context engineering, RAG, and AI Agents. [MIT License] (⭐️72928)

Makefile

Markdown

MoonScript

  • leafo/lapis - A web framework for Lua and OpenResty written in MoonScript [MIT License] (⭐️3308)

NSIS

Nginx

Nim

Nix

Objective-C

  • jigish/slate - A window management application (replacement for Divvy/SizeUp/ShiftIt) [GNU GPLv3] (⭐️7838)
  • objective-see/LuLu - LuLu is the free open-source macOS firewall [GNU GPLv3] (⭐️12307)
  • SAP/macOS-enterprise-privileges - This application gives Mac users in enterprise environments control over the administration of their machines by elevating their access level to administrator privileges on macOS. Users can set a timeframe in the application's settings to perform specific tasks, such as installing or uninstalling applications. [Apache License 2.0] (⭐️1874)
  • sveinbjornt/Platypus - Create native macOS applications from command line scripts. [Modified BSD License] (⭐️3372)

OpenSCAD

  • BelfrySCAD/BOSL2 - The Belfry OpenScad Library, v2.0. An OpenSCAD library of shapes, masks, and manipulators to make working with OpenSCAD easier. BETA [BSD 2-Clause "Simplified" License] (⭐️2083)
  • ervanalb/keygen - OpenSCAD tools for generating physical keys [Creative Commons Zero v1.0 Universal] (⭐️478)

PHP

  • 3ndG4me/phpbash - A semi-interactive PHP shell compressed into a single file. [Apache License 2.0] (⭐️2)
  • CampFireManager/cfm2 - CampFireManager is a talk scheduling tool for conferences - such as barcamps or fixed schedule conferences (⭐️16) Archived!
  • coollabsio/coolify - An open-source, self-hostable PaaS alternative to Vercel, Heroku & Netlify that lets you easily deploy static sites, databases, full-stack applications and 280+ one-click services on your own servers. [Apache License 2.0] (⭐️52679)
  • DashboardBuilder/dashboardbuilder.net - Dashboard Builder is a PHP library based data driven visualization & business analysis tool, a machine learning delivers insights, written in PHP with an added layer of drag-and-drop flexibility that aids in predicting the future with ease and no code required. (⭐️27)
  • delight-im/FreeGeoDB - Free database of geographic place names and corresponding geospatial data [Creative Commons Attribution 4.0 International] (⭐️1575)
  • infonomicon/Nomibot - The IRC bot used in #infonomicon on freenode [MIT License] (⭐️6)
  • jakeasmith/commit - [MIT License] (⭐️132)
  • kanboard/kanboard - Kanban project management software [MIT License] (⭐️9537)
  • koel/koel - Music streaming solution that works. [MIT License] (⭐️17102)
  • neonelephantstudio/nemex - official repo for nemex: a tiny app that lets you track and curate ideas and projects. It’s self-hosted and based on markdown. [GNU GPLv3] (⭐️214)
  • opendcim/openDCIM - An open source (GPL v3) Data Center Inventory Management (DCIM) application. (⭐️344)
  • RSS-Bridge/rss-bridge - The RSS feed for websites missing it [The Unlicense] (⭐️8835)
  • tchapi/davis - 🗓 A modern, simple, feature-packed, fully translatable admin interface for sabre/dav based on Symfony 7 and Bootstrap [MIT License] (⭐️689)
  • vavkamil/dvwp - Damn Vulnerable WordPress (⭐️200)
  • web2project/web2project - A web-based project management system featuring gantt charts, time logging, and an extendable module system. (⭐️204)

Pascal

  • DarkCoderSc/SubSeven - SubSeven Legacy Official Source Code Repository [Apache License 2.0] (⭐️638)
  • MojtabaTajik/Robber - Robber is open source tool for finding executables prone to DLL hijacking [GNU GPLv3] (⭐️786)
  • t-d-k/LibreCrypt - LibreCrypt: Transparent on-the-fly disk encryption for Windows. LUKS compatible. (⭐️771)

Perl

PostScript

PowerShell

  • 0x6d69636b/windows_hardening - HardeningKitty and Windows Hardening Settings [MIT License] (⭐️2606)
  • 0x727/AggressorScripts_0x727 - Cobalt Strike AggressorScripts For Red Team [MIT License] (⭐️156)
  • 411Hall/JAWS - JAWS - Just Another Windows (Enum) Script [MIT License] (⭐️1938)
  • AutomatedLab/AutomatedLab - AutomatedLab is a provisioning solution and framework that lets you deploy complex labs on HyperV and Azure with simple PowerShell scripts. It supports all Windows operating systems from 2008 R2 to 2022, some Linux distributions and various products like AD, Exchange, PKI, IIS, etc. [MIT License] (⭐️2193)
  • BC-SECURITY/Beginners-Guide-to-Obfuscation - [MIT License] (⭐️1076)
  • BC-SECURITY/OffensiveDLR - Toolbox containing research notes & PoC code for weaponizing .NET's DLR [Modified BSD License] (⭐️6)
  • BloodHoundAD/BARK - BloodHound Attack Research Kit [GNU GPLv3] (⭐️590)
  • ChrisTitusTech/winutil - Chris Titus Tech's Windows Utility - Install Programs, Tweaks, Fixes, and Updates [MIT License] (⭐️51039)
  • cisagov/ScubaGear - Automation to assess the state of your M365 tenant against CISA's baselines [Creative Commons Zero v1.0 Universal] (⭐️2524)
  • curi0usJack/luckystrike - A PowerShell based utility for the creation of malicious Office macro documents. [GNU GPLv3] (⭐️1110) Archived!
  • dafthack/GraphRunner - A Post-exploitation Toolset for Interacting with the Microsoft Graph API [MIT License] (⭐️1271)
  • danielbohannon/Invoke-CradleCrafter - PowerShell Remote Download Cradle Generator & Obfuscator [Apache License 2.0] (⭐️852)
  • DanMcInerney/pymetasploit3 - Automation library for Metasploit [MIT License] (⭐️406)
  • davidprowe/BadBlood - BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time. [GNU GPLv3] (⭐️2226)
  • dazzyddos/PrivHound - A BloodHound OpenGraph collector that models Windows local privilege escalation as interconnected attack paths. (⭐️464)
  • dievus/PowerShellForPentesters - Course repository for PowerShell for Pentesters Course (⭐️441)
  • eclypsium/Screwed-Drivers - "Screwed Drivers" centralized information source for code references, links, etc. [GNU GPLv3] (⭐️378)
  • farag2/Sophia-Script-for-Windows - ⚡ The most powerful open source tweaker on GitHub for fine-tuning Windows 10 & Windows 11 [MIT License] (⭐️9197)
  • fashionproof/RunHijackHunter - [Apache License 2.0] (⭐️18)
  • freeload101/Java-Android-Magisk-Burp-Objection-Root-Emulator-Easy - Java Android Magisk Burp Objection Root Emulator Easy (JAMBOREE) [GNU GPLv3] (⭐️262)
  • Friends-Security/ShadowHound - PowerShell scripts for alternative SharpHound enumeration, including users, groups, computers, and certificates, using the ActiveDirectory module (ADWS) or System.DirectoryServices class (LDAP). [MIT License] (⭐️401)
  • FuzzySecurity/Capcom-Rootkit - Capcom Rootkit POC (⭐️211)
  • GetRektBoy724/BetterXencrypt - A better version of Xencrypt.Xencrypt it self is a Powershell runtime crypter designed to evade AVs. [GNU GPLv3] (⭐️224)
  • giMini/mimiDbg - PowerShell oneliner to retrieve wdigest passwords from the memory (⭐️220)
  • I-Am-Jakoby/PowerShell-for-Hackers - This repository is a collection of powershell functions every hacker should know (⭐️1451)
  • InfosecMatter/Minimalistic-offensive-security-tools - A repository of tools for pentesting of restricted and isolated environments. [GNU GPLv3] (⭐️589)
  • jfmaes/LazySign - Create fake certs for binaries using windows binaries and the power of bat files [GNU GPLv3] (⭐️571)
  • JoelGMSec/Cloudtopolis - Zero Infrastructure Password Cracking [GNU GPLv3] (⭐️417)
  • jonny-jhnson/Marvel-Lab - A collection of Powershell scripts that will help automate the build process for a Marvel domain. (⭐️153)
  • kfallahi/NTLMPasswordChanger - PowerShell tool that shows how to read and write NTLM OWF values via samlib.dll. (⭐️72)
  • kmkz/Pentesting - Tricks for penetration testing (⭐️585)
  • LaresLLC/ScrapingKit - Scraping Kit is made up of several tools for scraping services for keywords, useful for initial enumeration of Domain Controllers or if you have popped a user's desktop and their outlook client. (⭐️99)
  • last-byte/PersistenceSniper - Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte (⭐️2081)
  • Malandrone/PowerDecode - PowerDecode is a PowerShell-based tool that allows to deobfuscate PowerShell scripts obfuscated across multiple layers. The tool performs code dynamic analysis, extracting malware hosting URLs and checking http response.It can also detect if the malware attempts to inject shellcode into memory. [GNU GPLv3] (⭐️233)
  • mantvydasb/RedTeaming-Tactics-and-Techniques - Red Teaming Tactics and Techniques (⭐️4526)
  • mgeeky/Penetration-Testing-Tools - A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audits purposes. [MIT License] (⭐️2924)
  • microsoft/windows-dev-box-setup-scripts - Scripts to simplify setting up a Windows developer box [MIT License] (⭐️1872)
  • mikeslattery/tunic - Install Linux from a running Windows system, without need for a live USB. [GNU GPLv3] (⭐️783)
  • monoxgas/sRDI - Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode (⭐️2512)
  • nccgroup/acCOMplice - Tools for discovery and abuse of COM hijacks (⭐️335)
  • nccgroup/redsnarf - RedSnarf is a pen-testing / red-teaming tool for Windows environments [Apache License 2.0] (⭐️1213)
  • nickzer0/RedLab - Files to automatically deploy red team Active Directory test lab (⭐️49)
  • ntdevlabs/tiny11builder - Scripts to build a trimmed-down Windows 11 image. (⭐️18302)
  • p3nt4/Invoke-Piper - Forward local or remote tcp ports through SMB pipes. (⭐️297)
  • p3nt4/Invoke-TmpDavFS - Memory Backed Powershell WebDav Server (⭐️138)
  • potatoqualitee/kbupdate - 🛡 KB Viewer, Saver, Installer and Uninstaller [MIT License] (⭐️385)
  • Raphire/Win11Debloat - A simple, lightweight PowerShell script that allows you to remove pre-installed apps, disable telemetry, as well as perform various other changes to declutter and customize your Windows experience. Win11Debloat works for both Windows 10 and Windows 11. [MIT License] (⭐️43377)
  • rasta-mouse/Sherlock - PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities. [GNU GPLv3] (⭐️2000) Archived!
  • rolando-anton/packer-disposable-windows - A packer project to generate Windows EVAL images to use it on test / dev / hack / IR labs [MIT License] (⭐️24)
  • rootsecdev/Azure-Red-Team - Azure Security Resources and Notes (⭐️1729)
  • S3cur3Th1sSh1t/PowerSharpPack - (⭐️1674)
  • S3cur3Th1sSh1t/WinPwn - Automation for internal Windows Penetrationtest / AD-Security [Modified BSD License] (⭐️3654)
  • safebuffer/vulnerable-AD - Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab [MIT License] (⭐️2269)
  • samratashok/nishang - Nishang - Offensive PowerShell for red team, penetration testing and offensive security. (⭐️9836)
  • SpecterOps/at-ps - Adversary Tactics - PowerShell Training (⭐️1610)
  • SpecterOps/BloodHound-Legacy - Six Degrees of Domain Admin [GNU GPLv3] (⭐️10554)
  • StefanScherer/packer-windows - Windows Templates for Packer: Windows 11, Windows 10, Windows Server 2022, 2019, 2016, also with Docker [MIT License] (⭐️1353)
  • strontic/xcyclopedia - Encyclopedia for Executables [MIT License] (⭐️478)
  • Sycnex/Windows10Debloater - Script to remove Windows 10 bloatware. [MIT License] (⭐️18806) Archived!
  • threatexpress/red-team-scripts - A collection of Red Team focused tools, scripts, and notes [MIT License] (⭐️1146)
  • tihanyin/PSSW100AVB - A list of useful Powershell scripts with 100% AV bypass (At the time of publication). (⭐️1194)
  • tokyoneon/Chimera - Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions. (⭐️1576)
  • VirtualAlllocEx/Payload-Download-Cradles - This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR in context of download cradle detections. (⭐️257)
  • W4RH4WK/Debloat-Windows-10 - A Collection of Scripts Which Disable / Remove Windows 10 Features and Apps (⭐️6169) Archived!
  • xorrior/RandomPS-Scripts - PowerShell Scripts focused on Post-Exploitation Capabilities [Modified BSD License] (⭐️320)
  • zh54321/SnafflerParser - Parses Snaffler output file and generate beautified outputs. (⭐️138)
  • zoicware/RemoveWindowsAI - Force Remove Copilot, Recall and More in Windows 11 [MIT License] (⭐️11219)

Protocol Buffer

Python

  • 0x00-0x00/ShellPop - Pop shells like a master. [MIT License] (⭐️1489)
  • 0x4m4/hexstrike-ai - HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities. [MIT License] (⭐️7899)
  • 0xRedpoll/SignalKeyBOF - BOF to decrypt Signal Desktop chat logs [Apache License 2.0] (⭐️70)
  • 13o-bbr-bbq/machine_learning_security - Source code about machine learning and security. (⭐️2077)
  • 51x/WHP - Micro$oft Windows Hacking Pack [Do What The Fck You Want To Public License*] (⭐️525)
  • 9001/copyparty - Portable file server with accelerated resumable uploads, dedup, WebDAV, SFTP, FTP, TFTP, zeroconf, media indexer, thumbnails++ all in one file [MIT License] (⭐️44091)
  • a13xp0p0v/kernel-hardening-checker - A tool for checking the security hardening options of the Linux kernel [GNU GPLv3] (⭐️2056)
  • abatchy17/WindowsExploits - Windows exploits, mostly precompiled. Not being updated. Check https://github.com/SecWiki/windows-kernel-exploits instead. [Apache License 2.0] (⭐️1919)
  • acheong08/ChatGPT - Reverse engineered ChatGPT API [GNU GPLv2] (⭐️27959) Archived!
  • activecm/passer - Passive service locator, a python sniffer that identifies servers, clients, names and much more [GNU GPLv3] (⭐️260)
  • ad0nis/ntlm_relay_gat - [MIT License] (⭐️166)
  • agittins/bermuda - Bermuda Bluetooth/BLE Triangulation / Trilateration for HomeAssistant [MIT License] (⭐️1697)
  • alecmuffett/real-world-onion-sites - This is a list of substantial, commercial-or-social-good mainstream websites which provide onion services. (⭐️2153)
  • AlessandroZ/LaZagne - Credentials recovery project [GNU LGPLv3] (⭐️10754)
  • AlexanderWillner/runMacOSinVirtualBox - Run macOS 10.16 Big Sur (and other versions) in VirtualBox on macOS [MIT License] (⭐️935)
  • alexflint/stdroots - Standard CA roots embedded in a Go package. (⭐️22)
  • alkivi-sas/duplicity-hubic - Duplicity backend, based on swift client but customize for OVH Hubic [GNU GPLv3] (⭐️36)
  • amscanne/huptime - Utility for zero downtime restarts of unmodified programs. [GNU GPLv3] (⭐️1950)
  • anclrii/Storj-Exporter - Prometheus exporter for monitoring Storj storage nodes [GNU GPLv3] (⭐️63)
  • andypiper/fivebyfive - Polyglot examples for the 01Space ESP32-C3FH4-RGB board [MIT License] (⭐️39)
  • anilshanbhag/RobinhoodShell - A command line shell for trading stocks using Robinhood [MIT License] (⭐️421)
  • Anon-Exploiter/SUID3NUM - A standalone python script which utilizes python's built-in modules to enumerate SUID binaries, separate default binaries from custom binaries, cross-match those with bins in GTFO Bin's repository & auto-exploit those, all with colors! ( ͡~ ͜ʖ ͡°) [MIT License] (⭐️658)
  • anouarbensaad/vulnx - vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning. [GNU GPLv3] (⭐️2094)
  • ansemjo/truepolyglot - Create polyglot files, which are valid PDF and ZIP simultaneously. See POC||GTFO 07. (forked from git.hackade.org) [The Unlicense] (⭐️76)
  • AntonOsika/gpt-engineer - CLI platform to experiment with codegen. Precursor to: https://lovable.dev [MIT License] (⭐️55218)
  • Ap3x/ProxKube - Convert OVA and other file types to be able to use and create a Proxmox VM (⭐️31) Archived!
  • apenwarr/redo - Smaller, easier, more powerful, and more reliable than make. An implementation of djb's redo. [Apache License 2.0] (⭐️1841)
  • appsecco/vulnerable-apps - [Apache License 2.0] (⭐️219)
  • aquasecurity/kube-hunter - Hunt for security weaknesses in Kubernetes clusters [Apache License 2.0] (⭐️5026)
  • Arcanum-Sec/msftrecon - (⭐️777)
  • ARMmbed/mbed-cli - Arm Mbed Command Line Interface [Apache License 2.0] (⭐️340)
  • arthepsy/ssh-audit - SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc) [MIT License] (⭐️2989)
  • asciimoo/ListOfGithubLists - List of github lists (⭐️384)
  • ashemery/exploitation-course - Offensive Software Exploitation Course (⭐️2509)
  • assume-breach/Home-Grown-Red-Team - (⭐️720)
  • AutoGPTQ/AutoGPTQ - An easy-to-use LLMs quantization package with user-friendly apis, based on GPTQ algorithm. [MIT License] (⭐️5046) Archived!
  • averagesecurityguy/scripts - Scripts I use during pentest engagements. (⭐️1027)
  • baserow/baserow - Build databases, automations, apps & agents with AI — no code. Open source platform available on cloud and self-hosted. GDPR, HIPAA, SOC 2 compliant. Best Airtable alternative. (⭐️4570)
  • BC-SECURITY/Taming-Offensive-IronPython - This workshop is designed to provide you with a solid understanding of IronPython, its integration with the .NET framework, and how it can be used to interact with other .NET languages. [MIT License] (⭐️44)
  • beeware/briefcase - Tools to support converting a Python project into a standalone native application. [Modified BSD License] (⭐️3245)
  • berkgoksel/SierraTwo - Simple reverse shell over Slack [GNU GPLv3] (⭐️57)
  • berylliumsec/nebula - AI-powered penetration testing assistant for automating recon, note-taking, and vulnerability analysis. [BSD 2-Clause "Simplified" License] (⭐️924)
  • bigb0sss/RedTeam-OffensiveSecurity - Tools & Interesting Things for RedTeam Ops [MIT License] (⭐️2265)
  • Bitmessage/PyBitmessage - Reference client for Bitmessage: a P2P encrypted decentralised communication protocol: (⭐️2881)
  • bitsadmin/wesng - Windows Exploit Suggester - Next Generation [Modified BSD License] (⭐️4812)
  • blackjack4494/youtube-dlc - Command-line program to download various media from YouTube.com and other sites [The Unlicense] (⭐️1221)
  • blacklanternsecurity/bbot - The recursive internet scanner for hackers. 🧡 [GNU AGPLv3] (⭐️9579)
  • blacklanternsecurity/writehat - A pentest reporting tool written in Python. Free yourself from Microsoft Word. [GNU GPLv3] (⭐️1481)
  • bloomberg/memray - Memray is a memory profiler for Python [Apache License 2.0] (⭐️14977)
  • breakid/Sysmon-Config-Converter - A simple Python script to convert an exported Sysmon config into a valid XML config file. [GNU GPLv3] (⭐️2) Archived!
  • BrianPugh/lox - Threading and Multiprocessing made easy. [Apache License 2.0] (⭐️127)
  • byt3bl33d3r/CrackMapExec - A swiss army knife for pentesting networks [BSD 2-Clause "Simplified" License] (⭐️9117) Archived!
  • byt3bl33d3r/MITMf - Framework for Man-In-The-Middle attacks [GNU GPLv3] (⭐️3634) Archived!
  • byt3bl33d3r/pyMalleableC2 - Python interpreter for Cobalt Strike Malleable C2 Profiles. Allows you to parse, build and modify them programmatically. [GNU GPLv3] (⭐️287)
  • calebcase/jsonfs - JSON Fuse Filesystem (⭐️15)
  • calebstewart/pwncat - Fancy reverse and bind shell handler [MIT License] (⭐️2877)
  • cddmp/enum4linux-ng - A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players. [GNU GPLv3] (⭐️1563)
  • charlesthomas/magpie - Git-backed Evernote replacement [MIT License] (⭐️646)
  • cheahjs/free-llm-api-resources - A list of free LLM inference resources accessible via API. (⭐️18031)
  • CheckPointSW/QueryOrientedProgramming - Query Oriented Programming (QOP) gadgets for SQLite-based exploitation (⭐️51)
  • cheetz/Easy-P - PowerShell Helper Tool (⭐️150)
  • chris408/known_hosts-hashcat - A guide and tool for cracking ssh known_hosts files with hashcat (⭐️339)
  • christabor/flask_jsondash - 🐍 📊 📈 Build complex dashboards without any front-end code. Use your own endpoints. JSON config only. Ready to go. [MIT License] (⭐️3289)
  • cisagov/pshtt - Scan domains and return data based on HTTPS best practices [Creative Commons Zero v1.0 Universal] (⭐️691)
  • CjangCjengh/MoeGoe - Executable file for VITS inference [MIT License] (⭐️2419)
  • cliffe/SecGen - Create randomly insecure VMs [GNU GPLv3] (⭐️2752)
  • clubby789/wsshuttle - A tool to tunnel TCP traffic over WinRM [MIT License] (⭐️18)
  • Coalfire-Research/Slackor - A Golang implant that uses Slack as a command and control server [GNU GPLv3] (⭐️462)
  • codingo/Interlace - Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support. [GNU GPLv3] (⭐️1290)
  • coffeegist/bofhound - Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel [BSD 4-Clause "Original" or "Old" License] (⭐️377)
  • coffeegist/gt-generator - Generate Mimikatz Golden Ticket commands with ease! (⭐️51)
  • commixproject/commix - Automated All-in-One OS Command Injection Exploitation Tool (⭐️5699)
  • CompassSecurity/BloodHoundQueries - (⭐️758) Archived!
  • containerbuildsystem/atomic-reactor - Simple python library for building docker images. [Modified BSD License] (⭐️138)
  • corkami/collisions - Hash collisions and exploitations (⭐️3351)
  • corkami/mitra - A generator of weird files (binary polyglots, near polyglots, polymocks...) [MIT License] (⭐️1276)
  • cowrie/cowrie - Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/ (⭐️6263)
  • CravateRouge/bloodyAD - BloodyAD is an Active Directory Privilege Escalation Framework [MIT License] (⭐️2146)
  • ctfs/write-ups-2014 - Wiki-like CTF write-ups repository, maintained by the community. 2014 (⭐️1855)
  • cve-search/cve-search - cve-search - a tool to perform local searches for known vulnerabilities [GNU AGPLv3] (⭐️2610)
  • D4Vinci/Dr0p1t-Framework - A framework that create an advanced stealthy dropper that bypass most AVs and have a lot of tricks [MIT License] (⭐️1457) Archived!
  • D4Vinci/One-Lin3r - Gives you one-liners that aids in penetration testing operations, privilege escalation and more [GNU GPLv3] (⭐️1766)
  • dakhnod/fzfs - Flipper Zero filesystem driver (⭐️217)
  • DanMcInerney/msf-autopwn - Autoexploitation of some of the most common vulnerabilities in wild [MIT License] (⭐️124)
  • dariusztytko/token-reverser - Words list generator to crack security tokens [GNU GPLv3] (⭐️110)
  • davedash/mysql-anonymous - A support group for people who have PII in their mysql databases. [MIT License] (⭐️111)
  • DavidBuchanan314/dlinject - Inject a shared library (i.e. arbitrary code) into a live linux process, without ptrace [MIT License] (⭐️821)
  • DavidBuchanan314/tweetable-polyglot-png - Pack up to 3MB of data into a tweetable PNG polyglot file. [MIT License] (⭐️2598)
  • dbcli/litecli - CLI for SQLite Databases with auto-completion and syntax highlighting [Modified BSD License] (⭐️3224)
  • dbhi/qus - qemu-user-static (qus) and containers, non-invasive minimal working setups (⭐️349)
  • derv82/wifite - (⭐️3617)
  • devanshbatham/ParamSpider - Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing [MIT License] (⭐️3042)
  • devicenull/ipmi_firmware_tools - IPMI analysis tools (⭐️98)
  • dhondta/python-sploitkit - Devkit for building Metasploit-like consoles [GNU GPLv3] (⭐️255)
  • DickieTheProgrammer/DickieBot - The impressionable IRC bot [BSD 2-Clause "Simplified" License] (⭐️5)
  • DickieTheProgrammer/DickieBot2 - The Impressionable Discord Bot (⭐️8)
  • DidierStevens/DidierStevensSuite - Please no pull requests for this repository. Thanks! (⭐️2440)
  • dirkjanm/BloodHound.py - A Python based ingestor for BloodHound [MIT License] (⭐️2371)
  • dirkjanm/CVE-2020-1472 - PoC for Zerologon - all research credits go to Tom Tervoort of Secura (⭐️1288)
  • dirkjanm/krbrelayx - Kerberos relaying and unconstrained delegation abuse toolkit [MIT License] (⭐️1566)
  • dirkjanm/mitm6 - pwning IPv4 via IPv6 [GNU GPLv2] (⭐️1901)
  • disposable-email-domains/disposable-email-domains - a list of disposable email domains (⭐️4908)
  • DoctorEww/EvilFontTool - A font-based deception tool for red teaming, security research, and whatever else. [MIT License] (⭐️65)
  • donnemartin/gitsome - A supercharged Git/GitHub command line interface (CLI). An official integration for GitHub and GitHub Enterprise: https://github.com/works-with/category/desktop-tools (⭐️7679)
  • donnemartin/system-design-primer - Learn how to design large-scale systems. Prep for the system design interview. Includes Anki flashcards. (⭐️341678)
  • DrewThomasson/ebook2audiobook - Generate audiobooks from e-books, voice cloning & 1158+ languages! [Apache License 2.0] (⭐️18625)
  • dtinth/comic-mono-font - A legible monospace font... the very typeface you’ve been trained to recognize since childhood (⭐️2862)
  • dwisiswant0/apkleaks - Scanning APK file for URIs, endpoints & secrets. [Apache License 2.0] (⭐️6019)
  • dxa4481/gcploit - These are tools we released with our 2020 defcon/blackhat talk https://www.youtube.com/watch?v=Ml09R38jpok [GNU GPLv3] (⭐️173)
  • EbookFoundation/free-programming-books - 📚 Freely available programming books [Creative Commons Attribution 4.0 International] (⭐️385111)
  • ecthros/uncaptcha2 - defeating the latest version of ReCaptcha with 91% accuracy (⭐️4933)
  • edent/SuperTinyIcons - Under 1KB each! Super Tiny Icons are miniscule SVG versions of your favourite website and app logos (⭐️15310)
  • edfungus/Crouton - Crouton MQTT IOT Dashboard (⭐️297)
  • emadshanab/Nuclei-Templates-Collection - Nuclei Templates Collection (⭐️1092)
  • EONRaider/blackhat-python3 - Source code for the book "Black Hat Python" by Justin Seitz. The code has been fully converted to Python 3, reformatted to comply with PEP8 standards and refactored to eliminate dependency issues involving the implementation of deprecated libraries. (⭐️2333)
  • EtiennePerot/safe-code-execution - Code execution utilities for Open WebUI & Ollama [Apache License 2.0] (⭐️326)
  • evilsocket/opensnitch - OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch. [GNU GPLv3] (⭐️13061)
  • extremecoders-re/pyinstxtractor - PyInstaller Extractor [GNU GPLv3] (⭐️4208)
  • faemiyah/dnload - Minimal binary generator for *nix operating systems (⭐️76)
  • fbkcs/ThunderDNS - This tool can forward TCP traffic over DNS protocol. Non-compile clients + socks5 support. [Apache License 2.0] (⭐️411)
  • fin3ss3g0d/cypherhound - Your template-based BloodHound terminal companion tool [GNU GPLv3] (⭐️448)
  • firefart/msfpayloadgenerator - Generates several metasploit payloads (⭐️15) Archived!
  • firstlookmedia/gpgsync - 🔒 GPG Sync is designed to let users always have up-to-date public keys for other members of their organization [GNU GPLv3] (⭐️350) Archived!
  • fisher0x/adduserstogroup - A Python-based Active Directory tool for adding users to groups with full pass-the-hash authentication support using Impacket's LDAP implementation. (⭐️1)
  • Flangvik/Bobber - Bounces when a fish bites - Evilginx database monitoring with exfiltration automation [GNU GPLv3] (⭐️182)
  • FlareSolverr/FlareSolverr - Proxy server to bypass Cloudflare protection [MIT License] (⭐️13375)
  • FLOCK4H/AtomDucky - WiFi Rubber Ducky with a web interface using CircuitPython (⭐️130)
  • foospidy/DbDat - Db Database Assessment Tool [GNU GPLv2] (⭐️211)
  • fortra/impacket - Impacket is a collection of Python classes for working with network protocols. (⭐️15604)
  • frostbits-security/SIET - Smart Install Exploitation Tool (⭐️594)
  • fuzzbunch/fuzzbunch - NSA finest tool (⭐️990)
  • Gallopsled/pwntools - CTF framework and exploit development library (⭐️13353)
  • gbafana25/esp8266_honeypot - THE ESP8266 HONEYPOT [GNU GPLv3] (⭐️319)
  • Ge0rg3/requests-ip-rotator - A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing. [GNU GPLv3] (⭐️1652)
  • GhostManager/Ghostwriter - The SpecterOps project management and reporting engine [Modified BSD License] (⭐️1787)
  • gnuradio/pybombs - PyBOMBS (Python Build Overlay Managed Bundle System) is the GNU Radio install management system for resolving dependencies and pulling in out-of-tree projects. [GNU GPLv3] (⭐️433)
  • gokupwn/shootCutMe - ShootCutMe an .LNK file creator tool for redteamer (⭐️16)
  • graniet/Inspector - The Inspector tool is a privilege escalation helper (PoC), easy to deployed on web server, this tool can list process running with root, check kernel version, check history file, get possible exploit ... (⭐️122)
  • Greenwolf/ntlm_theft - A tool for generating multiple types of NTLMv2 hash theft files by Jacob Wilkin (Greenwolf) [GNU GPLv3] (⭐️1372)
  • grycap/scar - Serverless Container-aware ARchitectures (e.g. Docker in AWS Lambda) [Apache License 2.0] (⭐️599)
  • guardicore/monkey - Infection Monkey - An open-source adversary emulation platform [GNU GPLv3] (⭐️6980)
  • guidepointsecurity/RedCommander - Red Team C2 Infrastructure built in AWS using Ansible! [GNU GPLv3] (⭐️232)
  • guyzmo/git-repo - Git-Repo: CLI utility to manage git services from your workspace (⭐️853)
  • gyptazy/ProxLB - ProxLB - An advanced resource scheduler and load balancer for Proxmox clusters. [GNU GPLv3] (⭐️887)
  • h4wkst3r/InvisibilityCloak - Proof-of-concept obfuscation toolkit for C# post-exploitation tools (⭐️609)
  • hackertarget/nmap-did-what - Nmap Dashboard Mini Project [GNU GPLv2] (⭐️632)
  • Hackndo/WebclientServiceScanner - Python tool to Check running WebClient services on multiple targets based on @leechristensen [MIT License] (⭐️289)
  • hacksider/Deep-Live-Cam - real time face swap and one-click video deepfake with only a single image [GNU AGPLv3] (⭐️89126)
  • Hadi999/NXcrypt - NXcrypt - 'python backdoor' framework (⭐️368)
  • Haidra-Org/AI-Horde-Worker - This repo turns your PC into a AI Horde worker node [GNU AGPLv3] (⭐️291)
  • Hann1bl3L3ct3r/Spellbinder - Weaponized replicate of the TheWizards APT SLAAC based DNS poisoning attack written in Python. (⭐️3)
  • hevnsnt/cotcha - SecKC Challenge (⭐️110)
  • hexway/apple_bleee - Apple BLE research [GNU GPLv3] (⭐️2176)
  • HKUDS/CLI-Anything - "CLI-Anything: Making ALL Software Agent-Native" -- CLI-Hub: https://clianything.cc/ [Apache License 2.0] (⭐️28777)
  • hlldz/SpookFlare - Loader, dropper generator with multiple features for bypassing client-side and network-side countermeasures. [Apache License 2.0] (⭐️948) Archived!
  • hodgesmr/mastodon_digest - A Python script that aggregates recent popular posts from your Mastodon timeline [Modified BSD License] (⭐️435)
  • HynekPetrak/passat - passat - password auditing tool. Does statistical analyses on large sets of cracked passwords. [MIT License] (⭐️25)
  • ice-wzl/wmiexec2 - wmiexec2.0 is the same wmiexec that everyone knows and loves (debatable). This 2.0 version is obfuscated to avoid well known signatures from various AV engines. It also has a handful of additional built in modules to help automate some common tasks on Red team engagements. (⭐️63)
  • icyguider/Shhhloader - Syscall Shellcode Loader (Work in Progress) [GNU GPLv3] (⭐️1260)
  • ihebski/DefaultCreds-cheat-sheet - One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️ [MIT License] (⭐️6463)
  • ImpostorKeanu/sec-vault-gen - Python utility to generate filesystem content for Obsidian. [MIT License] (⭐️87)
  • In3tinct/Androidmeda - AI Security tool to deobfuscate and find any potential vulnerabilities in android apps. [Apache License 2.0] (⭐️339)
  • IncideDigital/Mistica - An open source swiss army knife for arbitrary communication over application protocols [GNU GPLv3] (⭐️245)
  • infinition/Bjorn - Bjorn is a powerful network scanning and offensive security tool for the Raspberry Pi with a 2.13-inch e-Paper HAT. It discovers network targets, identifies open ports, exposed services, and potential vulnerabilities. Bjorn can perform brute force attacks, file stealing, host zombification, and supports custom attack scripts. [MIT License] (⭐️5827)
  • infobyte/emploleaks - An OSINT tool that helps detect members of a company with leaked credentials (⭐️772)
  • initstring/uptux - Linux privilege escalation checks (systemd, dbus, socket fun, etc) [MIT License] (⭐️300)
  • InjectionSoftwareandSecurityLLC/Propane - An Open Source KoTH Platform [GNU GPLv3] (⭐️12)
  • Injectyll-HIDe/Injectyll-HIDe - [MIT License] (⭐️39)
  • insanum/gcalcli - Google Calendar Command Line Interface [MIT License] (⭐️3685)
  • insidetrust/statistically-likely-usernames - Wordlists for creating statistically likely username lists for use in password attacks and security testing. Used for pentesting for over 10 years with amazing results. (⭐️1295)
  • IntelligenzaArtificiale/Free-Auto-GPT - Free Auto GPT with NO paids API is a repository that offers a simple version of Auto GPT, an autonomous AI agent capable of performing tasks independently. Unlike other versions, our implementation does not rely on any paid OpenAI API, making it accessible to anyone. [MIT License] (⭐️2540)
  • intelowlproject/IntelOwl - IntelOwl: manage your Threat Intelligence at scale [GNU AGPLv3] (⭐️4529)
  • intoli/exodus - Painless relocation of Linux binaries–and all of their dependencies–without containers. (⭐️3006)
  • iphelix/pack - PACK (Password Analysis and Cracking Kit) [Modified BSD License] (⭐️873)
  • jakebian/snaptile - Versatile window tiling for X11 with powerful keyboard controls [GNU GPLv2] (⭐️433)
  • janosgyerik/bashoneliners - A collection of practical or just pure awesome bash one-liners or shell script tips and tricks for GNU Linux, UNIX or BSD systems. Open, collaborative system, user friendly, with functions to contribute one-liners, request one-liners, search, rss feed, commenting, Open ID login. Open-source project, using Django, Python, jQuery, HTML5, Bootstrap from Twitter. (⭐️222)
  • jayfk/statuspage - A statuspage generator that lets you host your statuspage for free on Github. [MIT License] (⭐️3896)
  • jceb/vim-orgmode - Text outlining and task management for Vim based on Emacs' Org-Mode (⭐️3184)
  • jduck/cve-2015-1538-1 - An exploit for CVE-2015-1538-1 - Google Stagefright ‘stsc’ MP4 Atom Integer Overflow Remote Code Execution (⭐️205)
  • jonaslejon/malicious-pdf - 💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh [BSD 2-Clause "Simplified" License] (⭐️3644)
  • jorgebastida/gordon - λ Gordon is a tool to create, wire and deploy AWS Lambdas using CloudFormation (⭐️2030)
  • karttoon/trigen - Trigen is a Python script which uses different combinations of Win32 function calls in generated VBA to execute shellcode. (⭐️203)
  • kellyjonbrazil/jc - CLI tool and python library that converts the output of popular command-line tools, file-types, and common strings to JSON, YAML, or Dictionaries. This allows piping of output to tools like jq and simplifying automation scripts. [MIT License] (⭐️8570)
  • keredson/gnomecast - Chromecast local files from Linux - supports MKV, subtitles, 5.1 sound and 4K! [GNU GPLv3] (⭐️1440)
  • kevthehermit/volatility_plugins - Volatility Plugins [MIT License] (⭐️64)
  • khast3x/Redcloud - Automated Red Team Infrastructure deployement using Docker [MIT License] (⭐️1263)
  • kibitzr/kibitzr - Personal Web Assistant [MIT License] (⭐️711)
  • KingOfBugbounty/KingOfBugBountyTips - Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters.. (⭐️5274)
  • Kkevsterrr/backdoorme - powerful auto-backdooring utility [MIT License] (⭐️750)
  • knavesec/CredMaster - Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling [MIT License] (⭐️1262)
  • knavesec/Max - Maximizing BloodHound. Max is a good boy. (⭐️532)
  • knight0x07/pyc2bytecode - A Python Bytecode Disassembler helping reverse engineers in dissecting Python binaries by disassembling and analyzing the compiled python byte-code(.pyc) files across all python versions (including Python 3.10.*) (⭐️143)
  • knorrie/btrfs-heatmap - Visualize the layout of data on your btrfs filesystem over time [MIT License] (⭐️220)
  • knz/go-binsize-viz - Size visualization of Go executables using D3 [GNU AGPLv3] (⭐️480)
  • Kometa-Team/Kometa - Python script to update metadata information for items in plex as well as automatically build collections and playlists. The Wiki Documentation is linked below. [MIT License] (⭐️3244)
  • Kozea/Radicale - A simple CalDAV (calendar) and CardDAV (contact) server. [GNU GPLv3] (⭐️4548)
  • kpirnie/kptv-fast - A high-performance streaming service aggregator that combines multiple free streaming platforms into a single M3U playlist and EPG. Perfect for use with Channels DVR, Plex, or any IPTV client. [MIT License] (⭐️94)
  • kragen/xcompose - for sharing .XCompose keybindings (⭐️372)
  • LAION-AI/Open-Assistant - OpenAssistant is a chat-based assistant that understands tasks, can interact with third-party systems, and retrieve information dynamically to do so. [Apache License 2.0] (⭐️37422)
  • lakiw/pcfg_cracker - Probabilistic Context Free Grammar (PCFG) password guess generator (⭐️366)
  • Laokoon-SecurITy/Cortex-XDR-Config-Extractor - Cortex XDR Config Extractor [GNU GPLv3] (⭐️140)
  • larsks/dockerize - A tool for creating minimal docker images from dynamic ELF binaries. [GNU GPLv3] (⭐️356)
  • lavie/runlike - Given an existing docker container, prints the command line necessary to run a copy of it. (⭐️2922)
  • lawndoc/Respotter - Respotter is a Responder honeypot. Detect Responder in your environment as soon as it's spun up. [MIT License] (⭐️198)
  • leonboe1/GoogleFindMyTools - Framework for tracking and building your own Google Find My Device / Find Hub trackers 🧭 [GNU GPLv3] (⭐️1033)
  • lgandx/Responder - Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication. [GNU GPLv3] (⭐️6408)
  • lifadev-archive/aws-lambda-go-shim - Author your AWS Lambda functions in Go, effectively. [Apache License 2.0] (⭐️786) Archived!
  • localstack/localstack - 💻 A fully functional local AWS cloud stack. Develop and test your cloud & Serverless apps offline (⭐️64844) Archived!
  • login-securite/DonPAPI - Dumping DPAPI credz remotely [GNU GPLv3] (⭐️1349)
  • login-securite/lsassy - Extract credentials from lsass remotely [MIT License] (⭐️2191)
  • longld/peda - PEDA - Python Exploit Development Assistance for GDB (⭐️6112)
  • luismartingarcia/protocol - An ASCII Header Generator for Network Protocols [GNU GPLv3] (⭐️943)
  • lwthiker/curl-impersonate - curl-impersonate: A special build of curl that can impersonate Chrome & Firefox [MIT License] (⭐️5931)
  • Lxtharia/minegrub-theme - A Grub Theme in the style of Minecraft! [MIT License] (⭐️4429)
  • ly4k/Certipy - Tool for Active Directory Certificate Services enumeration and abuse [MIT License] (⭐️3454)
  • m417z/ntdoc - Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers (⭐️405)
  • magic-wormhole/magic-wormhole - get things from one computer to another, safely [MIT License] (⭐️22491)
  • maguowei/starred - Create and maintain your own Awesome-style list from GitHub stars! [MIT License] (⭐️1870)
  • mail-in-a-box/mailinabox - Mail-in-a-Box helps individuals take back control of their email by defining a one-click, easy-to-deploy SMTP+everything else server: a mail server in a box. [Creative Commons Zero v1.0 Universal] (⭐️15256)
  • makermusings/fauxmo - Emulated Belkin WeMo devices that work with the Amazon Echo [MIT License] (⭐️524)
  • Malcrove/SeamlessPass - A tool leveraging Kerberos tickets to get Microsoft 365 access tokens using Seamless SSO [MIT License] (⭐️243)
  • mar10/wsgidav - A generic and extendable WebDAV server based on WSGI [MIT License] (⭐️1189)
  • marin-m/vmlinux-to-elf - A tool to recover a fully analyzable .ELF from a raw kernel, through extracting the kernel symbol table (kallsyms) [GNU GPLv3] (⭐️1709)
  • Marten4n6/EvilOSX - An evil RAT (Remote Administration Tool) for macOS / OS X. [GNU GPLv3] (⭐️2402)
  • Matmaus/LnkParse3 - Windows Shortcut file (LNK) parser [MIT License] (⭐️130)
  • maubot/maubot - A plugin-based Matrix bot system. [GNU AGPLv3] (⭐️859)
  • mbrg/power-pwn - An offensive/defense security toolset for discovery, recon and ethical assessment of AI Agents [MIT License] (⭐️1139)
  • mdsecactivebreach/Chameleon - Chameleon: A tool for evading Proxy categorisation (⭐️512)
  • mdsecactivebreach/LinkedInt - LinkedInt: A LinkedIn scraper for reconnaissance during adversary simulation [GNU GPLv3] (⭐️491)
  • Merthurian/ticker - Bitcoin price ticker for the command line. Intended to run in a tmux pane. (⭐️7)
  • mewfree/youtube-dl-subscriptions - Download all new videos from your YouTube subscriptions [MIT License] (⭐️112)
  • mgeeky/RedWarden - Cobalt Strike C2 Reverse proxy that fends off Blue Teams, AVs, EDRs, scanners through packet inspection and malleable profile correlation [GNU GPLv3] (⭐️993) Archived!
  • micahflee/hacks-leaks-and-revelations - Code that goes along with the Hacks, Leaks, and Revelations book [GNU GPLv3] (⭐️188)
  • mikadosoftware/workstation - Docker based portable Workstation [MIT License] (⭐️490)
  • minimaxir/big-list-of-naughty-strings - The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data. [MIT License] (⭐️47620)
  • misteriouser/NextKey - Free KeyLogger for Kali Linux and Ubuntu (⭐️37)
  • mlcsec/huntsman - Email enumerator, username generator, and context validator for hunter.io, snov.io, and skrapp.io [MIT License] (⭐️83)
  • modelscope/DiffSynth-Studio - Enjoy the magic of Diffusion models! [Apache License 2.0] (⭐️12180)
  • moloch--/RootTheBox - A Game of Hackers (CTF Scoreboard & Game Manager) [Apache License 2.0] (⭐️1097)
  • mozilla-services/syncserver - Run-Your-Own Firefox Sync Server [Mozilla Public License 2.0] (⭐️1977) Archived!
  • mschwager/shellshock_poc - [GNU GPLv2] (⭐️16)
  • mthbernardes/rsg - ReverShellGenerator - A tool to generate various ways to do a reverse shell [MIT License] (⭐️567)
  • muammar/mkchromecast - Cast macOS and Linux Audio/Video to your Google Cast and Sonos Devices (⭐️2336)
  • mubix/shellshocker-pocs - Collection of Proof of Concepts and Potential Targets for #ShellShocker [MIT License] (⭐️891)
  • mxmlnkn/ratarmount - Access large archives as a filesystem efficiently, e.g., TAR, RAR, ZIP, GZ, BZ2, XZ, ZSTD archives [MIT License] (⭐️1219)
  • mytechnotalent/simcc - Serial Interactive Meshtastic Chat Client which chats on the Primary Channel over serial. [Apache License 2.0] (⭐️6)
  • n0kovo/pack - PACK (Password Analysis and Cracking Kit) [Modified BSD License] (⭐️3)
  • n1nj4sec/memorpy - Python library using ctypes to search/edit windows / linux / macOS / SunOS programs memory [GNU GPLv3] (⭐️782)
  • n1nj4sec/pupy - Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C (⭐️8964) Archived!
  • naksyn/Pyramid - a tool to help operate in EDRs' blind spots [Apache License 2.0] (⭐️769)
  • natlas/natlas - Attack Surface Management since before Attack Surface Management was a thing [Apache License 2.0] (⭐️660)
  • nccgroup/keimpx - Check for valid credentials across a network over SMB [Apache License 2.0] (⭐️268)
  • nccgroup/pybeacon - A collection of scripts for dealing with Cobalt Strike beacons in Python (⭐️169)
  • NetSPI/sshkey-grab - Grab ssh keys from ssh-agent (⭐️222)
  • nexus511/gpd-ubuntu-packages - This repository shall provide the base for building ubuntu packages from most of the patches currently used to get linux on the gpd-pocket. [GNU GPLv3] (⭐️72)
  • nicolargo/glances - Glances an Eye on your system. A top/htop alternative for GNU/Linux, BSD, Mac OS and Windows operating systems. (⭐️32277)
  • ninoseki/shodan-dojo - Learning Shodan through katas [MIT License] (⭐️469)
  • nixawk/pentest-wiki - PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others. [MIT License] (⭐️3731)
  • nneonneo/universal-doom - A single .exe binary which runs DOOM on DOS 6, Windows 95 and Windows 10 (and probably everything in between). (⭐️294)
  • noDRM/DeDRM_tools - DeDRM tools for ebooks (⭐️9813)
  • nongiach/arm_now - arm_now is a qemu powered tool that allows instant setup of virtual machines on arm cpu, mips, powerpc, nios2, x86 and more, for reverse, exploit, fuzzing and programming purpose. [MIT License] (⭐️889)
  • Nuitka/Nuitka - Nuitka is a Python compiler written in Python. It's fully compatible with Python 2.6, 2.7, 3.4-3.13. You feed it your Python app, it does a lot of clever things, and spits out an executable or extension module. [GNU AGPLv3] (⭐️14694)
  • nullsection/DLL-Spoofer - POC for DLL Proxying / Hijacking [Apache License 2.0] (⭐️63)
  • NVISOsecurity/pyCobaltHound - pyCobaltHound is an Aggressor script extension for Cobalt Strike which aims to provide a deep integration between Cobalt Strike and Bloodhound. [GNU GPLv3] (⭐️135)
  • nylas/sync-engine - 📨 IMAP/SMTP sync system with modern APIs [GNU AGPLv3] (⭐️3504)
  • nyxgeek/autodiscover_enum - time-based user enum via Basic Auth in Azure against Autodiscover [GNU GPLv3] (⭐️34)
  • nyxgeek/onedrive_user_enum - onedrive user enumeration - pentest tool to enumerate valid o365 users [GNU GPLv3] (⭐️748)
  • obscuritylabs/PeFixup - PE File Blessing - To continue or not to continue [GNU GPLv3] (⭐️87)
  • Octoberfest7/TeamsPhisher - Send phishing messages and attachments to Microsoft Teams users (⭐️1113)
  • oddcod3/Phantom-Evasion - Python antivirus evasion tool [GNU GPLv3] (⭐️1449) Archived!
  • onejgordon/flow-dashboard - [UNMAINTAINED] A goal, task & habit tracker + personal dashboard to focus on what matters [MIT License] (⭐️1683)
  • open-webui/open-webui - User-friendly AI Interface (Supports Ollama, OpenAI API, ...) (⭐️130378)
  • opengaming/osgameclones - Open Source Clones of Popular Games (⭐️2882)
  • openpaperwork/paperwork - Personal document manager (Linux/Windows) -- Moved to Gnome's Gitlab (⭐️2437) Archived!
  • opsdisk/scantron - A distributed nmap / masscan scanning framework complete with scan scheduling, engine pooling, subsequent scan port diff-ing, and an API client for automation workflows. [Apache License 2.0] (⭐️181)
  • opsschool/curriculum - Ops School Curriculum (⭐️1627)
  • Oros42/IMSI-catcher - This program show you IMSI numbers of cellphones around you. [Creative Commons Zero v1.0 Universal] (⭐️4176)
  • orppra/ropa - GUI tool to create ROP chains using the ropper API [GNU GPLv3] (⭐️159)
  • Ostorlab/oxo - OXO is a security scanning orchestrator for the modern age. [Apache License 2.0] (⭐️564)
  • outflanknl/RedELK - Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations. [Modified BSD License] (⭐️2626)
  • Overv/outrun - Execute a local command using the processing power of another Linux machine. [Apache License 2.0] (⭐️3137)
  • OWASP/CheatSheetSeries - The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics. [Creative Commons Attribution Share Alike 4.0 International] (⭐️31711)
  • owocki/pytrader - cryptocurrency trading robot [MIT License] (⭐️1961)
  • oxidane/tmuxomatic - Intelligent tmux session management (⭐️1030)
  • ozzieperez/packtpub-library-downloader - Script to download all your PacktPub ebooks and videos (⭐️221)
  • p-e-w/maybe - 📂 🐇 🎩 See what a program does before deciding whether you really want it to happen (NO LONGER MAINTAINED) (⭐️6345) Archived!
  • p0dalirius/Coercer - A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods. [GNU GPLv2] (⭐️2220)
  • p0dalirius/smbclient-ng - smbclient-ng, a fast and user friendly way to interact with SMB shares. [GNU GPLv3] (⭐️1027)
  • paperless-ngx/paperless-ngx - A community-supported supercharged document management system: scan, index and archive all your documents [GNU GPLv3] (⭐️37902)
  • pawl/raspberry-pi-1u-server - A low power 1U Raspberry Pi cluster server for inexpensive colocation. (⭐️738) Archived!
  • Pennyw0rth/NetExec - The Network Execution Tool [BSD 2-Clause "Simplified" License] (⭐️5394)
  • pentestpartners/mykali - Linux setup tool for Kali Linux [Apache License 2.0] (⭐️80)
  • phackt/pentest - Custom tools and projects about security (⭐️110)
  • phretor/infosec-opml - My very personal and opinionatedly organized infosec/cybersec sources in one OPML file [MIT License] (⭐️59)
  • piku/piku - The tiniest PaaS you've ever seen. Piku allows you to do git push deployments to your own servers. [MIT License] (⭐️6569)
  • pimutils/khal - 📆 CLI calendar application [MIT License] (⭐️2973)
  • pimutils/vdirsyncer - 📇 Synchronize calendars and contacts. (⭐️1807)
  • plainas/tq - Perform a lookup by CSS selector on an HTML input [MIT License] (⭐️238)
  • plasma-disassembler/plasma - Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax. [GNU GPLv3] (⭐️3065)
  • Plazmaz/LNKUp - Generates malicious LNK file payloads for data exfiltration (⭐️448)
  • PlumHound/PlumHound - Bloodhound Reporting for Blue and Purple Teams [GNU GPLv3] (⭐️1281)
  • poljar/weechat-matrix - Weechat Matrix protocol script written in python (⭐️984)
  • pre-commit/pre-commit - A framework for managing and maintaining multi-language pre-commit hooks. [MIT License] (⭐️15109)
  • presslabs/gitfs - Version controlled file system [Apache License 2.0] (⭐️2569)
  • ProfoundNetworks/gzipi - Tools for indexing gzip files to support random-like access. (⭐️28)
  • prowler-cloud/prowler - Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment. [Apache License 2.0] (⭐️13515)
  • ptrsr/pi-ci - Prepare Raspberry Pi 3, 4 & 5 configurations using a virtual machine. (⭐️751)
  • public-apis/public-apis - A collective list of free APIs [MIT License] (⭐️419761)
  • pwr-Solaar/Solaar - Linux device manager for Logitech devices [GNU GPLv2] (⭐️8498)
  • Py-KMS-Organization/py-kms - KMS Server Emulator written in Python [The Unlicense] (⭐️770)
  • Raikia/Kali-Setup - Script for Kali that adds a bunch of tools and customizes it to be much better (⭐️186)
  • ramon-victor/freegpt-webui - GPT 3.5/4 with a Chat Web UI. No API key required. [GNU GPLv3] (⭐️5656) Archived!
  • RedSiege/C2concealer - C2concealer is a command line tool that generates randomized C2 malleable profiles for use in Cobalt Strike. [GNU GPLv3] (⭐️1098)
  • RedSiege/Chromatophore - Utilities for obfuscating shellcode (⭐️102)
  • RedSiege/jargon - (⭐️155)
  • reorx/httpstat - curl statistics made simple [MIT License] (⭐️6254)
  • REPTILEHAUS/Eternal-Blue - REPTILEHAUS' simplified build process of Worawit Wang' (@sleepya_) version of EternalBlue.. The NSA exploit brought to you by the ShadowBrokers for exploiting MS17-010 (⭐️129)
  • resemble-ai/chatterbox - SoTA open-source TTS [MIT License] (⭐️24175)
  • ReversecLabs/captcha22 - CAPTCHA22 is a toolset for building, and training, CAPTCHA cracking models using neural networks. [MIT License] (⭐️334)
  • Ridter/atexec-pro - Fileless atexec, no more need for port 445 (⭐️406)
  • Ridter/noPac - Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user (⭐️988)
  • RocketGod-git/evilportal-htmlsquash - HTML Squasher is an Evil Portal HTML squashing tool for the Flipper Zero WiFi Dev Board. The Evil Portal only allows 20KB single file HTML for the actual portals, and this script is intended to take your output from the “SingleFile” Chrome extension and compress it as much as possible. (⭐️158)
  • RoganDawes/P4wnP1 - P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W. [GNU GPLv3] (⭐️4364)
  • RoganDawes/P4wnP1_nexmon_additions - [GNU GPLv3] (⭐️86)
  • roglew/guppy-proxy - The Guppy Proxy (GUI Pappy) [MIT License] (⭐️142)
  • rootm0s/WinPwnage - UAC bypass, Elevate, Persistence methods (⭐️2740)
  • ropnop/impacket_static_binaries - Standalone binaries for Linux/Windows of Impacket's examples (⭐️745)
  • russolsen/ham_radio_question_pool - All of the current questions for the FCC amateur radio license exams in machine readable format. [Apache License 2.0] (⭐️38)
  • rvrsh3ll/FindFrontableDomains - Search for potential frontable domains [Modified BSD License] (⭐️643)
  • SafeBreach-Labs/mkmalwarefrom - Proof-of-concept two-stage dropper generator that uses bits from external sources [Modified BSD License] (⭐️99)
  • samuelclay/NewsBlur - NewsBlur is a personal news reader that brings people together to talk about the world. A new sound of an old instrument. [MIT License] (⭐️7407)
  • scottydelta/github-crypto-prices - A Github repo that displays live crypto prices from various sources. This trick can be used to display live prices in Github readme, issues, comments, PRs etc using Markdown + ShieldsIO API(https://shields.io/) [MIT License] (⭐️4)
  • scour-project/scour - Scour - An SVG Optimizer / Cleaner [Apache License 2.0] (⭐️866)
  • seanmpuckett/mp-photocell-receiver - micropython class for receiving light transmitted data via photocell , e.g. from a flashing phone screen [Apache License 2.0] (⭐️5)
  • SeattleMeshnet/meshbox - The Hyperboria peering device [GNU GPLv3] (⭐️140)
  • secarmy/RTB-CTF-Framework - A fast, efficient and lightweight (~100 KB) Capture The Flag framework inspired by the HackTheBox platform. Built with Flask. [MIT License] (⭐️4)
  • SECFORCE/Tunna - Tunna is a set of tools which will wrap and tunnel any TCP communication over HTTP. It can be used to bypass network restrictions in fully firewalled environments. (⭐️1273)
  • secretsquirrel/the-backdoor-factory - Patch PE, ELF, Mach-O binaries with shellcode new version in development, available only to sponsors [Modified BSD License] (⭐️3435)
  • secureworks/family-of-client-ids-research - Research into Undocumented Behavior of Azure AD Refresh Tokens [MIT License] (⭐️344)
  • seemoo-lab/opendrop - An open Apple AirDrop implementation written in Python [GNU GPLv3] (⭐️9580)
  • seemoo-lab/openwifipass - An open source implementation of Apple's Wi-Fi Password Sharing protocol in Python. [GNU GPLv3] (⭐️832)
  • sevagas/macro_pack - macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments. The goal of macro_pack is to simplify exploitation, antimalware bypass, and automatize the process from malicious macro and script generation to final document generation. It also provides a lot of helpful features useful for redteam or security research. [Apache License 2.0] (⭐️2297) Archived!
  • shakenetwork/mimipenguin - Mimipenguin密码抓取神器 (⭐️26)
  • sharbov/open-cli - Generate client based on OpenAPI Specification and wrap it in a command line interface. [MIT License] (⭐️56)
  • ShutdownRepo/pywhisker - Python version of the C# tool for "Shadow Credentials" attacks [GNU GPLv3] (⭐️871)
  • ShutdownRepo/shellerator - Simple CLI tool for the generation of bind and reverse shells in multiple languages [GNU GPLv3] (⭐️391)
  • simbaja/ha_gehome - GE Home Appliances (SmartHQ) for Home Assistant [MIT License] (⭐️540)
  • SkeletonMan03/FZEasyMarauderFlash - Easily Flash Marauder onto the Flipper Zero Devboard or an ESP32! [GNU GPLv3] (⭐️1352)
  • skelsec/kerberoast - Kerberoast attack -pure python- [MIT License] (⭐️433)
  • skelsec/pypykatz - Mimikatz implementation in pure Python [MIT License] (⭐️3275)
  • Skiller9090/Lucifer - A Powerful Penetration Tool For Automating Penetration Tasks Such As Local Privilege Escalation, Enumeration, Exfiltration and More... Use Or Build Automation Modules To Speed Up Your Cyber Security Life (⭐️377)
  • spaze/oprah-proxy - Generate credentials for Opera's "browser VPN" [MIT License] (⭐️254) Archived!
  • spencerdodd/kernelpop - kernel privilege escalation enumeration and exploitation framework (⭐️702)
  • straightblast/My-PoC-Exploits - PoC exploits I wrote. They're as is and I will not offer support (⭐️279)
  • strickyak/rye - (⭐️8)
  • strozfriedberg/EvilAbigail - Automated Linux evil maid attack [GNU GPLv2] (⭐️436)
  • sumpfork/dominiontabs - Divider generator for the card game Dominion and its expansions. (⭐️144)
  • swisskyrepo/PayloadsAllTheThings - A list of useful payloads and bypass for Web Application Security and Pentest/CTF [MIT License] (⭐️76676)
  • Syslifters/sysreptor - A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease. (⭐️2410)
  • SySS-Research/Seth - Perform a MitM attack and extract clear text credentials from RDP connections [MIT License] (⭐️1452)
  • TaroballzChen/shecodject - shecodject is a autoscript for shellcode injection by Python3 programing [GNU GPLv3] (⭐️125)
  • Tautulli/Tautulli - A Python based monitoring and tracking tool for Plex Media Server. [GNU GPLv3] (⭐️6433)
  • Taxel/PlexTraktSync - A python script that syncs the movies, shows and ratings between trakt and Plex (without needing a PlexPass or Trakt VIP subscription) [MIT License] (⭐️2066)
  • Tecnativa/docker-socket-proxy - Proxy over your Docker socket to restrict which requests it accepts [Apache License 2.0] (⭐️2394)
  • Telefonica/HomePWN - HomePwn - Swiss Army Knife for Pentesting of IoT Devices [GNU GPLv3] (⭐️931)
  • temp43487580/EntraPassTheCert - tool for requesting Entra ID's P2P certificate and authenticating to a remote Entra joinned devices with it [Apache License 2.0] (⭐️136)
  • tenable/poc - Proof of Concepts [Modified BSD License] (⭐️1327)
  • tern-tools/tern - Tern is a software composition analysis tool and Python library that generates a Software Bill of Materials for container images and Dockerfiles. The SBOM that Tern generates will give you a layer-by-layer view of what's inside your container in a variety of formats including human-readable, JSON, HTML, SPDX and more. [BSD 2-Clause "Simplified" License] (⭐️1013)
  • terryyin/lizard - A simple code complexity analyser without caring about the C/C++ header files or Java imports, supports most of the popular languages. (⭐️2326)
  • Th3R3p0/AutoSec4WebApps - (⭐️12)
  • the-useless-one/pywerview - A (partial) Python rewriting of PowerSploit's PowerView [GNU GPLv3] (⭐️1107)
  • thefinn93/signal-weechat - Use signal in weechat [GNU GPLv3] (⭐️72)
  • threat9/routersploit - Exploitation Framework for Embedded Devices (⭐️13059)
  • threatexpress/random_c2_profile - Cobalt Strike random C2 Profile generator [GNU GPLv3] (⭐️688)
  • Tib3rius/Pentest-Cheatsheets - [GNU GPLv3] (⭐️1160)
  • tradytics/eiten - Statistical and Algorithmic Investing Strategies for Everyone [GNU GPLv3] (⭐️3182)
  • trailofbits/graphtage - A semantic diff utility and library for tree-like files such as JSON, JSON5, XML, HTML, YAML, and CSV. [GNU LGPLv3] (⭐️2470)
  • travco/rephraser - Markov-chains for linguistically-correct password cracking [MIT License] (⭐️63)
  • treeio/treeio - Tree.io (⭐️1484)
  • TrevorEdris/markovify-twitter - (⭐️3)
  • Tribler/tribler - Privacy enhanced BitTorrent client with P2P content discovery [GNU GPLv3] (⭐️5214)
  • trustedsec/hate_crack - A tool for automating cracking methodologies through Hashcat from the TrustedSec team. (⭐️1815)
  • trustedsec/ptf - The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools. (⭐️5500)
  • trustedsec/specula - (⭐️234)
  • trustedsec/The_Shelf - Retired TrustedSec Capabilities (⭐️250)
  • trustedsec/unicorn - Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18. (⭐️3907)
  • trycua/cua - Open-source infrastructure for Computer-Use Agents. Sandboxes, SDKs, and benchmarks to train and evaluate AI agents that can control full desktops (macOS, Linux, Windows). [MIT License] (⭐️13405)
  • tsale/EDR-Telemetry - This project aims to compare and evaluate the telemetry of various EDR products. (⭐️1942)
  • tsarpaul/GLORYHook - The first Linux hooking framework to allow merging two binary files into one! (⭐️97)
  • tsileo/microblog.pub - A self-hosted, single-user, ActivityPub powered microblog. [GNU AGPLv3] (⭐️1148)
  • twintproject/twint - An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following, Tweets and more while evading most API limitations. [MIT License] (⭐️16355) Archived!
  • uslurper/digiduck - This program compiles Ducky Script into something usable for the Digispark ATTiny 85 chip. Get yourself a $1 USB Rubber Ducky. [MIT License] (⭐️28)
  • Veil-Framework/Veil - Veil 3.1.X (Check version info in Veil at runtime) [GNU GPLv3] (⭐️4213) Archived!
  • vim-scripts/vim-do - Run shell commands asynchronously and show the output in Vim when they finish [MIT License] (⭐️15)
  • wendlers/mpfshell - A simple shell based file explorer for ESP8266 Micropython based devices ⛺ [MIT License] (⭐️415)
  • wetw0rk/malicious-wordpress-plugin - Simply generates a wordpress plugin that will grant you a reverse shell once uploaded. I recommend installing Kali Linux, as msfvenom is used to generate the payload. [MIT License] (⭐️307)
  • wez3/msfenum - A Metasploit auto auxiliary script [GNU GPLv3] (⭐️103)
  • whad-team/whad-client - Wireless Hacking Devices Protocol client [MIT License] (⭐️291)
  • wietze/lnk-it-up - Project for generating and identifying deceptive LNK files. [GNU GPLv3] (⭐️316)
  • worawit/MS17-010 - MS17-010 (⭐️2238)
  • x-hw/amazing-qr - 💮 amazing QRCode generator in Python (supporting animated gif) - Python amazing 二维码生成器(支持 gif 动态图片二维码) [GNU GPLv3] (⭐️10769)
  • x0rz/EQGRP_Lost_in_Translation - Decrypted content of odd.tar.xz.gpg, swift.tar.xz.gpg and windows.tar.xz.gpg (⭐️1991)
  • x0rzavi/github-readme-terminal - ✨ Elevate your GitHub Profile ReadMe with Minimalistic Retro Terminal GIFs 🚀 [MIT License] (⭐️708)
  • xapax/oscp - (⭐️510)
  • XboxDev/endgame-exploit - A modern dashboard exploit for the original Microsoft Xbox. [MIT License] (⭐️535)
  • xdavidhu/mitmAP - 📡 A python program to create a fake AP and sniff data. [MIT License] (⭐️1689) Archived!
  • xforcered/WFH - (⭐️198)
  • xtekky/gpt4free - The official gpt4free repository | various collection of powerful language models | opus 4.6 gpt 5.3 kimi 2.5 deepseek v3.2 gemini 3 [GNU GPLv3] (⭐️65976)
  • Yaxxine7/ASRepCatcher - Make everyone in your VLAN ASRep roastable [GNU GPLv3] (⭐️250)
  • yoda66/AndroidEmbedIT - A quick and dirty python script to embed a Metasploit generated APK file into another APK for fun. (⭐️146)
  • yt-dlp/yt-dlp - A feature-rich command-line audio/video downloader [The Unlicense] (⭐️155209)
  • zeroSteiner/mayhem - Runtime Process Manipulation [Modified BSD License] (⭐️240)
  • ztgrace/changeme - A default credential scanner. [GNU GPLv3] (⭐️1504)

Rich Text Format

  • ckeditor/ckeditor5 - Powerful rich text editor framework with a modular architecture, modern integrations, and features like collaborative editing. (⭐️10397)

Roff

Ruby

Rust

  • 0xdea/blindsight - Red teaming tool to dump LSASS memory, bypassing basic countermeasures. [MIT License] (⭐️247)
  • aaronjanse/dns-over-wikipedia - Redirect .idk domains using Wikipedia (⭐️1574)
  • amber-lang/amber - 💎 Amber the programming language compiled to Bash [GNU LGPLv3] (⭐️4662)
  • anordal/shellharden - The corrective bash syntax highlighter [Mozilla Public License 2.0] (⭐️4773)
  • aome510/spotify-player - A Spotify player in the terminal with full feature parity [MIT License] (⭐️6519)
  • astral-sh/ruff - An extremely fast Python linter and code formatter, written in Rust. [MIT License] (⭐️46879)
  • baskerville/plato - Document reader (⭐️1624)
  • cococonscious/koji - 🦊 An interactive CLI for creating conventional commits. [MIT License] (⭐️450)
  • containers/krunvm - Create microVMs from OCI images [Apache License 2.0] (⭐️1645)
  • dani-garcia/vaultwarden - Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs [GNU AGPLv3] (⭐️58032)
  • denoland/deno - A modern runtime for JavaScript and TypeScript. [MIT License] (⭐️106473)
  • dropbox/rust-brotli - Brotli compressor and decompressor written in rust that optionally avoids the stdlib [Modified BSD License] (⭐️916)
  • ekzhang/bore - 🕳 bore is a simple CLI tool for making tunnels to localhost [MIT License] (⭐️11012)
  • evilsocket/cake - Distributed inference for mobile, desktop and server. (⭐️3008)
  • g0h4n/RustHound-CE - Active Directory data ingestor for BloodHound Community Edition written in Rust. 🦀 [MIT License] (⭐️483)
  • glzr-io/glazewm - GlazeWM is a tiling window manager for macOS and Windows inspired by i3wm. [GNU GPLv3] (⭐️11796)
  • Hans-Halverson/brimstone - New JavaScript engine written in Rust [MIT License] (⭐️1292)
  • Idov31/FunctionStomping - Shellcode injection technique. Given as C++ header, standalone Rust program or library. [GNU GPLv3] (⭐️709) Archived!
  • imsnif/bandwhich - Terminal bandwidth utilization tool [MIT License] (⭐️11668)
  • jameslittle230/stork - 🔎 Impossibly fast web search, made for static sites. [Apache License 2.0] (⭐️2754)
  • johnthagen/min-sized-rust - 🦀 How to minimize Rust binary size 📦 https://github.com/johnthagen/min-sized-rust [MIT License] (⭐️9725)
  • Kudaes/MFTool - Direct access to NTFS volumes [Apache License 2.0] (⭐️293)
  • LLukas22/Jellyswarrm - Bring all your Jellyfin servers together [GNU GPLv2] (⭐️596)
  • lvkv/whenfs - A FUSE filesystem for your Google calendar [MIT License] (⭐️1519)
  • meilisearch/meilisearch - A lightning-fast search engine API bringing AI-powered hybrid search to your sites and applications. (⭐️56991)
  • mhasbini/duprule - Detect & filter duplicate hashcat rules [MIT License] (⭐️48)
  • mttaggart/OffensiveNotion - Notion as a platform for offensive operations [MIT License] (⭐️1174) Archived!
  • NH-RED-TEAM/RustHound - Active Directory data ingestor for BloodHound Legacy written in Rust. 🦀 [MIT License] (⭐️1137)
  • obi1kenobi/trustfall - A query engine for any combination of data sources. Query your files and APIs as if they were databases! [Apache License 2.0] (⭐️2843)
  • oxy-secure/oxy - [BSD 2-Clause "Simplified" License] (⭐️362) Archived!
  • PaulJuliusMartinez/jless - jless is a command-line JSON viewer designed for reading, exploring, and searching through JSON data. [MIT License] (⭐️5356)
  • phiresky/sqlite-zstd - Transparent dictionary-based row-level compression for SQLite [GNU LGPLv3] (⭐️1660)
  • printfn/fend - Arbitrary-precision unit-aware calculator [MIT License] (⭐️979)
  • sharkdp/hyperfine - A command-line benchmarking tool [Apache License 2.0] (⭐️27827)
  • spellshift/realm - Realm is a cross platform Red Team engagement platform with a focus on automation and reliability. [GNU GPLv3] (⭐️611)
  • stepchowfun/docuum - Docuum performs least recently used (LRU) eviction of Docker images. 🗑️ (⭐️688)
  • tailhook/vagga - Vagga is a containerization tool without daemons [MIT License] (⭐️1895)
  • trickster0/OffensiveRust - Rust Weaponization for Red Team Engagements. (⭐️2995)
  • tun2proxy/tun2proxy - Tunnel (TUN) interface for SOCKS and HTTP proxies [MIT License] (⭐️1265)
  • tuna-f1sh/cyme - List system USB buses and devices. A modern cross-platform lsusb that attempts to maintain compatibility with, but also add new features [GNU GPLv3] (⭐️1094)
  • witnessmenow/ESP32-Cheap-Yellow-Display - Building a community around a cheap ESP32 Display with a touch screen [MIT License] (⭐️3802)
  • wumb0/rust_bof - Cobalt Strike Beacon Object Files (BOFs) written in rust with rust core and alloc. (⭐️282)
  • x2bool/xlite - Query Excel spredsheets (.xlsx, .xls, .ods) using SQLite [MIT License] (⭐️1302)

SCSS

SVG

Scala

Shell

  • 0xJin/awesome-bugbounty-builder - Awesome Bug bounty builder Project [GNU GPLv3] (⭐️675)
  • 89luca89/distrobox - Use any linux distribution inside your terminal. Enable both backward and forward compatibility with software and freedom to use whatever distribution you’re more comfortable with. Mirror available at: https://gitlab.com/89luca89/distrobox [GNU GPLv3] (⭐️12245)
  • activecm/BeaKer - Beacon Kibana Executable Report. Aggregates Sysmon Network Events With Elasticsearch and Kibana [GNU GPLv3] (⭐️301)
  • AdrienPoupa/docker-compose-nas - Simple Docker Compose NAS featuring Sonarr, Radarr, Prowlarr, Jellyfin, qBittorrent, PIA VPN and Traefik with SSL support (⭐️1956)
  • aelsabbahy/miniswarm - Docker Swarm cluster in one command [Apache License 2.0] (⭐️128)
  • aforensics/HiddenVM - HiddenVM — Use any desktop OS without leaving a trace. [GNU GPLv3] (⭐️2653)
  • AkihiroSuda/buildbench - benchmark tool for Docker, BuildKit, img, Buildah, and Kaniko [Apache License 2.0] (⭐️75)
  • alexellis/docker-arm - Build Docker and Swarm on an ARM SoC like the Raspberry Pi [GNU GPLv3] (⭐️873) Archived!
  • alexellis/k8s-on-raspbian - Kubernetes on Raspbian (Raspberry Pi) [MIT License] (⭐️886)
  • alphacharlie/RasPwn - RasPwn OS [GNU GPLv3] (⭐️67)
  • anothrNick/github-tag-action - A Github Action to tag a repo on merge. [MIT License] (⭐️867)
  • aristocratos/bashtop - Linux/OSX/FreeBSD resource monitor [Apache License 2.0] (⭐️11100)
  • ash-shell/ash - 🐚 A Modular Bash Framework [MIT License] (⭐️156)
  • attila-lendvai/openwrt-auto-extroot - Use the OpenWRT ImageBuilder to build a firmware that automatically formats and sets up extroot on any (!) inserted storage device [MIT License] (⭐️151)
  • Autohook/Autohook - A very, very small Git hook manager with focus on automation [MIT License] (⭐️141)
  • azlux/log2ram - ramlog like for systemd (Put log into a ram folder) [MIT License] (⭐️3022)
  • basherpm/basher - A package manager for shell scripts. [MIT License] (⭐️1278)
  • BeameryHQ/meta-git - Tooling to make working with a meta repo easier [MIT License] (⭐️10)
  • beefsack/zsh-simplicity - Minimal composable configs for zsh [MIT License] (⭐️18)
  • bet4it/build-an-efficient-pwn-environment - How to build an efficient pwn development environment in 2020 (⭐️269)
  • bnjf/compre.sh - combined compress(1) and uuencode(1) implementation for bash/ksh (⭐️4)
  • boot2docker/boot2docker - DEPRECATED; see boot2docker/boot2docker#1408 [Apache License 2.0] (⭐️8287) Archived!
  • Botspot/bvm - User friendly, high performance Windows 11 Virtual Machine on ARM Linux [GNU GPLv3] (⭐️480)
  • bpkg/bpkg - Lightweight bash package manager [MIT License] (⭐️1967)
  • brendangregg/perf-tools - Performance analysis tools based on Linux perf_events (aka perf) and ftrace [GNU GPLv2] (⭐️10406)
  • bsycorp/kind - Kubernetes-in-Docker - A single node cluster to run your CI tests against thats ready in 30 seconds [Apache License 2.0] (⭐️383)
  • BuildAPKs/buildAPKs - Really quickly build APKs on handheld device (smartphone and tablet) in Amazon, Android, Chromebook, PRoot and Windows📲 See https://buildapks.github.io/docsBuildAPKs/setup to start building APKs. [GNU GPLv3] (⭐️626)
  • caido/caido - 🚀 Caido releases, wiki and roadmap (⭐️2242)
  • cattlepi/cattlepi - effortlessly boot, configure, update and monitor your raspberry pi ☁️ [Apache License 2.0] (⭐️272)
  • Charliedean/NetcatUP - Upgrade your netcat shell today! (⭐️58)
  • chvancooten/BugBountyScanner - A Bash script and Docker image for Bug Bounty reconnaissance. Intended for headless use. [MIT License] (⭐️921)
  • cisagov/LME - Logging Made Easy (LME) is a no cost, open source platform that centralizes log collection, enhances threat detection, and enables real-time alerting, helping small to medium-sized organizations secure their infrastructure. LME Docs can be found at https://cisagov.github.io/lme-docs/docs/ (⭐️1404)
  • Cleafy/sxkdvm - SXKDVM - OSX Docker KVM / Run an OSX KVM virtual machine inside a Docker container. (⭐️867)
  • client9/shlib - portable functions for posix shell environments [The Unlicense] (⭐️425)
  • cloudsec/brootkit - Lightweight rootkit implemented by bash shell scripts v0.10 (⭐️575)
  • cptactionhank/graveyard-sekexe - Separate Kernel Execution: execute a process within user-mode-linux and retrieve its output and status code (⭐️6)
  • cryptodashie/ipfs - IPFS (⭐️16)
  • CyanogenMod/android_external_heimdall - Heimdall is a cross-platform open-source tool suite used to flash firmware (aka ROMs) onto Samsung Galaxy S devices. [MIT License] (⭐️1)
  • cyphunk/humanism.sh - subjective but sensible defaults for shell use. Ubuntu, OSX, FreeBSD tested. (⭐️184)
  • cytopia/pwncat - pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE) [MIT License] (⭐️1934)
  • dana-at-cp/backdoor-apk - backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool, the Android SDK, smali, etc. This shell script is provided as-is without warranty of any kind and is intended for educational purposes only. [Apache License 2.0] (⭐️2345)
  • dehydrated-io/dehydrated - letsencrypt/acme client implemented as a shell-script – just add water [MIT License] (⭐️6189)
  • DenizParlak/Zeus - AWS Auditing & Hardening Tool [MIT License] (⭐️713)
  • Dewalt-arch/pimpmykali - Kali Linux Fixes for Newly Imported VM's (⭐️2406)
  • dhruvvyas90/qemu-rpi-kernel - Qemu kernel for emulating Rpi on QEMU (⭐️2139)
  • docker-archive/swarm-frontends - Deploy Kubernetes with Swarm [Apache License 2.0] (⭐️181) Archived!
  • docker/docker-bench-security - The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production. [Apache License 2.0] (⭐️9605)
  • dockur/windows - Windows inside a Docker container. [MIT License] (⭐️50818)
  • dominictarr/JSON.sh - a pipeable JSON parser written in Bash (⭐️2026)
  • dylanaraps/pure-bash-bible - 📖 A collection of pure bash alternatives to external processes. [MIT License] (⭐️41476) Archived!
  • dylanaraps/pure-sh-bible - 📖 A collection of pure POSIX sh alternatives to external processes. [MIT License] (⭐️7658) Archived!
  • edoardottt/awesome-hacker-search-engines - A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more [MIT License] (⭐️10418)
  • EivindArvesen/prm - A minimal project manager for the terminal. [Modified BSD License] (⭐️444)
  • eklitzke/c.sh - Inline C/asm in Bash (⭐️254)
  • evilmog/hashcat-scripts - Random Hashcat Scrips [MIT License] (⭐️37)
  • felixr/docker-zsh-completion - [OUTDATED] zsh completion for docker; use https://github.com/docker/cli instead (⭐️258) Archived!
  • fff7d1bc/better-initramfs - Small and reliable initramfs solution supporting (remote) rescue shell, lvm, dmcrypt luks, software raid, tuxonice, uswsusp and more. [Modified BSD License] (⭐️315) Archived!
  • fgrehm/devstep - Development environments powered by Docker and buildpacks [MIT License] (⭐️195) Archived!
  • foxlet/macOS-Simple-KVM - Tools to set up a quick macOS VM in QEMU, accelerated by KVM. (⭐️13901)
  • frameable/aviary.sh - Minimal distributed configuration management in bash [MIT License] (⭐️1313)
  • g0tmi1k/debian-ssh - Debian OpenSSL Predictable PRNG (CVE-2008-0166) (⭐️410)
  • gfredericks/quinedb - QuineDB is a quine that is also a key-value store. [Eclipse Public License 1.0] (⭐️582)
  • gh2o/bash_tls - A minimal TLS 1.2 client implementation in a pure Bash script (⭐️351)
  • govolution/avet - AntiVirus Evasion Tool [GNU GPLv3] (⭐️1751)
  • gtxaspec/wz_mini_hacks - wz camera mods... make your camera better. (⭐️1508)
  • guysoft/FullPageOS - A raspberrypi distro to display a full page browser on boot [GNU GPLv3] (⭐️4356)
  • hackerb9/lsix - Like "ls", but for images. Shows thumbnails in terminal using sixel graphics. [GNU GPLv3] (⭐️4158)
  • hackerschoice/bincrypter - Pack/Encrypt/Obfuscate ELF + SHELL scripts (⭐️442)
  • hackerschoice/thc-tips-tricks-hacks-cheat-sheet - Various tips & tricks (⭐️3809)
  • hardenedlinux/harbian-audit - Hardened Debian GNU/Linux distro auditing [GNU GPLv3] (⭐️460)
  • hardware/mailserver - ⚠️ UNMAINTAINED - Simple and full-featured mail server using Docker [MIT License] (⭐️1290) Archived!
  • headmelted/prebootstrap - Debian root filesystems for multiple architectures (⭐️14)
  • housni/sheldon - Sheldon is a Bash 4.3+ library that is intuitive and easy to use, developed with Test Driven Development (TDD). [MIT License] (⭐️14)
  • ingydotnet/git-hub - Do GitHub operations from the git command [MIT License] (⭐️789)
  • ingydotnet/json-bash - Load, Dump and Manipulate JSON in Bash [MIT License] (⭐️111)
  • itsamenathan/crackflasher - Bash script for flashing roms to android devices running ClockworkMod (⭐️3)
  • ivanilves/xiringuito - SSH-based "VPN for poors" [Apache License 2.0] (⭐️1153)
  • jaromaz/MacintoshPi - MacintoshPi is a project that allows running full-screen versions of Apple's Mac OS 7, Mac OS 8 and Mac OS 9 with sound, active online connection and modem emulation under Raspberry Pi. [GNU GPLv2] (⭐️850)
  • jbreed/apkwash - Android APK Antivirus evasion for msfvenom generated payloads. [GNU GPLv3] (⭐️205)
  • jedi4ever/veewee - Easing the building of vagrant boxes [MIT License] (⭐️4270)
  • jpetazzo/container.training - Slides and code samples for training, tutorials, and workshops about Docker, containers, and Kubernetes. (⭐️3920)
  • jpetazzo/dind - Docker in Docker [Apache License 2.0] (⭐️2526) Archived!
  • jpetazzo/nsenter - [Apache License 2.0] (⭐️2589) Archived!
  • jpetazzo/pipework - Software-Defined Networking tools for LXC (LinuX Containers) [Apache License 2.0] (⭐️4252)
  • jstrieb/ctf-collab - Collaborative programming environment inside GitHub Actions – like Google Docs for hacking [GNU GPLv3] (⭐️72)
  • kdave/btrfsmaintenance - Scripts for btrfs maintenance tasks like periodic scrub, balance, trim or defrag on selected mountpoints or directories. [GNU GPLv2] (⭐️1100)
  • kelseyhightower/craft-kubernetes-workshop - Craft Kubernetes Workshop (⭐️174)
  • kholia/OSX-KVM - Run macOS on QEMU/KVM. With OpenCore + Monterey + Ventura + Sonoma support now! Only commercial (paid) support is available now to avoid spammy issues. No Mac system is required. (⭐️23131)
  • koffiebaard/bash-end - Fast, unopinionated, minimalist API framework written solely in Bash. (⭐️12)
  • kriansa/ansible-bundler - Turn Ansible playbooks into executable files [Modified BSD License] (⭐️168)
  • kubernetes-retired/kubeadm-dind-cluster - [EOL] A Kubernetes multi-node test cluster based on kubeadm [Apache License 2.0] (⭐️1103) Archived!
  • kvz/bash3boilerplate - Templates to write better Bash scripts [MIT License] (⭐️2198)
  • learnbyexample/Command-line-text-processing - ⚡ From finding text to search and replace, from sorting to beautifying text and more 🎨 (⭐️10178) Archived!
  • leebaird/discover - Custom bash scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Kali Linux. [MIT License] (⭐️3836)
  • lord-alfred/ipranges - 🔨 List all IP ranges from: Google (Cloud & GoogleBot), Bing (Bingbot), Amazon (AWS), Microsoft, Oracle (Cloud), GitHub, Facebook (Meta), OpenAI (GPTBot) and other with daily updates. [Creative Commons Zero v1.0 Universal] (⭐️1030)
  • mainframed/Hackers-Plymouth - Hacker bootsplash themes just like in the movie! (⭐️60)
  • maK-/systemtap-rootkit-project-scripts - This is a repository to hold various scripts and proof of concept code for my final year college project. A Linux rootkit. (⭐️8)
  • MatheuZSecurity/D3m0n1z3dShell - Demonized Shell is an Advanced Tool for persistence in linux. [GNU GPLv2] (⭐️445)
  • mathiasbynens/dotfiles - 🔧 .files, including ~/.macos — sensible hacker defaults for macOS [MIT License] (⭐️31294)
  • mchav/with - Command prefixing for continuous workflow using a single tool. (⭐️1439)
  • meithecatte/cursedfs - Make a disk image formatted with both ext2 and FAT at once [Do What The Fck You Want To Public License*] (⭐️384)
  • mrschyte/dockerpot - A docker based honeypot. [BSD 2-Clause "Simplified" License] (⭐️152)
  • mrzool/bash-sensible - An attempt at saner Bash defaults [MIT License] (⭐️2116)
  • muayyad-alsadi/docker-jumpshell - Jump-box shell for Docker - secure remote ssh into containers with ACL (⭐️26)
  • muthuishere/mcp-server-bash-sdk - Yes Mcp server in bash [MIT License] (⭐️502)
  • mviereck/x11docker - Run GUI applications and desktops in docker and podman containers. Focus on security. [MIT License] (⭐️6243)
  • myplaceonline/posixcube - posixcube.sh is a POSIX compliant, shell script-based server automation framework. [MIT License] (⭐️172)
  • myspaghetti/macos-virtualbox - Push-button installer of macOS Catalina, Mojave, and High Sierra guests in Virtualbox on x86 CPUs for Windows, Linux, and macOS [GNU GPLv2] (⭐️13554) Archived!
  • n4ru/1vyrain - LiveUSB Bootable exploit chain to unlock all features of xx30 ThinkPad machines. WiFi Whitelist, Advanced Menu, Overclocking. (⭐️1199)
  • nahamsec/lazyrecon - This script is intended to automate your reconnaissance process in an organized fashion (⭐️2031)
  • Nature40/pimod - Reconfigure Raspberry Pi images with an easy, Docker-like configuration file [GNU GPLv3] (⭐️145)
  • ncruces/sqlite-vec-go - sqlite-vec WASM bindings for ncruces/go-sqlite3, published as a separate repo (⭐️4)
  • nestybox/sysbox - An open-source, next-generation "runc" that empowers rootless containers to run workloads such as Systemd, Docker, Kubernetes, just like VMs. [Apache License 2.0] (⭐️3568)
  • niieani/bash-oo-framework - Bash Infinity is a modern standard library / framework / boilerplate for Bash [MIT License] (⭐️5625)
  • niklasb/libc-database - Build a database of libc offsets to simplify exploitation [MIT License] (⭐️1858)
  • nlf/dhyve - docker meets xhyve (⭐️79)
  • NodeOS/NodeOS - Lightweight operating system using Node.js as userspace [MIT License] (⭐️7348)
  • NorthboundTrain/jqg - search JSON using JQ, printing full path/flattened results [Apache License 2.0] (⭐️23)
  • ocochard/graphpath - Graphpath generates an ASCII network diagram from the route table of a Unix/Linux [BSD 2-Clause "Simplified" License] (⭐️407)
  • open-guides/og-aws - 📙 Amazon Web Services — a practical guide [Creative Commons Attribution 4.0 International] (⭐️36559)
  • OpenSCAP/container-compliance - Assessing compliance of a container [GNU GPLv3] (⭐️243) Archived!
  • OpenVPN/easy-rsa - easy-rsa - Simple shell based CA utility (⭐️4420)
  • p8952/bocker - Docker implemented in around 100 lines of bash [GNU GPLv3] (⭐️12633)
  • pbkhrv/rtl_433-hass-addons - Collection of Home Assistant add-ons that use rtl_433 (⭐️330)
  • pclalv/kckn - Per-shell kubernetes contexts (⭐️9)
  • phusion/baseimage-docker - A minimal Ubuntu base image modified for Docker-friendliness [MIT License] (⭐️9095)
  • plyint/encpass.sh - Lightweight solution for using encrypted passwords in shell scripts [MIT License] (⭐️618)
  • quickemu-project/quickemu - Quickly create and run optimised Windows, macOS and Linux virtual machines [MIT License] (⭐️14893)
  • rbren/baml - (⭐️17)
  • rebootuser/LinEnum - Scripted Local Linux Enumeration & Privilege Escalation Checks [MIT License] (⭐️7887)
  • redcode-labs/Bashark - Bash post exploitation toolkit [MIT License] (⭐️748)
  • RedTeamOperations/RedCloud-OS - RedCloudOS is a Cloud Adversary Simulation Operating System for Red Teams to assess the Cloud Security of Leading Cloud Service Providers (CSPs) [GNU GPLv2] (⭐️677)
  • reinterpretcat/lfs - Docker configuration for building Linux From Scratch system [MIT License] (⭐️673)
  • robertmillan/mkbreak - Generic exploit for master key vulnerability in Android [Apache License 2.0] (⭐️34)
  • rosineygp/mkdkr - mkdkr = Makefile + Docker [Apache License 2.0] (⭐️381)
  • rouyng/tpms-helper - A bash script to automate Toyota tire pressure monitoring system testing via rtl_433. (⭐️27)
  • RPi-Distro/pi-gen - Tool used to create the official Raspberry Pi OS images [Modified BSD License] (⭐️3151)
  • sandvine/freebsd-cross-build - (Cross) Compile FreeBSD binaries on Linux [Apache License 2.0] (⭐️33)
  • screetsec/Microsploit - Fast and easy create backdoor office exploitation using module metasploit packet , Microsoft Office , Open Office , Macro attack , Buffer Overflow [GNU GPLv3] (⭐️443)
  • screetsec/Sudomy - Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting [MIT License] (⭐️2355)
  • sdr-enthusiasts/docker-flightradar24 - Multi-architecture docker container (arm32v7/arm64/x86_64) running flightradar24 fr24feed. Designed to work in tandem with https://sdr-e.com/docker-adsb-ultrafeeder (⭐️224)
  • sdr-enthusiasts/docker-readsb-protobuf - Multi-architecture readsb-protobuf container with support for RTLSDR, bladeRF and plutoSDR (x86_64, arm32v7, arm64v8) (⭐️241) Archived!
  • seajaysec/cypheroth - Automated, extensible toolset that runs cypher queries against Bloodhound's Neo4j backend and saves output to spreadsheets. [BSD 2-Clause "Simplified" License] (⭐️255)
  • seanap/Plex-Audiobook-Guide - A walkthrough for optimal Audiobook experience using Plex (⭐️1784)
  • shellfire-dev/shellfire - A repository of namespaced, composable shell (bash, sh and dash) function libraries. Takes aware the pain of shell scripting, making it robust and reusable. Includes secure curl usage, JSON, XML and Debian control file parsers, dependency documentation via attributes, and more. Batteries ARE included. (⭐️1223)
  • siavash9000/netlimy - modern website self-hosting with continuous deployment out of the box. only docker needed. [MIT License] (⭐️4)
  • sickcodes/Docker-eyeOS - Run iPhone (xnu-arm64) in a Docker container! Supports KVM + iOS kernel debugging (GDB)! Run xnu-qemu-arm64 in Docker! Works on ANY device. [GNU GPLv3] (⭐️1021)
  • sickcodes/Docker-OSX - Run macOS VM in a Docker! Run near native OSX-KVM in Docker! X11 Forwarding! CI/CD for OS X Security Research! Docker mac Containers. [GNU GPLv3] (⭐️52383)
  • sickcodes/osx-serial-generator - Mac Serial Generator - Generate complete sets of Serial Numbers for OSX-KVM, Docker-OSX and of course, OpenCore. [GNU GPLv3] (⭐️1668)
  • six2dez/reconftw - reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities [MIT License] (⭐️7412)
  • sstephenson/bats - Bash Automated Testing System [MIT License] (⭐️7116) Archived!
  • stealthcopter/deepce - Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE) [Apache License 2.0] (⭐️1498)
  • stockmind/gpd-pocket-ubuntu-respin - Collection of scripts and tweaks to adapt Ubuntu and Linux Mint ISO images to let them run smooth on GPD Pocket (⭐️355)
  • svbl/picomrade - This repository contains a step-by-step guide and sample configs how to turn a Raspberry Pi Zero-W into a portable companion device. Build you own piComrade today! :-) [MIT License] (⭐️126)
  • techmike/kali-packer - (⭐️1)
  • tehw0lf/airbash - A POSIX-compliant, fully automated WPA PSK PMKID and handshake capture script aimed at penetration testing [MIT License] (⭐️365)
  • testssl/testssl.sh - Testing TLS/SSL encryption anywhere on any port [GNU GPLv2] (⭐️8981)
  • The-Z-Labs/linux-exploit-suggester - Linux privilege escalation auditing tool [GNU GPLv3] (⭐️6448)
  • thibmaek/awesome-raspberry-pi - 📝 A curated list of awesome Raspberry Pi tools, projects, images and resources (⭐️16171)
  • thorsten-gehrig/alexa-remote-control - control Amazon Alexa from command Line (set volume, select station from tunein or pandora) [Apache License 2.0] (⭐️452)
  • ThrynSec/CVE-2023-32629-CVE-2023-2640---POC-Escalation - Ubuntu Privilege Escalation bash one-liner using CVE-2023-32629 & CVE-2023-2640 (⭐️108)
  • tjhorner/upsy-desky - Make your standing desk smarter (⭐️757)
  • tklx/base - A super slim container image based on Debian GNU/Linux (⭐️248)
  • tmyt/tw - ZSHスクリプトでTwitterにアクセスします。opensslなどその他外部ライブラリは不要です。 (⭐️9)
  • tothi/ad-honeypot-autodeploy - Deploy a small, intentionally insecure, vulnerable Windows Domain for RDP Honeypot fully automatically. (⭐️258)
  • trailofbits/twa - A tiny web auditor with strong opinions. [MIT License] (⭐️594)
  • trimstray/sandmap - Nmap on steroids. Simple CLI with the ability to run pure Nmap engine, 31 modules with 459 scan profiles. [GNU GPLv3] (⭐️1828)
  • vincentcox/bypass-firewalls-by-DNS-history - Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters. [MIT License] (⭐️1276)
  • waldoj/botgov - A Mastodon bot that posts a list of new .gov registrations each day [GNU GPLv3] (⭐️12)
  • Wandmalfarbe/pandoc-latex-template - A pandoc LaTeX template to convert markdown files to PDF or LaTeX. [Modified BSD License] (⭐️7068)
  • wffls/waffles - Bash Configuration Management [MIT License] (⭐️94)
  • x1mdev/ReconPi - ReconPi - A lightweight recon tool that performs extensive scanning with the latest tools. [MIT License] (⭐️727)
  • xwmx/nb - CLI and local web plain text note‑taking, bookmarking, and archiving with linking, tagging, filtering, search, Git versioning & syncing, Pandoc conversion, + more, in a single portable script. [GNU AGPLv3] (⭐️8093)
  • zMarch/Orc - Orc is a post-exploitation framework for Linux written in Bash [MIT License] (⭐️402)
  • zombieleet/async-bash - bash script that implements few asynchronous functions (⭐️144)
  • zombieleet/bashify - few helper functions in bash ( especially string manipulation functions ) (⭐️106)
  • zoobab/openwrt-15.05-go - A Docker image with GCCGO cross toolchain for OpenWRT 15.05 (⭐️24)
  • zsh-users/zsh-syntax-highlighting - Fish shell like syntax highlighting for Zsh. [Modified BSD License] (⭐️22464)

Smarty

Swift

TeX

  • angea/pocorgtfo - a "Proof of Concept or GTFO" mirror with an extensive index with also whole issues or individual articles as clean PDFs. (⭐️1560)
  • rpgtex/DND-5e-LaTeX-Template - LaTeX package to typeset material for the fifth edition of the "world's greatest roleplaying game". [MIT License] (⭐️1598)
  • tuhdo/os01 - Bootstrap yourself to write an OS from scratch. A book for self-learner. (⭐️13502)

TypeScript

  • actionsflow/actionsflow - The free Zapier/IFTTT alternative for developers to automate your workflows based on Github actions [MIT License] (⭐️3354)
  • actualbudget/actual - A local-first personal finance app [MIT License] (⭐️25823)
  • ajnart/homarr - Customizable browser's home page to interact with your homeserver's Docker containers (e.g. Sonarr/Radarr) [MIT License] (⭐️7104)
  • AlecBlance/S3BucketList - Chrome and Firefox extension that lists Amazon S3 Buckets while browsing [MIT License] (⭐️130)
  • AppAndFlow/react-native-safe-area-context - A flexible way to handle safe area insets in JS. Also works on Android and Web! [MIT License] (⭐️2689)
  • arwes/arwes - Futuristic Sci-Fi UI Web Framework. [MIT License] (⭐️7496)
  • Awesome-Technologies/synapse-admin - Admin console for synapse Matrix homeserver [Apache License 2.0] (⭐️1156)
  • blakeblackshear/frigate - NVR with realtime local object detection for IP cameras [MIT License] (⭐️31273)
  • bonukai/MediaTracker - Self hosted media tracker for movies, tv shows, video games, books and audiobooks [MIT License] (⭐️891)
  • caprover/caprover - Scalable PaaS (automated Docker+nginx) - aka Heroku on Steroids (⭐️14958)
  • cktang88/spaceboard - Pinterest for markdown notes. Made with React, TypeScript, and Next.js. [MIT License] (⭐️120)
  • coder/code-server - VS Code in the browser [MIT License] (⭐️76976)
  • compiler-explorer/compiler-explorer - Run compilers interactively from your web browser and interact with the assembly [BSD 2-Clause "Simplified" License] (⭐️18664)
  • coreui/coreui-icons - CoreUI Free Icons - Premium designed free icon set with marks in SVG, Webfont and raster formats (⭐️2056)
  • cs01/gdbgui - Browser-based frontend to gdb (gnu debugger). Add breakpoints, view the stack, visualize data structures, and more in C, C++, Go, Rust, and Fortran. Run gdbgui from the terminal and a new tab will open in your browser. [GNU GPLv3] (⭐️10333)
  • cybersecsi/houdini - Hundreds of Offensive and Useful Docker Images for Network Intrusion. The name says it all. [GNU GPLv3] (⭐️1247)
  • daveearley/screenshot.rocks - Create beautiful mobile & browser mockups from screenshots [MIT License] (⭐️794)
  • daveschumaker/artbot-for-stable-diffusion - A front-end GUI for interacting with the AI Horde / Stable Diffusion distributed cluster [MIT License] (⭐️188)
  • dendronhq/dendron - The personal knowledge management (PKM) tool that grows as you do! [Apache License 2.0] (⭐️7387)
  • dream-num/univer - Build AI-native spreadsheets. Univer is a full-stack framework for creating and editing spreadsheets on both web and server. With Univer Platform, Univer Spreadsheets is driven directly through natural language. [Apache License 2.0] (⭐️12712)
  • electric-sql/pglite - Embeddable Postgres with real-time, reactive bindings. [Apache License 2.0] (⭐️14983)
  • element-hq/element-web - A glossy Matrix collaboration client for the web. [GNU AGPLv3] (⭐️12946)
  • fasiha/yamanote - Computers are supposed to be tools for thinking. A nerdy, perhaps silly, tool is a list of bookmarks with excerpts. I've tried to use social media, journal apps, and Pinboard to achieve this but they're all lacking. Let's go old school. Very WIP. [The Unlicense] (⭐️100)
  • ferdium/ferdium-app - All your services in one place, built by the community [Apache License 2.0] (⭐️4143)
  • foambubble/foam - A personal knowledge management and sharing system for VSCode (⭐️16995)
  • getumbrel/llama-gpt - A self-hosted, offline, ChatGPT-like chatbot. Powered by Llama 2. 100% private, with no data leaving your device. New: Code Llama support! [MIT License] (⭐️10984)
  • hasura/graphql-engine - Blazing fast, instant realtime GraphQL APIs on all your data with fine grained access control, also trigger webhooks on database events. [Apache License 2.0] (⭐️31931)
  • hedgedoc/hedgedoc - HedgeDoc - Ideas grow better together [GNU AGPLv3] (⭐️7070)
  • honkit/honkit - 📖 HonKit is building beautiful books using Markdown - Fork of GitBook [Apache License 2.0] (⭐️3413)
  • huseyz/obsidian-wallabag - This plugin for Obsidian allows you to sync Wallabag items into Obsidian notes in various ways. [MIT License] (⭐️89) Archived!
  • iptv-org/iptv - Collection of publicly available IPTV channels from all over the world [The Unlicense] (⭐️114284)
  • kern/filepizza - 🍕 Peer-to-peer file transfers in your browser (⭐️9990)
  • LasCC/HackTools - The all-in-one browser extension for offensive security professionals 🛠 (⭐️6666)
  • laurent22/joplin - Joplin - the privacy-focused note taking app with sync capabilities for Windows, macOS, Linux, Android and iOS. (⭐️54237)
  • Lissy93/personal-security-checklist - 🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026 (⭐️21102)
  • margelo/react-native-graph - 📈 Beautiful, high-performance Graphs and Charts for React Native built with Skia [MIT License] (⭐️2402)
  • mermaid-js/mermaid - Generation of diagrams like flowcharts or sequence diagrams from text in a similar manner as markdown [MIT License] (⭐️87151)
  • mitre-attack/attack-navigator - Web app that provides basic navigation and annotation of ATT&CK matrices [Apache License 2.0] (⭐️2352)
  • multiprocessio/datastation - App to easily query, script, and visualize data from every database, file, and API. (⭐️2960)
  • nervetattoo/simple-thermostat - A different take on the thermostat card for Home Assistant ♨️ [MIT License] (⭐️807)
  • nocodb/nocodb - 🔥 🔥 🔥 A Free & Self-hostable Airtable Alternative (⭐️62619)
  • nshalabi/SysmonTools - Utilities for Sysmon [GNU GPLv3] (⭐️1634)
  • nwtgck/gh-card - :octocat: GitHub Repository Card for Any Web Site [MIT License] (⭐️1352)
  • ondrejsojka/ipfsearch-webapp - Search through indexes hosted on IPFS that cannot be taken down. [GNU AGPLv3] (⭐️49)
  • one-loop/redlookit - Reskinning Reddit into an Outlook interface [MIT License] (⭐️59)
  • outline/outline - The fastest knowledge base for growing teams. Beautiful, realtime collaborative, feature packed, and markdown compatible. (⭐️37968)
  • pascalw/dashbling - Hackable React based dashboards for developers, inspired by Dashing. [MIT License] (⭐️469)
  • pawelmalak/flame - Flame is self-hosted startpage for your server. Easily manage your apps and bookmarks with built-in editors. [MIT License] (⭐️6280)
  • phiresky/sql.js-httpvfs - Hosting read-only SQLite databases on static file hosters like Github Pages [Apache License 2.0] (⭐️3673)
  • phra/x0rro - A PE/ELF/MachO Crypter for x86 and x86_64 Based on Radare2 (⭐️139)
  • revoltchat/desktop - Revolt Desktop App [GNU AGPLv3] (⭐️1034)
  • SigNoz/signoz - SigNoz is an open-source observability platform native to OpenTelemetry with logs, traces and metrics in a single application. An open-source alternative to DataDog, NewRelic, etc. 🔥 🖥. 👉 Open source Application Performance Monitoring (APM) & Observability tool (⭐️26413)
  • stackblitz-labs/bolt.diy - Prompt, run, edit, and deploy full-stack web applications using any LLM you want! [MIT License] (⭐️19228)
  • staticdeploy/staticdeploy - Open-Source Platform for Deploying Static Apps [MIT License] (⭐️423)
  • tagspaces/tagspaces - TagSpaces is an offline, open source, document manager with tagging support [GNU AGPLv3] (⭐️5003)
  • tailwindlabs/tailwindcss - A utility-first CSS framework for rapid UI development. [MIT License] (⭐️94377)
  • TFNS/CTFNote - CTFNote is a collaborative tool aiming to help CTF teams to organise their work. [GNU GPLv3] (⭐️595)
  • turbolinks/turbolinks - Turbolinks makes navigating your web application faster [MIT License] (⭐️12616) Archived!
  • ueokande/vim-vixen - Accelerates your web browsing with Vim power!! [MIT License] (⭐️2093) Archived!
  • undergroundwires/privacy.sexy - Open-source tool to enforce privacy & security best-practices on Windows, macOS and Linux, because privacy is sexy [GNU AGPLv3] (⭐️5490)

Unknown

VBA

  • S3cur3Th1sSh1t/OffensiveVBA - This repo covers some code execution and AV Evasion methods for Macros in Office documents [BSD 2-Clause "Simplified" License] (⭐️1263)

Vim Script

  • airblade/vim-gitgutter - A Vim plugin which shows git diff markers in the sign column and stages/previews/undoes hunks and partial hunks. [MIT License] (⭐️8492)
  • c9s/vikube.vim - Operating Kubernetes Cluster from Vim, in Vim (⭐️197)
  • editorconfig/editorconfig-vim - EditorConfig plugin for Vim (⭐️3177)
  • fatih/vim-go-tutorial - Tutorial for vim-go [Modified BSD License] (⭐️2096) Archived!
  • jamessan/vim-gnupg - This script implements transparent editing of gpg encrypted files. (⭐️744)
  • junegunn/vim-github-dashboard - (UNMAINTAINED) :octocat: Browse GitHub events in Vim (⭐️486)
  • junegunn/vim-plug - 🌺 Minimalist Vim Plugin Manager [MIT License] (⭐️35614)
  • luochen1990/rainbow - Rainbow Parentheses Improved, shorter code, no level limit, smooth and fast, powerful configuration. [Apache License 2.0] (⭐️1823)
  • preservim/nerdtree - A tree explorer plugin for vim. [Do What The Fck You Want To Public License*] (⭐️20075)
  • preservim/tagbar - Vim plugin that displays tags in a window, ordered by scope (⭐️6228)
  • roxma/vim-tmux-clipboard - seamless integration for vim and tmux's clipboard [MIT License] (⭐️297)
  • shaunduncan/ale - Check syntax in Vim asynchronously and fix files, with Language Server Protocol (LSP) support [BSD 2-Clause "Simplified" License] (⭐️1)
  • Shougo/unite.vim - 🐉 Unite and create user interfaces (⭐️2837)
  • sunaku/vim-hicterm - 🌈 Highlights terminal color code numbers (0-255) (⭐️40)
  • tpope/vim-dadbod - dadbod.vim: Modern database interface for Vim (⭐️4352)

Visual Basic

Vue

  • ChartsCSS/ChartsCSS.org - Documentation website for charts.css (⭐️49)
  • Lissy93/dashy - 🚀 A self-hostable personal dashboard built for you. Includes status-checking, widgets, themes, icon packs, a UI editor and tons more! [MIT License] (⭐️24480)
  • statping/statping - Status Page for monitoring your websites and applications with beautiful graphs, analytics, and plugins. Run on any type of environment. [GNU GPLv3] (⭐️7276)
  • tipsy/profile-summary-for-github - Tool for visualizing GitHub profiles [Apache License 2.0] (⭐️19942)
  • tldrrun/tools.tldr.run - A curated list of security tools for Hackers & Builders! [MIT License] (⭐️99)

XSLT

  • api0cradle/LOLBAS - Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts) (⭐️1617) Archived!
  • ernw/nmap-parse-output - Converts/manipulates/extracts data from a Nmap scan output. [Modified BSD License] (⭐️549)

YAML

  • GTFOBins/GTFOBins.github.io - GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems. [GNU GPLv3] (⭐️12883)

YARA

Zig

  • 0xsp-SRD/ZigStrike - ZigStrike, a powerful Payload Delivery Pipeline developed in Zig, offering a variety of injection techniques and anti-sandbox features. [GNU GPLv2] (⭐️510)
  • chrislloyd/git-remote-sqlite - Single-file Git repos that can replicate with Litestream [MIT License] (⭐️113)
  • darkr4y/OffensiveZig - Some attempts at using Zig(https://ziglang.org/) in penetration testing. [BSD 2-Clause "Simplified" License] (⭐️256)
  • NilsIrl/dockerc - container image to single executable compiler [GNU GPLv3] (⭐️4892)

About

My starred GitHub repositories

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

 
 
 

Contributors