Awesome GitHub RepositoriesSecurity Utilities

CyberChef is a web-based application designed for performing complex data encoding, decoding, encryption, and analysis tasks. It provides a visual interface where users construct data transformation pipelines by chaining modular operations together, allowing raw input to be processed into a desired output format entirely within the local browser environment. The tool functions as a client-side cryptographic workbench, ensuring that all data processing logic remains local to the user's machine to maintain privacy and eliminate server-side overhead. By utilizing functional pipeline composition

Hashcat is a high-performance hash cracking software and OpenCL compute application used to recover plain-text passwords from hashed data. It functions as a GPU-accelerated recovery tool and distributed password cracker, leveraging CPUs and GPUs to perform intensive cryptographic computations. The system differentiates itself through a distributed cracking workflow that coordinates tasks across multiple machines via an overlay network to share computational load. It further optimizes recovery speed using Markov chain keyspace optimization to prioritize the most likely password candidates. Th

theHarvester is a command-line utility designed for gathering open-source intelligence and mapping an organization's external attack surface. It functions as a security information gathering framework that automates the collection of publicly available data to assist in reconnaissance and threat analysis. The tool utilizes a plugin-based architecture to execute isolated queries against various search engines and public databases. It employs asynchronous task execution to run multiple discovery operations in parallel, while a centralized pipeline aggregates and deduplicates findings from these

Interactsh is an out-of-band security testing framework and interaction server designed to detect vulnerabilities such as server side request forgery and blind injections. It functions as a multi-protocol interaction collector that captures DNS, HTTP, and SMTP requests to verify outbound communication from remote applications. The project provides a self-hosted interaction gateway for managing unique payloads and gathering network interactions across multiple domains. It distinguishes itself through the ability to simulate various network protocols and response behaviors, including the routin

Kali Linux Fixes for Newly Imported VM's

A tool for parsing breached passwords

A wrapper around grep, to help you grep for things

A tool for adding new lines to files, skipping duplicates

Notify is a Go-based assistance package that enables you to stream the output of several tools (or read from a file) and publish it to a variety of supported platforms.

declutters url lists for crawling/pentesting

Pull out bits of URLs provided on stdin

Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).

Accept URLs on stdin, replace all query string values with a user-supplied value

SeaSurf is a Flask extension for preventing cross-site request forgery (CSRF).

Talisman: HTTP security headers for Flask

A Flask extension providing Argon2 hashing and comparison.