Awesome GitHub RepositoriesSecurity Utilities

CyberChef is a web-based application designed for performing complex data encoding, decoding, encryption, and analysis tasks. It provides a visual interface where users construct data transformation pipelines by chaining modular operations together, allowing raw input to be processed into a desired output format entirely within the local browser environment. The tool functions as a client-side cryptographic workbench, ensuring that all data processing logic remains local to the user's machine to maintain privacy and eliminate server-side overhead. By utilizing functional pipeline composition

Hashcat is a high-performance hash cracking software and OpenCL compute application used to recover plain-text passwords from hashed data. It functions as a GPU-accelerated recovery tool and distributed password cracker, leveraging CPUs and GPUs to perform intensive cryptographic computations. The system differentiates itself through a distributed cracking workflow that coordinates tasks across multiple machines via an overlay network to share computational load. It further optimizes recovery speed using Markov chain keyspace optimization to prioritize the most likely password candidates. Th

theHarvester is a command-line utility designed for gathering open-source intelligence and mapping an organization's external attack surface. It functions as a security information gathering framework that automates the collection of publicly available data to assist in reconnaissance and threat analysis. The tool utilizes a plugin-based architecture to execute isolated queries against various search engines and public databases. It employs asynchronous task execution to run multiple discovery operations in parallel, while a centralized pipeline aggregates and deduplicates findings from these

Interactsh est un framework de test de sécurité hors bande et un serveur d'interaction conçu pour détecter des vulnérabilités telles que la falsification de requête côté serveur (SSRF) et les injections aveugles. Il fonctionne comme un collecteur d'interactions multi-protocole qui capture les requêtes DNS, HTTP et SMTP pour vérifier la communication sortante depuis des applications distantes. Le projet fournit une passerelle d'interaction auto-hébergée pour gérer des charges utiles uniques et recueillir des interactions réseau sur plusieurs domaines. Il se distingue par sa capacité à simuler divers protocoles réseau et comportements de réponse, y compris le routage des requêtes vers des services de métadonnées cloud pour identifier des vulnérabilités spécifiques. Le système couvre un large éventail de capacités, y compris la gestion automatisée des certificats SSL via ACME pour les domaines génériques, les notifications d'événements en temps réel via des webhooks et des plateformes tierces, et l'hébergement de charges utiles statiques pour les tests d'injection. Il inclut également des mécanismes pour la persistance de l'état de session et le contrôle de réponse piloté par requête pour gérer la façon dont le serveur traite les requêtes entrantes.

Kali Linux Fixes for Newly Imported VM's

A tool for parsing breached passwords

A wrapper around grep, to help you grep for things

A tool for adding new lines to files, skipping duplicates

Notify is a Go-based assistance package that enables you to stream the output of several tools (or read from a file) and publish it to a variety of supported platforms.

declutters url lists for crawling/pentesting

Pull out bits of URLs provided on stdin

Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).

Accept URLs on stdin, replace all query string values with a user-supplied value

SeaSurf is a Flask extension for preventing cross-site request forgery (CSRF).

Talisman: HTTP security headers for Flask

A Flask extension providing Argon2 hashing and comparison.