Awesome GitHub RepositoriesSecurity Utilities

CyberChef is a web-based application designed for performing complex data encoding, decoding, encryption, and analysis tasks. It provides a visual interface where users construct data transformation pipelines by chaining modular operations together, allowing raw input to be processed into a desired output format entirely within the local browser environment. The tool functions as a client-side cryptographic workbench, ensuring that all data processing logic remains local to the user's machine to maintain privacy and eliminate server-side overhead. By utilizing functional pipeline composition

Hashcat is a high-performance hash cracking software and OpenCL compute application used to recover plain-text passwords from hashed data. It functions as a GPU-accelerated recovery tool and distributed password cracker, leveraging CPUs and GPUs to perform intensive cryptographic computations. The system differentiates itself through a distributed cracking workflow that coordinates tasks across multiple machines via an overlay network to share computational load. It further optimizes recovery speed using Markov chain keyspace optimization to prioritize the most likely password candidates. Th

theHarvester is a command-line utility designed for gathering open-source intelligence and mapping an organization's external attack surface. It functions as a security information gathering framework that automates the collection of publicly available data to assist in reconnaissance and threat analysis. The tool utilizes a plugin-based architecture to execute isolated queries against various search engines and public databases. It employs asynchronous task execution to run multiple discovery operations in parallel, while a centralized pipeline aggregates and deduplicates findings from these

Interactsh 是一个带外（out-of-band）安全测试框架和交互服务器，旨在检测服务器端请求伪造（SSRF）和盲注（blind injections）等漏洞。它作为一个多协议交互收集器，捕获 DNS、HTTP 和 SMTP 请求，以验证来自远程应用的对外通信。 该项目提供了一个自托管交互网关，用于管理唯一载荷（payloads）并收集跨多个域的网络交互。它的独特之处在于能够模拟各种网络协议和响应行为，包括将请求路由到云元数据服务以识别特定漏洞。 该系统涵盖了广泛的功能，包括通过 ACME 为通配符域自动管理 SSL 证书、通过 Webhook 和第三方平台进行实时事件通知，以及托管用于注入测试的静态载荷。它还包括用于会话状态持久化和查询驱动响应控制的机制，以管理服务器如何处理传入请求。

Kali Linux Fixes for Newly Imported VM's

A tool for parsing breached passwords

A wrapper around grep, to help you grep for things

A tool for adding new lines to files, skipping duplicates

Notify is a Go-based assistance package that enables you to stream the output of several tools (or read from a file) and publish it to a variety of supported platforms.

declutters url lists for crawling/pentesting

Pull out bits of URLs provided on stdin

Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).

Accept URLs on stdin, replace all query string values with a user-supplied value

SeaSurf is a Flask extension for preventing cross-site request forgery (CSRF).

Talisman: HTTP security headers for Flask

A Flask extension providing Argon2 hashing and comparison.