Awesome GitHub RepositoriesScan Filtering Tools

Trufflehog is a security tool designed to continuously monitor code repositories and cloud environments to detect, verify, and remediate exposed sensitive credentials and API keys. It functions as a comprehensive secret scanning engine that integrates directly into deployment pipelines and version control systems to intercept sensitive data before it is committed or pushed. By utilizing read-only operations and volatile memory processing, the system ensures that discovered credentials are never stored persistently, maintaining strict data privacy throughout the scanning lifecycle. The platfor

dirsearch is a command-line security tool and web path scanner used for discovering hidden directories and files on web servers. It functions as a recursive directory fuzzer and brute-force utility that identifies undocumented paths and sensitive files using wordlists and HTTP status codes. The tool distinguishes itself through template-driven path generation and an automated HTTP response filter that uses status codes, content length, and regex patterns to isolate valid targets. It supports recursive directory crawling to map complex web structures and provides state-persistence serializatio

Subfinder is a security reconnaissance framework designed for subdomain enumeration and attack surface management. It functions as a discovery engine that identifies and maps internet-exposed infrastructure, cloud-hosted assets, and network ranges to maintain a comprehensive inventory of an organization's digital footprint. The project distinguishes itself through a modular, template-driven scanning engine that executes security checks against discovered assets. It leverages cloud-native asset discovery to query provider APIs and infrastructure metadata, while supporting distributed agent orc

This project is a command-line synchronization client for OneDrive and SharePoint libraries on Linux. It functions as a synchronization engine that aligns local filesystems with cloud storage through bidirectional, unidirectional, or download-only workflows. The client supports headless authentication for servers without web browsers and can be deployed as a background service or within a containerized environment. It enables the management of multiple distinct cloud accounts on a single system and integrates with shared SharePoint sites and document libraries. The synchronization engine inc

Checkov is a static analysis tool and security scanner designed to identify misconfigurations in infrastructure as code, container images, and Kubernetes configurations. It functions as a cloud security posture tool, an SCA vulnerability scanner, and a secret scanning utility to prevent security breaches and version control leaks. The project distinguishes itself through deep graph analysis and variable resolution, allowing it to map relationships between interconnected resources and evaluate the final state of infrastructure attributes. It provides extensibility for defining custom security

AndResGuard is a utility for Android asset optimization, resource shrinking, and resource obfuscation. Its primary purpose is to minimize the final application package footprint by compressing resource files, removing unnecessary data, and optimizing the resource table. The project focuses on preventing reverse engineering by renaming resource types and file names to short, randomized identifiers. It includes mechanisms to preserve specific assets through the use of whitelists and wildcard-driven exclusion patterns, ensuring compatibility with dynamic lookup requirements. Additional capabili

reconftw is an attack surface management framework and reconnaissance workflow orchestrator designed to automate the discovery, mapping, and monitoring of external digital assets. It operates as a modular tool-chain pipeline that coordinates a sequence of security tools to perform intelligence gathering and vulnerability scanning. The project distinguishes itself through a cloud-native deployment model that parallelizes scanning workloads across a fleet of remote VPS instances to bypass local resource constraints. It utilizes container-based environment isolation to ensure consistent executio

WhatWeb is a web application fingerprinting tool that identifies the technology stack powering a website by scanning HTTP responses and page content. It matches responses against a library of over 1800 signatures to detect CMS platforms, JavaScript libraries, web servers, embedded devices, and third-party addons, while also extracting technical metadata such as software versions, user accounts, and module names. The tool operates through a plugin-based detection framework that supports both passive and aggressive scanning modes. Passive plugins analyze existing HTTP headers and page content w

AutoRecon is an automated network reconnaissance tool that performs concurrent port scanning and service enumeration across multiple targets. It operates as a multi-target port scanner, probing IP addresses, CIDR ranges, or hostnames in parallel, and automatically dispatches service-specific enumeration tools after port detection to gather detailed information about each open service. The tool distinguishes itself through a plugin-based scanning system that allows extending or replacing default port and service scans via a flexible plugin architecture. It provides real-time pattern-based outp

Naabu is a port scanner library and tool that probes hosts for open ports using SYN, CONNECT, and UDP methods to identify active services. It functions as a Go library for embedding port scanning into programs, and as a standalone tool that accepts targets as hostnames, IP addresses, CIDR ranges, or ASN numbers. The tool discovers live hosts before scanning, filters ports by range or top lists, and can integrate with Nmap for service version detection. The project distinguishes itself through its SYN-based port probing approach that sends TCP SYN packets and analyzes responses without complet

ToolGood.Words 是一个敏感词过滤库和文本清洗组件，专为高性能检测和屏蔽违禁词而设计。它提供了中文文本规范化、拼音转换以及用占位符替换违禁词的工具。 该项目的特色在于其通过拼音转换引擎和基于语音的检测来发现混淆语言的能力。它通过将中文字符映射为拼音表示，识别出由语音替换、首字母缩写或故意拼写错误隐藏的敏感内容。 该库涵盖了广泛的文本处理功能，包括简繁体转换、全角半角字符格式化以及通配符模式匹配。这些工具支持在应用过滤和屏蔽逻辑之前标准化输入的规范化工作流。

Reflections is a Java classpath scanning library and metadata indexer designed to locate classes, methods, and resources at runtime. It functions as a tool for annotation discovery and type hierarchy analysis, allowing the system to identify elements marked with specific annotations or to resolve super-types and subtypes within the Java virtual machine. The project distinguishes itself through metadata serialization, providing mechanisms to save the scanned index to persistent files or source code. This capability reduces application startup overhead by eliminating the need for repeated, expe

Ziggy is a frontend route bridge and JavaScript route resolver that allows Laravel route names and parameters to be used within JavaScript and TypeScript environments. It serves as a synchronization layer that exports backend route configurations to frontend assets, ensuring that frontend navigation remains in sync with backend route definitions. The project provides a TypeScript route type generator that produces strict type definitions for route names and parameters to enable IDE autocompletion. It includes a route exposure filtering system that uses inclusion and exclusion patterns to cont

Ziggy is a frontend routing bridge that exports server route definitions to JavaScript or JSON for use in browser-based applications. It acts as a named route resolver, synchronizing server-defined routes with the client to generate full URLs from named routes without hardcoding paths. The project includes a TypeScript route generator that creates type definitions for backend routes, providing static type checking and autocompletion. It also provides dedicated integration hooks and plugins for React and Vue to make routing capabilities available within component-based frameworks. Beyond URL

afrog is an HTTP vulnerability scanner and web vulnerability management system that identifies security flaws and known CVEs using a YAML-based rule engine. It functions as a payload generator and scanner, comparing server responses against detection rules to find unauthorized access points. The project provides a framework for out-of-band security testing, detecting blind vulnerabilities by triggering and verifying external DNS or HTTP callbacks. Beyond web traffic, it includes a protocol fuzzer capable of executing multi-step read and write sequences over raw TCP and SSL sockets to identify

该项目是一个 VS Code 设置同步器和开发环境管理器，旨在在多台机器之间保持一致的编辑器配置、键绑定和扩展列表。它作为一个配置备份工具，使用 GitHub Gist 作为远程存储后端来托管和分发设置文件。 该系统通过在不同操作系统和硬件之间镜像插件集和核心设置，实现了开发环境的可移植性。它支持通过绝对路径文件映射同步自定义代码片段和非标准配置文件。 该工具包括一个同步管理界面，用于控制数据排除和本地设置保留，防止特定于机器的覆盖被覆盖。它提供基于环境的设置过滤，以及通过 GitHub Enterprise API 集成连接到私有企业网络的能力。 数据同步通过手动上传和事件驱动的触发器处理，这些触发器在本地文件修改或应用程序启动时启动更新。

Typos is a source code spell checker and automated typo fixer designed to detect and correct spelling errors across programming languages and project files. It functions as a CI spelling validator and SARIF compatible linter, allowing projects to prevent misspelled text from reaching production. The tool features a customizable dictionary engine that utilizes TOML configuration and locale-specific dictionaries to manage project-specific terminology. It differentiates itself by splitting programming language identifiers into individual words for validation and verifying the spelling of filenam

该工具是一个命令行工具，旨在创建本地或远程数据的增量、时间戳快照。它作为一个基于 Shell 的编排器，协调系统工具以维护版本化的文件归档，允许在无需专有软件的情况下恢复特定的数据状态。 该工具通过使用文件系统硬链接来引用跨多个快照未更改的文件而脱颖而出，这最大限度地减少了存储消耗，同时保持每个备份目录结构独立。它结合了一个专用的保留管理器，可根据基于时间的策略或可用磁盘空间自动修剪旧快照，以优化存储使用。 操作可靠性通过一系列安全机制进行维护，包括防止并发访问的锁文件控制，以及允许中断的操作从最后成功点恢复的原子状态标记。该系统支持通过加密 Shell 连接进行远程同步，并包括一个模式匹配引擎，用于在传输过程中选择性地包含或排除文件。

Laravel migrations generator is a database tool that inspects existing relational schemas and automatically generates framework migration files to reverse engineer databases. It connects directly to relational database system catalogs to read existing tables, columns, indexes, and constraints, sorting table creation and constraint generation into separate sequences to satisfy relational dependency requirements. The tool communicates with multiple database engine dialects through a unified schema inspection interface and evaluates whitelist and blacklist patterns during metadata collection to