Awesome Stars

A curated list of my GitHub stars! Generated by starred.

Contents

• Arduino
• Assembly
• Astro
• C
• C#
• C++
• CSS
• Clojure
• Dockerfile
• Eagle
• Go
• HTML
• Hack
• Inno Setup
• JSON
• Java
• JavaScript
• Jinja
• Jupyter Notebook
• Lua
• MDX
• Makefile
• Markdown
• Objective-C
• Others
• PHP
• Pascal
• Perl
• Perl 6
• PowerShell
• Python
• Roff
• Ruby
• Rust
• SCSS
• Sass
• Shell
• Smarty
• Swift
• Text
• TypeScript
• Vim Script
• Vim Snippet
• Vue
• YARA

Arduino

• t0ph/BangoSkank - A sketch to use an ESP8266 to flood the surrounding area with SSIDs of your choosing.

Assembly

• vxunderground/MalwareSourceCode - Collection of malware source code for a variety of platforms in an array of different programming languages.
• microsoft/MS-DOS - The original sources of MS-DOS 1.25, 2.0, and 4.0 for reference purposes

Astro

• Lissy93/awesome-privacy - 🦄 A curated list of privacy & security-focused software and services

C

• bmorcelli/M5Stick-Launcher - App launcher for M5StickC, M5StickC Plus, M5StickC Plus 2 and M5Cardputer
• PhirePhly/aprx - A highly configurable APRS I-gate/Digipeater Daemon
• ttrftech/NanoVNA - Very Tiny Palmtop Vector Network Analyzer
• rtlsdrblog/rtl-sdr-blog - Modified Osmocom drivers with enhancements for RTL-SDR Blog V3 and V4 units.
• open-ham/OpenGD77 - Firmware for DMR transceivers using the NXP MK22 MCU, AT1846S RF chip and HR-C6000 DMR chipset. Including the Radioddiy GD-77, Baofeng DM-1801 and Baofeng RD-5R.
• flipperdevices/flipperzero-firmware - Flipper Zero firmware source code
• mytechnotalent/Embedded-Hacking - A FREE comprehensive step-by-step embedded hacking tutorial covering Embedded Software Development to Reverse Engineering.
• ANDnXOR/hadbadge2019_fpgasoc - FPGA SoC code and application example for Hackaday Supercon 2019 badge
• ANDnXOR/ANDnXOR_DC24_Badge - AND!XOR DEFCON 24 Badge HW and SW
• ANDnXOR/ANDnXOR_DC28_Badge - Future home of our DC28 badge
• wrickert/UntitledElectronics -
• nmap/nmap - Nmap - the Network Mapper. Github mirror of official SVN repository.
• sonicos/BlackBadgeRaffleBadge_DC30 - Free-range artisan Black Badge Raffle Badge for DEFCON 30. Now arsenic free!
• HandBrake/HandBrake - HandBrake's main development repository
• vonnieda/esp32-example-wifi-softap-and-sta - Demonstrates SoftAP + STA mode on the ESP32 with ESP-IDF.
• mauvehed/ahabadge - AHA! badge designs
• krallin/tini - A tiny but valid init for containers
• compukidmike/Defcon29 -
• allinurl/goaccess - GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through your browser.
• udp-redux/udp-broadcast-relay-redux - Small daemon to relay udp broadcast / multicast packages on a different subnet.
• taviso/cefdebug - Minimal code to connect to a CEF debugger.
• Airblader/i3 - A fork of the i3 window manager with gaps and some other features. ⚠️ i3-gaps has been merged into i3.
• ANDnXOR/trevorforget - Repository for our Trevor projects for Derbycon VIII and IX
• arduino/OpenOCD - Fork of OpenOCD
• libopencm3/libopencm3 - Open source ARM Cortex-M microcontroller library
• dczia/Defcon27-Badge - DCZia Defcon27 Laser Theremin Synthesizer Badge - 2019
• hackgnar/ble_ctf - A Bluetooth low energy capture the flag
• ValveSoftware/steamlink-sdk -
• solokeys/solo1 - Solo 1 firmware in C
• USBNinjaRRG/USBNinja - USBNinja Embedded Software Framework
• zfasel/snbl - scotch and bubbles lanyard, 2018
• Ralim/IronOS - Open Source Soldering Iron firmware
• pervognsen/bitwise - Bitwise is an educational project where we create the software/hardware stack for a computer from scratch.
• hackforsatan/impbadge - Status: summoned and unleashed upon DEF CON 26
• denandz/fuzzotron - A TCP/UDP based network daemon fuzzer
• rosehgal/BinExp - Linux Binary Exploitation
• IAIK/meltdown - This repository contains several applications, demonstrating the Meltdown bug.
• networkupstools/nut - The Network UPS Tools repository. UPS management protocol Informational RFC 9271 published by IETF at https://www.rfc-editor.org/info/rfc9271 Please star NUT on GitHub, this helps with sponsorships!
• samdenty/Wi-PWN - ESP8266 firmware for performing deauthentication attacks, with ease.
• vanhoefm/krackattacks-scripts -
• netdata/netdata - Architected for speed. Automated for easy. Monitoring and troubleshooting, transformed!
• hackforsatan/devilbadge - Status: summoned and unleashed upon DEF CON 25
• netik/chibios-orchard - A port of ChibiOS for the Freescale MKW01, based on the Orchard Code, for a custom wearable Defcon25 Badge
• sigpwny/Exploit_Labs - Contains exploit-related challenges to use during meetings.
• c0d3z3r0/sudo-CVE-2017-1000367 -
• nelhage/reptyr - Reparent a running program to a new terminal
• huntergregal/mimipenguin - A tool to dump the login password from the current linux user
• RPISEC/MBE - Course materials for Modern Binary Exploitation by RPISEC
• TsudaKageyu/minhook - The Minimalistic x86/x64 API Hooking Library for Windows
• aws/s2n-tls - An implementation of the TLS/SSL protocols
• cjdelisle/cjdns - An encrypted IPv6 network using public-key cryptography for address allocation and a distributed hash table for routing.
• mrled/remembyte - experiments in human-memorable byte arrays

C#

• valheimPlus/ValheimPlus - A HarmonyX Mod aimed at improving the gameplay and quality of life of the game Valheim.
• Prowlarr/Prowlarr - Prowlarr is an indexer manager/proxy built on the popular *arr .net/reactjs base stack to integrate with your various PVR apps, supporting management of both Torrent Trackers and Usenet Indexers.
• bitwarden/server - Bitwarden infrastructure/backend (API, database, Docker, etc).
• pardeike/Harmony - A library for patching, replacing and decorating .NET and Mono methods during runtime
• Tyrrrz/DiscordChatExporter - Exports Discord chat logs to a file
• Ombi-app/Ombi - Want a Movie or TV Show on Plex/Emby/Jellyfin? Use Ombi!
• Sonarr/Sonarr - Smart PVR for newsgroup and bittorrent users.
• evemondevteam/evemon - A lightweight, easy-to-use standalone Windows application designed to assist you in keeping track of your EVE Online character progression.
• brandonprry/vulnerable_soap_service - This is a SOAP service written in C# that has intentional SQL injection vulnerabilties.

C++

• g4klx/MMDVMHost - The host program for the MMDVM
• islandmagic/bb-link - B.B. Link, the BLE to Bluetooth Classic adapter for Kenwood TH-D74 / TH-D75 Radios
• ANDnXOR/Adafruit_NeoPixel-ANDnXOR - NeoPixel Library that works with STM32duino. Tested with WS2812B.
• vxunderground/VX-API - Collection of various malicious functionality to aid in malware development
• schambers/temp-sensors - Pi Zero W Temperature/Humidity sensor (DHT22) script and InfluxDB integration
• owasp-modsecurity/ModSecurity - ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range o
• crossroadsfpga/pigasus - 100Gbps Intrusion Detection and Prevention System
• Aircoookie/WLED - Control WS2812B and many more types of digital RGB LEDs with an ESP8266 or ESP32 over WiFi!
• forkineye/ESPixelStick - Firmware for the ESPixelStick
• espressif/arduino-esp32 - Arduino core for the ESP32
• Robotips/uConfig - Datasheet pinout extractor from PDF and library Stylizer for Kicad.
• badgeek/svg2shenzhen - Convert Inkscape SVG drawings to KiCad PCB and footprint modules
• sajingeo/b617 - badge test
• diasurgical/devilution - Diablo devolved - magic behind the 1996 computer game
• gowenrw/DFW_InfoSec_Badge_2018 - Files related to the DFW InfoSec Badge 2018 creation
• rizinorg/cutter - Free and Open Source Reverse Engineering Platform powered by rizin
• vgough/encfs - EncFS: an Encrypted Filesystem for FUSE.
• mrblinkybling/wifi2017 - Mr. Blinky Bling WiFi sniffing badge for 2017
• wazuh/wazuh - Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
• osquery/osquery - SQL powered operating system instrumentation, monitoring, and analytics.
• zku/PwnAdventure3Hacks - A tiny hacking framework for the PwnAdventure3: Pwnie Island game created by http://ghostintheshellcode.com/ ( http://pwnadventure.com/ )
• GiacomoLaw/Keylogger - A simple keylogger for Windows, Linux and Mac
• OpenSecurityResearch/dllinjector - dll injection tool that implements various methods
• hzphreak/VMInjector - DLL Injection tool to unlock guest VMs

CSS

• red-team-offense-village/redteamvillage_website - The source code of the DEF CON Red Team Offense Village website
• AustinHackers/austinhackers.github.io - AHA! Website Source
• Zate/poedom -
• Chalarangelo/mini.css - A minimal, responsive, style-agnostic CSS framework!
• ctfs/write-ups-2015 - Wiki-like CTF write-ups repository, maintained by the community. 2015

Clojure

• amatus/ctf-website - The website for a Capture The Flag competition.

Dockerfile

• patte/fly-tailscale-exit - Run a VPN with global exit nodes with fly.io, tailscale and github!
• tmm1/flyapp-mastodon - mastodon on fly.io
• techno-tim/launchpad - A collection of quick starters for ansible, kubernetes, docker, linux, windows, and more. Great for HomeLabs!
• mikeesto/heroku-awake - ☀️ A GitHub action to keep a free Heroku dyno awake
• cbrgm/valheim-docker - Valheim Docker dedicated gameserver in a container
• vulhub/vulhub - Pre-Built Vulnerable Environments Based on Docker-Compose
• klutchell/unbound - this repo has moved
• MattCarothers/mhn-core-docker - Core elements of the Modern Honey Network implemented in Docker

Eagle

• TheDukeZip/MassHackersBadge2015 -

Go

• FiloSottile/mkcert - A simple zero-config tool to make locally trusted development certificates with any names you'd like.
• FiloSottile/age - A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.
• projectdiscovery/cvemap - Navigate the CVE jungle with ease.
• maaslalani/slides - Terminal based presentation tool
• vulncheck-oss/cli - VulnCheck's official command line tool
• vulncheck-oss/sdk - Bring the VulnCheck API to your Go applications.
• go-gitea/gitea - Git with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CD
• ollama/ollama - Get up and running with Llama 3.3, Mistral, Gemma 2, and other large language models.
• gitleaks/gitleaks - Find secrets with Gitleaks 🔑
• Schachte/cloudflare-stream-downloader - Download tool for Cloudflare Stream
• amlweems/xzbot - notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)
• jetify-com/devbox - Instant, easy, and predictable development environments
• projectdiscovery/nuclei - Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the int
• cterence/tailout - Spawn an exit node for your tailnet anywhere
• Notifiarr/notifiarr - Client for Notifiarr.com
• fly-apps/terraform-provider-fly - Terraform provider for the Fly.io API
• superfly/flyctl - Command line tools for fly.io services
• Zate/writefreely - A clean, Markdown-based publishing platform made for writers. Write together and build a community.
• cbrgm/mastodon-github-action - Use this Action to send a toot (message) from a GitHub actions workflow to Mastodon.
• LeakIX/mastosearch - Toolset to index the Mastodon federated network.
• Zate/HashHound - Tracking Top Hashtags Over Time
• Zate/mastocrawl - Crawl the Mastodon Fediverse gathering server info.
• syncthing/syncthing - Open Source Continuous File Synchronization
• derailed/k9s - 🐶 Kubernetes CLI To Manage Your Clusters In Style!
• digitalocean/doctl - The official command line interface for the DigitalOcean API.
• tailscale/caddy-tailscale - A highly experimental exploration of integrating Tailscale and Caddy.
• fbonalair/traefik-crowdsec-bouncer - A http service to verify request and bounce them according to decisions made by CrowdSec.
• unpoller/unpoller - Application: Collect ALL UniFi Controller, Site, Device & Client Data - Export to InfluxDB or Prometheus
• muesli/duf - Disk Usage/Free Utility - a better 'df' alternative
• knadh/dns.toys - A DNS server that offers useful utilities and services over the DNS protocol. Weather, world time, unit conversion etc.
• infracost/infracost - Cloud cost estimates for Terraform in pull requests💰📉 Shift FinOps Left!
• jesseduffield/lazydocker - The lazier way to manage everything docker
• fleetdm/fleet - Open-source platform for IT, security, and infrastructure teams. (Linux, macOS, Chrome, Windows, cloud, data center)
• sourcegraph/doctree - First-class library documentation for every language (based on tree-sitter), with symbol search & more. Lightweight single binary, run locally or self-host. Surfaces usage examples via Sourcegraph.
• babarot/afx - 📦 Package manager for CLI
• cli/cli - GitHub’s official command line tool
• s0md3v/Smap - a drop-in replacement for Nmap powered by shodan.io
• wader/fq - jq for binary formats - tool, language and decoders for working with binary and text formats
• tailscale/tailscale - The easiest, most secure way to use WireGuard and 2FA.
• botlabs-gg/yagpdb - Yet another general purpose discord bot
• 42wim/matterbridge - bridge between mattermost, IRC, gitter, xmpp, slack, discord, telegram, rocketchat, twitch, ssh-chat, zulip, whatsapp, keybase, matrix, microsoft teams, nextcloud, mumble, vk and more with REST API (m
• Zate/ControlsAssessmentSpecification - Controls Assessment Specification
• runZeroInc/runzero-tools - Open source tools, libraries, and datasets related to the runZero product and associated research
• runZeroInc/rumble-api - Rumble Network Discovery API
• kubernetes/minikube - Run Kubernetes locally
• sagar-jadhav/go-examples - Get Set Learn Go
• evilsocket/pwngrid - (⌐■_■) - API server for pwnagotchi.ai
• gcla/termshark - A terminal UI for tshark, inspired by Wireshark
• wagoodman/dive - A tool for exploring each layer in a docker image
• sirupsen/logrus - Structured, pluggable logging for Go.
• containrrr/watchtower - A process for automating Docker container base image updates.
• git-lfs/git-lfs - Git extension for versioning large files
• munnerz/kube-plex - Scalable Plex Media Server on Kubernetes -- dispatch transcode jobs as pods on your cluster!
• twitchyliquid64/gofi - Open-source implementation of a controller which is compatible with ubiquiti APs.
• dustin-decker/threatseer - efficient linux security monitoring
• alphasoc/flightsim - A utility to safely generate malicious network traffic patterns and evaluate controls.
• traefik/traefik - The Cloud Native Application Proxy
• DNSCrypt/dnscrypt-proxy - dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols.
• dimalinux/spoofsourceip - Golang/gopath example for spoofing UDP source IP addresses
• gopasspw/gopass - The slightly more awesome standard unix password manager for teams
• bcicen/ctop - Top-like interface for container metrics
• SSLMate/certspotter - Certificate Transparency Log Monitor
• slackhq/go-audit - go-audit is an alternative to the auditd daemon that ships with many distros
• inconshreveable/ngrok - Unified ingress for developers
• discordianfish/docker-backup - Tool for backing up docker volume / data containers
• Netflix/chaosmonkey - Chaos Monkey is a resiliency tool that helps applications tolerate random instance failures.
• quay/clair - Vulnerability Static Analysis for Containers
• future-architect/vuls - Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
• rclone/rclone - "rsync for cloud storage" - Google Drive, S3, Dropbox, Backblaze B2, One Drive, Swift, Hubic, Wasabi, Google Cloud Storage, Azure Blob, Azure Files, Yandex Files
• hardentools/hardentools - Hardentools simply reduces the attack surface on Microsoft Windows computers by disabling low-hanging fruit risky features.
• mrled/caryatid - Packer plugin to generate and update Vagrant catalogs
• whalebrew/whalebrew - Homebrew, but with Docker images
• keybase/kbfs - Keybase Filesystem (KBFS)
• keybase/client - Keybase Go Library, Client, Service, OS X, iOS, Android, Electron
• trufflesecurity/trufflehog - Find, verify, and analyze leaked credentials
• moby/moby - The Moby Project - a collaborative project for the container ecosystem to assemble container-based systems
• docker-archive/classicswarm - Swarm Classic: a container clustering system. Not to be confused with Docker Swarm which is at https://github.com/docker/swarmkit
• scaleway/scaleway-cli - Command Line Interface for Scaleway

HTML

• pa3gsb/Radioberry-2.x - Ham Radio hat for Raspberry PI
• todb/CNAs - A low-calorie, unofficial view of the CNA list.
• mauvehed/austinhackers.github.io - AHA! Website Source
• HackersAssociation/HackersAssociation.org - The HackersAssociation.org website
• projectdiscovery/nuclei-docs - Nuclei documentation
• CVEProject/cve-schema - This repository is used for the development of the CVE JSON record format. Releases of the CVE JSON record format will also be published here. This repository is managed by the CVE Quality Working Gro
• tholman/github-corners - A fresher "Fork me on GitHub" callout.
• evilsocket/spycast - A crossplatform mDNS enumeration tool.
• ceafin/cp2102n-esp32-programmer - CP2102N-A02 based USB-to-UART bridge controller for use in programming ESP32 chips and modules
• madhuakula/kubernetes-goat - Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀
• restincode/restincode - A memorial site for Hackers and Infosec people who have passed
• attrition-org/attrition-images -
• realpython/materials - Bonus materials, exercises, and example projects for our Python tutorials
• zKillboard/zKillboard - Easy does it
• lostpolicymaker/lostpolicymaker.github.io - Attending BSides Las Vegas, Black Hat, and/or DEF CON for the first time this year and feeling confused or overwhelmed? The Lost Policymaker's Guide to Hacker Summer Camp is a tongue-in-cheek nod to a
• dev-sec/ansible-ssh-hardening - This Ansible role provides numerous security-related ssh configurations, providing all-round base protection.
• OWASP/Top10 - Official OWASP Top 10 Document Repository
• DefectDojo/django-DefectDojo - DevSecOps, ASPM, Vulnerability Management. All on one platform.
• rapid7/metasploitable3 - Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.
• grassmunk/Chicago95 - A rendition of everyone's favorite 1995 Microsoft operating system for Linux.

Hack

• facebookarchive/fbctf - Platform to host Capture the Flag competitions

Inno Setup

• mentebinaria/retoolkit - Reverse Engineer's Toolkit

JSON

• upptime/upptime - ⬆️ GitHub Actions uptime monitor & status page by @AnandChowdhary

Java

• OWASP-Benchmark/BenchmarkJava - OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dy
• jeFF0Falltrades/Malware-Writeups - A collection of my reverse engineering and malware analysis write-ups
• indeedeng/proctor - Proctor is a Java-based A/B testing framework developed by, and used heavily within, Indeed.
• Netflix/denominator - Portably control DNS clouds using java or bash
• C2SP/wycheproof - Project Wycheproof tests crypto libraries against known attacks.
• apache/metron - Apache Metron

JavaScript

• gchq/CyberChef - The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
• OctoFarm/OctoFarm - OctoFarm is an web server and client combination for unifying multiple instances of Octoprint. You can manage and monitor as many instances as you want from a single interface giving you full control
• SpaceTradersAPI/api-docs - The API documentation for the SpaceTraders API
• FIRSTdotorg/cvss-v4-calculator - CVSS v4.0 calculator
• actions-marketplace-validations/akhilmhdh_contributors-readme-action -
• ANDnXOR/atom-lulzcode - Language support for LULZCODE (AND!XOR DC26 Indie Badge) for Atom Editor
• vexorian/dizquetv - Create live TV channels from your own media. Access the streams using the simulated HDHomerun tuner or the generated M3U URl.
• gethomepage/homepage - A highly customizable homepage (or startpage / application dashboard) with Docker and service API integrations.
• di-sukharev/opencommit - GPT wrapper for git — generate commit messages with an LLM in 1 sec — works best with Claude 3.5 — supports local models too
• CVEProject/cve-services - This repo contains the source for the CVE Services API.
• cloudflare/python-worker-hello-world - Python hello world for Cloudflare Workers
• JupiterOne/security-policy-templates - A set of policies, standards and control procedures with mapping to HIPAA, NIST CSF, PCI DSS, SOC2, FedRAMP, CIS Controls, and more.
• JupiterOne/secops-automation-examples - Examples on how to maintain security/compliance as code and to automate SecOps using the JupiterOne platform.
• mauvehed/Con-Tech-Roster-Export - Automates exports from Shiftboard systems into Google Drive
• louislam/uptime-kuma - A fancy self-hosted monitoring tool
• Dekita/Discord-RPC-Tool - Discord RPC Tool written by DekitaRPG
• Drive4ik/simple-tab-groups - Create, modify and quick change tab groups. Inspired by the Tab Groups app :)
• anuraghazra/github-readme-stats - ⚡ Dynamically generated stats for your github readmes
• Thornsnake/Spectrum - Discord bot for EVE online (discontinued)
• greenbone/gsa - Greenbone Security Assistant - The web frontend for the Greenbone Community Edition
• bearlikelion/vhstatus - Valheim dedicated server status page
• philhawthorne/ha-dockermon - A NodeJS RESTful API which can be used with Home Assistant to report the state of Docker Containers
• Hubs-Foundation/hubs-discord-bot - A Discord bot that helps you use Hubs together with people in Discord.
• facebook/create-react-app - Set up a modern web app by running one command.
• badges/shields - Concise, consistent, and legible badges in SVG and raster format
• Unitech/pm2 - Node.js Production Process Manager with a built-in Load Balancer.
• codewar65/VTX_ClientServer - VTX Client / Server package.
• NuSkooler/enigma-bbs - ENiGMA½ BBS Software
• lirantal/dockly - Immersive terminal interface for managing docker containers and services
• auth0/repo-supervisor - Scan your code for security misconfiguration, search for passwords and secrets. 🔍
• chrisayoub/Con-Tech-Roster-Export - Automates exports from Shiftboard systems into Google Drive
• carbon-app/carbon - 🖤 Create and share beautiful images of your source code
• aksakalli/gtop - System monitoring dashboard for terminal
• MrRio/vtop - Wow such top. So stats. More better than regular top.
• jsonresume/resume-cli - CLI tool to easily setup a new resume 📑
• byteclubfr/uncloak - A live theme editor for reveal.js (colors, font, sizes...)
• facebookarchive/nuclide - An open IDE for web and native mobile development, built on top of Atom
• HabitRPG/habitica - A habit tracker app which treats your goals like a Role Playing Game.
• Netflix-Skunkworks/sketchy - A task based API for taking screenshots and scraping text from websites.

Jinja

• stefangweichinger/ansible-rclone - ansible role for rclone :: https://galaxy.ansible.com/stefangweichinger/ansible_rclone
• dev-sec/ansible-collection-hardening - This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL
• trailofbits/algo - Set up a personal VPN in the cloud

Jupyter Notebook

• FIRSTdotorg/epss - Exploit Prediction Scoring System (EPSS)
• Cyb3rWard0g/HELK - The Hunting ELK
• ThreatHuntingProject/hunter - A threat hunting / data analysis environment based on Python, Pandas, PySpark and Jupyter Notebook.
• SuperCowPowers/zat - Zeek Analysis Tools (ZAT): Processing and analysis of Zeek network data with Pandas, scikit-learn, Kafka and Spark

Lua

• cldrn/nmap-nse-scripts - My collection of nmap NSE scripts
• mubix/tools - Operational toolset utilizing git's submodule feature

MDX

• tailscale-dev/tailscale-dev - The site powering tailscale.dev

Makefile

• radiodoc/uv-5r - Baofeng UV-5R
• theparanoids/PrioritizedRiskRemediation - A Risk-Based Prioritization Taxonomy for prioritizing CVEs (Common Vulnerabilities and Exposures).
• hamster/classroom - Classes I have developed

Markdown

• HDVinnie/TrackerHub - Monitor tracker uptime

Objective-C

• joelekstrom/fastmate - A native Fastmail-wrapper for Mac.

Others

• FiloSottile/awesome-age - A collection of projects and resources in the age file encryption ecosystem.
• terremoth/awesome-m5stack-cardputer - Awesome M5Stack Cardputer
• SamuelNetherway460/Baofeng-UV-5R - Repository for operation guidance, radio configuration images and other general information for the Baofeng UV-5R radio.
• jarrfarr/baofeng-uv5r - Modifications, Frequency lists, CHIRP images, Hacks and Tips for your UV-5R Handy-talkies.
• sbilly/awesome-security - A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.
• communitysec/sbom-hall-of-fame - A place for the InfoSec community to share and celebrate real stories of organizations successfully using SBOMs (and other bills of material) to actually manage and reduce security risk in meaningful
• DC-Makers-Community/DC-Designs -
• Kredence/DC32_Fragments -
• yokoffing/NextDNS-Config - Setup guide for NextDNS, a DoH proxy with advanced capabilities
• HackerNews/API - Documentation and Samples for the Official HN API
• dracula/dracula-theme - 🧛🏻‍♂️ One theme. All platforms.
• Maker-Management-Platform/docs -
• SpaceTradersAPI/awesome-spacetraders -
• unpoller/unpoller.github.io - UnPoller Web Site
• FIRSTdotorg/global-irt - Global IRT (Incident Response Team) is a project to describe common IRT and abuse contact information
• lawrencesystems/graylog - Graylog 6 setup
• ANDnXOR/ANDnXOR-Kicad.pretty - Kicad components and footprints used by the AND!XOR DEFCON 24 Badge
• ANDnXOR/badgelife_dev_board - #badgelife dev board
• ANDnXOR/BSidesSD - Badge Project for BSides San Diego
• ANDnXOR/sao-reference-designs - AND!XOR Reference Designs for SAOs
• coder/awesome-code-server - Projects, resources, and tutorials that take code-server to the next level
• awesome-selfhosted/awesome-selfhosted - A list of Free Software network services and web applications which can be hosted on your own servers
• Lissy93/feeds - 🗞️ Cache of RSS Feeds (used to render posts section on my website)
• cbirkenbeul/docker-homelab - Docker Compose Dateien für Homelabs
• alex/what-happens-when - An attempt to answer the age old interview question "What happens when you type google.com into your browser and press enter?"
• A-poc/BlueTeam-Tools - Tools and Techniques for Blue Team / Incident Response
• contechcrew/contechcrew.github.io -
• jonathanvansina/docker-compose-nas - Optimized Docker Compose files to use on a Synology NAS
• CVEProject/automation-working-group - CVE Automation Working Group
• LogicOverSnacks/glint-release -
• sourcery-ai/action - A GitHub Action for running Sourcery.
• thegeekyb0y/learnpython - Python Resources for Everyone
• dailydotdev/daily - daily.dev is a professional network for developers to learn, collaborate, and grow together 👩🏽‍💻 👨‍💻
• yevh/VulnPlanet - Vulnerable code snippets with fixes for Web2, Web3, API, iOS, Android and Infrastructure-as-Code (IaC)
• CVEProject/cvelist - Pilot program for CVE submission through GitHub. CVE Record Submission via Pilot PRs ending 6/30/2023
• p4gs/online-account-and-password-manager-hardening-guide - A guide containing a checklist for hardening online accounts and password managers used to store credentials for said accounts
• pacohope/infosec-fediverse-seedfile - A file full of useful and interesting people to follow on the #fediverse
• ChristianLempa/cheat-sheets - This is my personal knowledge-base. Here you'll find code-snippets, technical documentation, and command reference for various tools, and technologies.
• TalEliyahu/awesome-CISO-maturity-models - Maturity models help integrate traditionally separate organizational functions, set process improvement goals and priorities, provide guidance for quality processes, and provide benchmark for appraisi
• rapid7/insightvm-sql-queries - InsightVM helpful SQL queries
• realpython/list-of-python-api-wrappers - List of Python API Wrappers and Libraries
• vcokltfre/tutorial-v2 - A rewrite of my bot tutorial, updated to reflect new features in the Discord API, and new libraries.
• tailscale/gitops-acl-action - GitOps for your Tailscale ACLs
• tailscale/github-action - A GitHub Action to connect your workflow to your Tailscale network.
• romainl/idiomatic-vimrc - Guidelines for sculpting your very own ~/.vimrc.
• djsime1/awesome-flipperzero - 🐬 A collection of awesome resources for the Flipper Zero device.
• jimilinuxguy/flipperzero-touchtunes -
• coverallsapp/github-action - Coveralls Github Action
• github/gitignore - A collection of useful .gitignore templates
• awslabs/aws-automated-incident-response-and-forensics -
• kaiiyer/awesome-vulnerable - A curated list of VULNERABLE APPS and SYSTEMS which can be used as PENETRATION TESTING PRACTICE LAB.
• fightingferret/lora-buddy - LoRa Buddy, an ESP32 and LoRa based handheld texting gadget.
• BlackWolfWoof/yagpdb-cc - Custom commands for the YAGPDB Discord bot🤖
• gcormier/esphome-humitemp - esphome temperature and humidity sensor
• d1str0/dc29-badge -
• breditor/infosecevents -
• attrition-org/web-hack-mirror - A copy of the Attrition.org web page hack / defacement mirror. Details: https://attrition.org/mirror/
• joker2a/OSCP - OSCP cheatsheet
• simonw/ca-fires-history - Tracking fire data from www.fire.ca.gov
• yagpdb-cc/yagpdb-cc - A curated collection of custom commands for the YAGPDB Discord bot
• rapid7/attackerkb - Repo for creating-and-tracking issues related to AttackerKB
• fm4dd/picon-one-hw - KiCad PCB, gerber, and CAD files for the PiCon-One controller.
• ediskandarov/home-kubernetes -
• jetbalsa/BSidesRoc2019-TapeBadge -
• adafruit/awesome-circuitpython - A curated list of awesome CircuitPython guides, videos, libraries, frameworks, software and resources.
• patrickrb/reddit-defcon-meetup-SAO - SAO for reddit meetup at Defcon 27
• lovelydreamer/UnsafeFrameworkMethods - Unsafe framework methods
• vmbrasseur/Public_Speaking - A repository of resources about public speaking, specifically in the context of software development and IT conferences.
• CoffeeAndCode/ansible-duo - Ansible galaxy role for Duo
• Experience-Monks/math-as-code - a cheat-sheet for mathematical notation in code form
• Servers-for-Hackers/ansible-basic-server - Basic Ubuntu Server Setup
• firstcontributions/first-contributions - 🚀✨ Help beginners to contribute to open source projects
• wsargent/docker-cheat-sheet - Docker Cheat Sheet
• berzerk0/Probable-Wordlists - Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!
• markofu/pcaps - Public Repository of all Publicly Available Packet Captures that I've used or come across
• stamparm/EternalRocks - EternalRocks worm
• skyw4tch3r/RootKits-List-Download - This is the list of all rootkits found so far on github and other sites.
• xairy/linux-kernel-exploitation - A collection of links related to Linux kernel security and exploitation
• ctjhoa/rust-learning - A bunch of links to blog posts, articles, videos, etc for learning Rust
• material-theme/vsc-material-theme - Material Theme, the most epic theme for Visual Studio Code
• devsecops/awesome-devsecops - An authoritative list of awesome devsecops tools with the help from community experiments and contributions.
• keybase/keybase-issues - A single repo for managing publicly recognized issues with the keybase client, installer, and website.
• bluscreenofjeff/Red-Team-Infrastructure-Wiki - Wiki to collect Red Team infrastructure hardening resources
• ircv3/ircv3-specifications - IRCv3 specifications | Roadmap: https://git.io/IRCv3-Roadmap | Code of conduct: http://ircv3.net/conduct.html
• aoswhitepapers/osquery - Whitepaper on osquery for Mac Management
• meirwah/awesome-incident-response - A curated list of tools for incident response
• hslatman/awesome-threat-intelligence - A curated list of Awesome Threat Intelligence resources
• richinseattle/Dockerfiles -
• mubix/windows-hardening - Because I can't find scripts to do this anywhere else...
• veggiemonk/awesome-docker - 🐳 A curated list of Docker resources and projects
• Hack-with-Github/Awesome-Hacking - A collection of various awesome lists for hackers, pentesters and security researchers
• chassing/linux-sysadmin-interview-questions - Collection of Linux Sysadmin/DevOps interview questions
• awesome-foss/awesome-sysadmin - A curated list of amazingly awesome open-source sysadmin resources.
• imposters-handbook/feedback - General typos, issues, clarifications etc for The Imposter's Handbook
• Droogans/unmaintainable-code - A more maintainable, easier to share version of the infamous http://mindprod.com/jgloss/unmain.html
• FallibleInc/security-guide-for-developers - Security Guide for Developers (实用性开发人员安全须知)
• therandomsecurityguy/docker-cheat-sheet - Handy cheat sheet for Docker setup and operational commands
• metasploit/resource-portal-data - YAML data sources for metasploit.github.io
• savagejen/GlobalGitIgnore -
• rubocop/ruby-style-guide - A community-driven Ruby coding style guide

PHP

• PrivateBin/PrivateBin - A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.
• woolfg/dokuwiki-plugin-gitbacked - Plugin for DokuWiki to store/sync files and media with a git repo
• coollabsio/coolify - An open-source & self-hostable Heroku / Netlify / Vercel alternative.
• riskbasedsecurity/VulnDB-Client-Examples - Example client code for use with Risk Based Security's VulnDB
• zteeed/dokuwiki-discord-notifier - Notify page events via Discord
• batesta/whoshere - Who's Here? - An automatic "In/Out" board for UniFi networks
• causefx/Organizr - HTPC/Homelab Services Organizer - Written in PHP
• paragonie/paseto - Platform-Agnostic Security Tokens
• fuzzdb-project/fuzzdb - Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
• Raikia/FiercePhish - FiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule sending of emails, and much more.
• simplerisk/code - The currently released SimpleRisk source code.
• SpiderLabs/MCIR - The Magical Code Injection Rainbow! MCIR is a framework for building configurable vulnerability testbeds. MCIR is also a collection of configurable vulnerability testbeds.
• SpiderLabs/CryptOMG - CryptOMG is a configurable CTF style test bed that highlights common flaws in cryptographic implementations.

Pascal

• cheat-engine/cheat-engine - Cheat Engine. A development environment focused on modding

Perl

• robinsmidsrod/unifi-controller-cli - UniFi controller CLI for API
• owasp-modsecurity/ModSecurity-apache - ModSecurity v3 Apache Connector
• inverse-inc/packetfence - PacketFence is a fully supported, trusted, Free and Open Source network access control (NAC) solution. Boasting an impressive feature set including a captive-portal for registration and remediation, c

Perl 6

• Zate/botceptor - Some hacked together code for running some machine learning over twitter followers

PowerShell

• mrled/dhd - distributed home directory
• Sycnex/Windows10Debloater - Script to remove Windows 10 bloatware.

Python

• HBLink-org/hblink3 - HBlink for Python3
• pwr-Solaar/Solaar - Linux device manager for Logitech devices
• infinition/Bjorn - Bjorn is a powerful network scanning and offensive security tool for the Raspberry Pi with a 2.13-inch e-Paper HAT. It discovers network targets, identifies open ports, exposed services, and potential
• whad-team/whad-client - Wireless Hacking Devices Protocol client
• Frninezy/NextDNS-Domain-Bulk-Loader - Add your own custom domain lists to NextDNS
• ep1cman/unifi-protect-backup - Python tool to backup unifi event clips in realtime
• t0sche/cvss-bt - Enriching the NVD CVSS scores to include Temporal & Threat Metrics
• blakdayz/osx-netscan - A Zenmap Alternative, Specifically for M Series MacOS 14 and up
• Muscaw/gitea-github-sync - gitea-github-sync provides a simple CLI to sync Github repositories to your Gitea instance
• austinmesh/bridger - A Meshtastic MQTT to InfluxDB metrics bridge
• nicoloboschi/poetry-dockerize-plugin - Poetry plugin your Poetry application to a Docker image easily.
• pre-commit/pre-commit-hooks - Some out-of-the-box hooks for pre-commit
• ollama/ollama-python - Ollama Python library
• InsertDisc/pattrmm - Plex Meta Manager helper script for a chronological Returning Soon collection with dates.
• maguowei/starred - creating your own Awesome List by GitHub stars!
• blissland/blissflixx - Raspberry Pi + TV = Smart streaming experience.
• cosmictraders/autotraders - A spacetraders API focused on automation and ease of use
• Ctri-The-Third/PythonTemplate - a straightforward repo with setup actions, unit-testing, requirements, and such.
• Azure/PyRIT - The Python Risk Identification Tool for generative AI (PyRIT) is an open source framework built to empower security professionals and engineers to proactively identify risks in generative AI systems.
• brinhosa/apidetector - APIDetector: Efficiently scan for exposed Swagger endpoints across web domains and subdomains. Supports HTTP/HTTPS, multi-threading, and flexible input/output options. Ideal for API security testing.
• ANDnXOR/ANDnXOR_DC31_Badge - Coming soon...
• instantbox/instantbox - 📦 Get a clean, ready-to-go Linux box in seconds.
• anishathalye/dotbot - A tool that bootstraps your dotfiles ⚡️
• Lissy93/portainer-templates - 🚢 500+ 1-click Portainer app templates
• RocketGod-git/shodanbot - Discord bot for the Shodan API - OSINT tool
• mrled/psyops - Personal SYs OPS
• CERTCC/SSVC - Stakeholder-Specific Vulnerability Categorization
• TURROKS/CVE_Prioritizer - Streamline vulnerability patching with CVSS, EPSS, and CISA's Known Exploited Vulnerabilities. Prioritize actions based on real-time threat information, gain a competitive advantage, and stay informed
• pre-commit-ci/pre-commit.ci - Website for https://pre-commit.ci
• pre-commit-ci/pre-commit-ci-config - validation for pre-commit.ci configuration
• HackMiami/Discordbot-presentation -
• chazlarson/Media-Scripts -
• certbot/certbot - Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.
• infobyte/faraday - Open Source Vulnerability Management Platform
• opencve/opencve - CVE Alerting Platform
• DefectDojo/defectdojo_api - Python API library for DefectDojo
• fly-apps/python-hellofly-flask - A Pythonic version of the Hellofly example
• ccie18643/PyTCP - PyTCP is a fully functional TCP/IP stack written in Python. It supports TCP stream-based transport with reliable packet delivery based on a sliding window mechanism and basic congestion control. It al
• blacktwin/JBOPS - Just a Bunch Of Plex Scripts
• bpython/bpython - bpython - A fancy curses interface to the Python interactive interpreter
• pkkid/python-plexapi - Python bindings for the Plex API.
• mauvehed/trackerstatus - A Python library for interacting with trackerstatus.info API.
• drdanio/eve-simple-esi - The Python 3+ library for simple and fast work with https://esi.evetech.net data.
• ntt/eveapi - Python library for accessing the EVE Online API
• juliomalegria/python-craigslist - Simple Craigslist wrapper
• python-discord/snekbox - Easy, safe evaluation of arbitrary Python code
• danth/pathfinder.vim - Vim plugin to suggest better movements
• cens6r/discord-cogs-template - A discord.py bot template with Cogs implemented.
• oliverstech/pykuma - An API for Python Scripts to integrate with Uptime Kuma
• Red5d/docker-autocompose - Generate a docker-compose yaml definition from a running container
• jamalex/notion-py - Unofficial Python API client for Notion.so
• drygdryg/netbox-device-autodiscovery - Script for network scanning and automatic device discovery for NetBox
• netbox-community/netbox - The premier source of truth powering network automation. Open source under Apache 2. Try NetBox Cloud free: https://netboxlabs.com/free-netbox-cloud/
• netbox-community/netbox-docker - 🐳 Docker Image of NetBox
• netbox-community/pynetbox - Python API client library for Netbox.
• python-discord/bot - The community bot for the Python Discord community
• python-discord/sir-lancebot - A Discord bot started as a community project for Hacktoberfest 2018, later evolved to an introductory project for aspiring new developers starting out with open source development.
• python-poetry/poetry - Python packaging and dependency management made easy
• commitizen-tools/commitizen - Create committing rules for projects 🚀 auto bump versions ⬆️ and auto changelog generation 📂
• TrianguloY/webhook-discord - Webhook middleware from heroku to discord
• EVEInsight/Insight - Discord bot providing PvP activity tracking, intel, and utilities for the game EVE Online.
• celery/celery - Distributed Task Queue (development branch)
• EVEInsight/InsightCore - Workers for Insight v2 rewrite.
• snyk-labs/pysnyk - A Python client for the Snyk API.
• dec0dOS/amazing-github-template - 🚀 Useful README.md, LICENSE, CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, GitHub Issues, Pull Requests and Actions templates to jumpstart your projects.
• mauvehed/docker-crawl - Docker container for Dungeon Crawl Stone Soup
• mauvehed/blackhatpython - Study group working through Black Hat Python: https://www.nostarch.com/blackhatpython
• mauvehed/yourip - A simple web site to return yourIP
• interactions-py/interactions.py - A highly extensible, easy to use, and feature complete bot framework for Discord
• k2bd/action-python-poetry - Template repo to quickly make a tested and documented GitHub action in Python with Poetry
• custom-components/sensor.unifigateway - High level health status of UniFi Security Gateway devices via UniFi Controller
• savioxavier/repo-finder-bot - Find the best repos to contribute to, right from Discord!
• platformio/platformio-core - Your Gateway to Embedded Software Development Excellence 👽
• TheSpaghettiDetective/OctoPrint-Obico -
• rx13/dc29-discord-signalbot - A python discord client interaction emulator for the DC29 badge code channel
• jekyc/wig - WebApp Information Gatherer
• dropbox/nsot - Network Source of Truth is an open source IPAM and network inventory database
• home-assistant/operating-system - 🔰 Home Assistant Operating System
• pwndbg/pwndbg - Exploit Development and Reverse Engineering with GDB Made Easy
• znb/Scripts - General scripts for random stuff
• barnumbirr/ares - A python wrapper around https://cve.circl.lu.
• NorthernSec/CVE-Scan - Scan systems with NMap and parse the output to a list of CVE's, CWE's and DPE's
• frozenfoxx/docker-crawl - Docker container for Dungeon Crawl Stone Soup
• jkirkcaldy/plex-utills - Manage your Plex library automatically
• Rapptz/discord.py - An API wrapper for Discord written in Python.
• Boerderij/Varken - Standalone application to aggregate data from the Plex ecosystem into InfluxDB using Grafana as a frontend
• Ciphey/Ciphey - ⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡
• l3uddz/plex_autoscan - Script to assist sonarr/radarr with plex imports. Will only scan the folder that has been imported, instead of the whole library section.
• evilsocket/pwnagotchi - (⌐■_■) - Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.
• davidski/VulnPryer - 🎯 Vulnerability Pryer - Prying context into your vulnerability data
• conchyliculture/Yand - Yet Another Nand Dumper
• OctoPrint/OctoPrint - OctoPrint is the snappy web interface for your 3D printer!
• ohjeongwook/dumpflash - Low-level NAND Flash dump and parsing utility
• rapid7/vm-console-client-python - the UNOFFICIAL (but useful) Python library for the Rapid7 InsightVM/Nexpose RESTful API
• awslabs/aws-shell - An integrated shell for working with the AWS CLI.
• vanviegen/hue-thief - Factory reset Philips Hue bulbs using an EZSP-based Zigbee USB stick. After a reset, bulbs can easily join any type of compatible bridge.
• defconfurs/dc26-fur-scripts - DEFCON Furs Badge Software for DC26 (2018)
• ElJefeDSecurIT/DC26fingerbadge - DEFCON26 middle finger badge
• hfaran/slack-export-viewer - A Slack Export archive viewer that allows you to easily view and share your Slack team's export
• utiso/dorkbot - Command-line tool to scan Google search results for vulnerabilities
• NullArray/AutoSploit - Automated Mass Exploiter
• aker-gateway/aker-freeipa-playbook -
• ChrisTheCoolHut/Zeratool - Automatic Exploit Generation (AEG) and remote flag capture for exploitable CTF problems
• dodgymike/kicad-visualisations -
• nginx-proxy/nginx-proxy - Automated nginx proxy for Docker containers using docker-gen
• devttys0/baudrate -
• tenable/pyTenable - Python Library for interfacing into Tenable's platform APIs
• HASecuritySolutions/VulnWhisperer - Create actionable data from your Vulnerability Scans
• guardicore/monkey - Infection Monkey - An open-source adversary emulation platform
• jzadeh/chiron-elk -
• will8211/unimatrix - Python script to simulate the display from "The Matrix" in terminal. Uses half-width katakana unicode characters by default, but can use custom character sets. Accepts keyboard controls while running.
• adrienbrignon/cloudflare-ddns - A script to update your Cloudflare DNS records at a glance.
• evennia/ainneve - A full example game created in Evennia (under development, anyone can help!)
• evennia/evennia - Python MUD/MUX/MUSH/MU* development system
• wifiphisher/wifiphisher - The Rogue Access Point Framework
• ansible/ansible-container - DEPRECATED -- Ansible Container was a tool to build Docker images and orchestrate containers using only Ansible playbooks.
• mitre/caldera - Automated Adversary Emulation Platform
• zedshaw/learn-more-python-the-hard-way-solutions -
• disposable-email-domains/disposable-email-domains - a list of disposable and temporary email address domains
• rapid7/nexpose-client-python - DEPRECATED : Rapid7 Nexpose API client library written in Python
• ansible/awx - AWX provides a web-based user interface, REST API, and task engine built on top of Ansible. It is one of the upstream projects for Red Hat Ansible Automation Platform.
• eldraco/domain_analyzer - Analyze the security of any domain by finding all the information possible. Made in python.
• magic-wormhole/magic-wormhole - get things from one computer to another, safely
• google/grr - GRR Rapid Response: remote live forensics for incident response
• Netflix-Skunkworks/stethoscope - Personalized, user-focused recommendations for employee information security.
• nccgroup/Scout2 - Security auditing tool for AWS environments
• StevenBlack/hosts - 🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.
• byt3bl33d3r/CrackMapExec - A swiss army knife for pentesting networks
• OWASP-Austin/blackhatpython - Study group working through Black Hat Python: https://www.nostarch.com/blackhatpython
• bugcrowd/vulnerability-rating-taxonomy - Bugcrowd’s baseline priority ratings for common security vulnerabilities
• puppetlabs-toy-chest/vmpooler-client -
• CTFd/CTFd - CTFs as you need them
• errbotio/errbot - Errbot is a chatbot, a daemon that connects to your favorite chat service and bring your tools and some fun into the conversation.
• octodns/octodns - Tools for managing DNS across multiple providers
• trailofbits/manticore - Symbolic execution tool
• gremwell/pynessus - Client for the Nessus vulnerability scanner REST API.
• nixawk/labs - Vulnerability Labs for security analysis
• WithSecureLabs/doublepulsar-c2-traffic-decryptor - A python2 script for processing a PCAP file to decrypt C2 traffic sent to DOUBLEPULSAR implant
• int0x80/tcispy - Pull author and committer names and emails from Travis-CI
• conceptofproof/CTFs - Various solutions and sploits
• hugsy/gef - GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux
• longld/peda - PEDA - Python Exploit Development Assistance for GDB
• nccgroup/featherduster - An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction
• DonnchaC/shadowbrokers-exploits - Mirror of Shadowbrokers release from https://steemit.com/shadowbrokers/@theshadowbrokers/lost-in-translation
• llimllib/limbo - A simple, clean, easy to modify Slack chatbot
• scrapinghub/slackbot - A chat bot for Slack (https://slack.com).
• vinta/awesome-python - An opinionated list of awesome Python frameworks, libraries, software and resources.
• Netflix/bless - Repository for BLESS, an SSH Certificate Authority that runs as a AWS Lambda function
• mitre/multiscanner - Modular file scanning/analysis framework
• donnemartin/system-design-primer - Learn how to design large-scale systems. Prep for the system design interview. Includes Anki flashcards.
• dropbox/merou - Permission management service
• kholia/OSX-KVM - Run macOS on QEMU/KVM. With OpenCore + Monterey + Ventura + Sonoma support now! Only commercial (paid) support is available now to avoid spammy issues. No Mac system is required.
• witchard/mog - A different take on the UNIX tool cat
• DarrenOfficial/dpaste - The Django project driving dpaste.org
• SteveMcGrath/pySecurityCenter -
• tenable/Tenable.io-SDK-for-Python - Tenable.io SDK offers a scalable and safe way to integrate with the Tenable.io platform.
• coala/coala - coala provides a unified command-line interface for linting and fixing all your code, regardless of the programming languages you use.
• SpiderLabs/Responder - Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication
• DanMcInerney/wifijammer - Continuously jam all wifi clients/routers
• Waptor/phone-number-wifi-brute-forcer - This script takes in your location and SSID and tries to brute-force the Wi-Fi password based on valid area codes/exchanges in your town.
• Duroktar/YuleLog - A terminal based Yule Log fireplace for all the kids in the corner with sweatpants.
• linode/docs - Linode guides and tutorials.
• nvbn/thefuck - Magnificent app which corrects your previous console command.
• b-ryan/powerline-shell - A beautiful and useful prompt for your shell
• ztgrace/changeme - A default credential scanner.
• 0xAX/linux-insides - A little bit about a linux kernel
• Tautulli/Tautulli - A Python based monitoring and tracking tool for Plex Media Server.
• mubix/shellshocker-pocs - Collection of Proof of Concepts and Potential Targets for #ShellShocker
• reddit-archive/reddit - historical code from reddit.com
• int0x80/reversing - stupid reversing stuff
• aaronportnoy/toolbag - The IDA Toolbag is a plugin providing supplemental functionality to Hex-Rays IDA Pro disassembler.

Roff

• slimm609/checksec - Checksec

Ruby

• Lissy93/Brewfile - 🍺 My list of packages to be installed on MacOS via Homebrew, for the ultimate dev setup
• brandonhilkert/fucking_shell_scripts - The easiest, most common sense configuration management tool... because you just use fucking shell scripts.
• theforeman/foreman_docker - This plugin enables management of Docker containers and images in Foreman
• singleplatform-eng/ansible-role-nessus-agent - Role for Installing/Configuring Nessus Agent
• simp/simp-core - The base SIMP build repository
• NationalSecurityAgency/SIMP - A system automation and configuration management stack targeted toward operational flexibility and policy compliance.
• gauntlt/gauntlt - a ruggedization framework that embodies the principle "be mean to your code"
• puppetlabs/vmpooler - Provide configurable 'pools' of instantly-available (running) virtual machines
• dotless-de/vagrant-vbguest - A Vagrant plugin to keep your VirtualBox Guest Additions up to date
• mastodon/mastodon - Your self-hosted, globally interconnected microblogging community
• weaponize/protocolander - Protocolander is a small tool set for getting started dissecting and simulating network protocols.
• headlesszeke/stfu - A ruby library for auditing session tokens
• hdm/inetdata - Internet data acquisition
• rapid7/nexpose-client - DEPRECATED: Rapid7 Nexpose API client library written in Ruby
• rick/linode - Ruby wrapper for the Linode automation API
• misterpaul/NexposeRubyScripts - Ruby scripts for working with Rapid7 Nexpose
• rubocop/rubocop - A Ruby static code analyzer and formatter, based on the community Ruby style guide.
• pry/pry - A runtime developer console and IRB alternative with powerful introspection capabilities.
• vmware-archive/rbvmomi - Ruby interface to the VMware vSphere API.
• Netflix-Skunkworks/Scumblr - Web framework that allows performing periodic syncs of data sources and performing analysis on the identified results
• mislav/git-deploy - git deployment made easy
• ginriki/flaw_detector - The tool to detect code's flaw with static analysis
• stegg0/stegg0 - Stegg0: A multi-user messenging application utilizing encryption and image steganography.
• scriptjunkie/Ambush - Ambush Host Intrusion Prevention System
• packetfu/packetfu - PacketFu, a mid-level packet manipulation library for Ruby

Rust

• dandavison/delta - A syntax-highlighting pager for git, diff, grep, and blame output
• astral-sh/ruff - An extremely fast Python linter and code formatter, written in Rust.
• astral-sh/uv - An extremely fast Python package and project manager, written in Rust.
• mfontanini/presenterm - A markdown terminal slideshow tool
• dani-garcia/vaultwarden - Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs
• synacktiv/shh - Systemd Hardening Helper - Mirror of https://github.com/desbma/shh
• vectordotdev/vector - A high-performance observability data pipeline.
• tailscale/pam - An experimental, work-in-progress PAM module for Tailscale
• extrawurst/gitui - Blazing 💥 fast terminal-ui for git written in rust 🦀
• mbround18/valheim-docker - Valheim Docker powered by Odin. The Valheim dedicated gameserver manager which is designed with resiliency in mind by providing automatic updates, world backup support, and a user friendly cli interfa
• ReFirmLabs/binwalk - Firmware Analysis Tool

SCSS

• slatedocs/slate - Beautiful static documentation for your API

Sass

• dotfiles/dotfiles.github.com - Your unofficial guide to doing dotfiles on GitHub.

Shell

• RiskBasedPrioritization/RiskBasedPrioritization.github.io -
• SteamDeckHomebrew/decky-installer - Installer for decky loader
• LePresidente/docker-nginx-proxy-manager - Docker container for Nginx Proxy Manager
• megabyte-labs/install.doctor - A glorious combination of application / theme settings and a performant cross-platform, desktop-oriented software suite.
• e-m-b-a/emba - EMBA - The firmware security analyzer
• alexmyczko/ruptime - poor man’s ruptime
• devcontainers/templates - Repository for Dev Container Templates that are managed by Dev Container spec maintainers. See https://github.com/devcontainers/template-starter to create your own!
• lukechilds/zsh-better-npm-completion - Better completion for npm
• unpoller/dashboards - UniFi Poller Grafana Dashboards
• pixta-dev/repository-mirroring-action - A GitHub Action for mirroring a repository to another repository
• fieu/discord.sh - Write-only command-line Discord webhooks integration written in 100% Bash script
• wei/git-sync - 🔃 A GitHub Action for syncing between two independent repositories using force push
• dokku/dokku - A docker-powered PaaS that helps you build and manage the lifecycle of applications
• nhs-england-tools/dotfiles - 🚀 Cross-platform dotfiles. A stepping stone to a Cloud-based development environment and a great Developer Experience
• awslabs/git-secrets - Prevents you from committing secrets and credentials into git repositories
• trinitor/CVE-Vulnerability-Information-Downloader - Downloads Information from NIST (CVSS), first.org (EPSS), and CISA (Exploited Vulnerabilities) and combines them into one list. Reports from vulnerability scanners like OpenVAS can be enriched with th
• gmatuz/cve-scanner-exploiting-pocs -
• superfly/fly-pr-review-apps - Github Action for PR Review Apps on Fly.io
• tailscale/codespace - Experimenting with codespaces
• anandslab/docker-traefik - Docker media and home server stack with Docker Compose, Traefik, Swarm Mode, Google OAuth2/Authelia, and LetsEncrypt
• unifi-utilities/unifios-utilities - A collection of enhancements for UnifiOS based devices
• dockserver/dockserver - Docker + Traefik with Authelia and Cloudflare Protection
• berry2012/kubernetes-the-hard-way-on-aws - Setup Kubernetes the hard way on AWS
• zplug/zplug - 🌺 A next-generation plugin manager for zsh
• machupicchubeta/laptop -
• aquasecurity/trivy-action - Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities
• SierraSoftworks/tailscale-udm - Run Tailscale on your Unifi Dream Machine
• hackersarcade/Reaper-VM - An installation script that helps you instantly setup a reverse engineering environment.
• itzg/docker-minecraft-bedrock-server - Containerized Minecraft Bedrock Dedicated Server with selectable version
• DiscordHooks/travis-ci-discord-webhook - ⛓ Here's your serverless solution for sending build status from Travis CI to Discord as webhooks.
• acmesh-official/acme.sh - A pure Unix shell script implementing ACME client protocol
• frozenfoxx/terraform-crawl-linode - Deploy a DCSS server in Linode
• super-linter/super-linter - Combination of multiple linters to run as a GitHub Action or standalone
• toniblyx/my-arsenal-of-aws-security-tools - List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
• adafruit/Adafruit_CircuitPython_Bundle - A bundle of useful CircuitPython libraries ready to use from the filesystem.
• SteveMcGrath/docker-nessus_scanner - Nessus Scanner Docker Image
• stevejenkins/unifi-linux-utils - Helpful Linux / Unix scripts for admins of Ubiquiti (UBNT) UniFi wireless products
• EliasKotlyar/Xiaomi-Dafang-Hacks -
• pi-hole/PADD - PADD (formerly Chronometer2) is a more expansive version of the original chronometer.sh that is included with Pi-Hole. PADD provides in-depth information about your Pi-hole.
• gbevan/ubuntu-foreman - Docker image with Ubuntu hosted Puppet Foreman
• gsemet/ansible-rpi-pihole - Setup your Raspberry Pi as Pi-Hole, WITHOUT WIFI settings (Ethernet only)
• dustin-decker/talks -
• DCHHV/kali-live-build-config - Kali Linux ™ build tool targeted for Hardware Hacking tools
• mrworf/plexupdate - Plex Update script to simplify the life of Linux Plex Media Server users.
• PagerDuty/security-training - Public version of PagerDuty's employee security training courses.
• paxtonhare/demo-magic - A handy shell script that enables you to write repeatable demos in a bash environment.
• speed47/spectre-meltdown-checker - Reptar, Downfall, Zenbleed, ZombieLoad, RIDL, Fallout, Foreshadow, Spectre, Meltdown vulnerability/mitigation checker for Linux & BSD
• walokra/docker-ansible-playbook - Docker Image of Ansible for executing ansible-playbook command against an externally mounted set of Ansible playbooks
• pi-hole/docker-pi-hole - Pi-hole in a docker container
• plexguide/PlexGuide.com - PlexGuide is a comprehensive Docker container management solution designed for Ubuntu & Debian OS. While it specializes in deploying media server applications like Plex, the platform incorporates Trae
• wazuh/wazuh-docker - Wazuh - Docker containers
• Hexxeh/rpi-update - An easier way to update the firmware of your Raspberry Pi
• jpetazzo/nsenter -
• ohmyzsh/ohmyzsh - 🙃 A delightful community-driven (with 2,400+ contributors) framework for managing your zsh configuration. Includes 300+ optional plugins (rails, git, macOS, hub, docker, homebrew, node, php, python,
• deathbybandaid/piholeparser - Pi-Hole Compatible lists
• FusionAuth/security-scripts - Scripts built from our Guide to User Data Security
• pi-hole/pi-hole - A black hole for Internet advertisements
• holman/spaceman-diff - diff images from the command line
• brandonprry/wicked_cool_shell_scripts_2e - Full shell scripts for the second edition of Wicked Cool Shell Scripts
• overshard/docker-minecraft - An easy way to get a Minecraft server up and running using docker.
• kroonwijk/rpi-minecraft - An easy way to get a Minecraft server up and running using docker on a Raspberry Pi (ARM)
• int0x80/githump - Loot email addresses from commit entries
• OpenToAllCTF/pwnvm - Setup for a pwning VM
• docker/docker-bench-security - The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.
• flplv/ssh-allow-friend - A shell script to temporary allow ssh logins for friends
• docker-library/official-images - Primary source of truth for the Docker "Official Images" program
• CISOfy/lynis - Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
• Nyr/openvpn-install - OpenVPN road warrior installer for Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS and Fedora
• coreos/coreos-kubernetes - CoreOS Container Linux+Kubernetes documentation & Vagrant installers
• gpakosz/.tmux - 🇫🇷 Oh my tmux! My self-contained, pretty & versatile tmux configuration made with ❤️
• int0x80/anti-forensics - for the louise

Smarty

• plexinc/pms-docker - Plex Media Server Docker repo, for all your PMS docker needs.

Swift

• mastodon/mastodon-ios - Official iOS app for Mastodon
• exelban/stats - macOS system monitor in your menu bar
• toptal/gitignore.io - Create useful .gitignore files for your project

Text

• hagezi/dns-blocklists - DNS-Blocklists: For a better internet - keep the internet clean!

TypeScript

• meshtastic/web - Meshtastic Web Client
• kaakaa/slidev-resources-template - Template repository to manage and build slidev resources
• slidevjs/slidev - Presentation Slides for Developers
• actions/attest-build-provenance - Action for generating build provenance attestations for workflow artifacts
• vulncheck-oss/action - The VulnCheck Github Action
• koush/scrypted - Scrypted is a high performance video integration and automation platform
• ncipollo/release-action - An action which manages a github release
• wei/socialify - 💞 Socialify your project. 🌐 Share with the world!
• wei/pull - 🤖 Keep your forks up-to-date via automated PRs
• Lissy93/personal-security-checklist - 🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2024
• Lissy93/web-check - 🕵️‍♂️ All-in-one OSINT tool for analysing any website
• awslabs/threat-composer - A simple threat modeling tool to help humans to reduce time-to-value when threat modeling
• tailscale-dev/vscode-tailscale - VS Code extension for Tailscale
• caido/documentation - 📙 User documentation for Caido
• deepfence/ThreatMapper - Open Source Cloud Native Application Protection Platform (CNAPP)
• superfly/flyctl-actions - GitHub Action that wraps the flyctl
• conwnet/github1s - One second to read GitHub code with VS Code.
• coder/code-server - VS Code in the browser
• peaceiris/actions-hugo - GitHub Actions for Hugo ⚡️ Setup Hugo quickly and build your site fast. Hugo extended, Hugo Modules, Linux (Ubuntu), macOS, and Windows are supported.
• devhubapp/devhub - TweetDeck for GitHub - Filter Issues, Activities & Notifications - Web, Mobile & Desktop with 99% code sharing between them
• renovatebot/renovate - Home of the Renovate CLI: Cross-platform Dependency Automation by Mend.io
• zeshuaro/vscode-poetry - Python Poetry support for VS Code to manage Poetry commands
• SigNoz/signoz - SigNoz is an open-source observability platform native to OpenTelemetry with logs, traces and metrics in a single application. An open-source alternative to DataDog, NewRelic, etc. 🔥 🖥. 👉 Open sour
• joshbolduc/vscode-commitlint - commitlint integration for VS Code
• discord/discord-api-docs - Official Discord API Documentation
• amodm/ip-lookup - Free IP details lookup service, based on Cloudflare Workers
• jub0t/Mechon - Powerful tool to host, manage and deploy Discord bots in multiple languages. [work in progress].
• Midnight-Lizard/Midnight-Lizard - Сustom color schemes for all websites
• Skona27/is-even - SaaS platform for checking if number is even
• novuhq/novu - Open-Source Notification Platform. Embeddable Notification Center, E-mail, Push and Slack Integrations.
• doctorray117/minecraft-ondemand - Templates to deploy a serverless Minecraft Server on demand in AWS
• microsoft/vscode-python-devicesimulator - Device Simulator Express, a Microsoft Garage project
• peterthehan/create-discord-bot - A module-based Discord bot template.
• Androz2091/discord-backup - 📦 Complete framework to facilitate server backup using discord.js v13
• n8n-io/n8n - Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.
• member-counter/bot - Member Counter is a Discord bot which lets you display counts and other dynamic information in a channel name or topic
• Nightorn/Aldebaran - Aldebaran is a cross-platform (Discord and Revolt) multi-purposes bot which offers useful features to DiscordRPG players along with many commands of all kinds, from fun to utilities.
• httpcats/http.cat - 🐱 HTTP Cats API
• rafaelmaiolla/remote-vscode - A package that implements the Textmate's 'rmate' feature for Visual Studio Code.
• microsoft/vscode - Visual Studio Code

Vim Script

• neovim/neovim - Vim-fork focused on extensibility and usability
• johngrib/vim-game-code-break - Block-breaking game in vim 8.0
• amix/vimrc - The ultimate Vim configuration (vimrc)
• natw/keyboard_cat.vim - vim plugin for pretending like you can actually type

Vim Snippet

• machupicchubeta/dotfiles -

Vue

• bastienwirtz/homer - A very simple static homepage for your server.
• bourgeoisor/xivtodo - Dashboards, tailored checklists and tools for Final Fantasy XIV.
• TheSpaghettiDetective/obico-server - Obico is a community-built, open-source smart 3D printing platform used by makers, enthusiasts, and tinkerers around the world.

YARA

• JusticeRage/Manalyze - A static analyzer for PE executables.

License

To the extent possible under law, mauvehed has waived all copyright and related or neighboring rights to this work.