Repositories list

• danielmiessler-SecLists

  Public
  SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

  PHP

  •

  MIT License

  •25k•0•0•0•Updated Dec 31, 2025Dec 31, 2025

• falcosecurity-falco

  Public
  Cloud Native Runtime Security

  C++

  •

  Apache License 2.0

  •973•0•0•1•Updated Dec 29, 2025Dec 29, 2025

• quickemu-project-quickemu

  Public
  Quickly create and run optimised Windows, macOS and Linux desktop virtual machines.

  Shell

  •

  MIT License

  •586•0•0•1•Updated Dec 28, 2025Dec 28, 2025

• joe-desimone-mongobleed

  Public
  JavaScript

  •125•0•0•0•Updated Dec 26, 2025Dec 26, 2025

• GeekMasher-security-queries

  Public
  CodeQL Security Queries

  CodeQL

  •

  MIT License

  •9•0•0•0•Updated Dec 25, 2025Dec 25, 2025

• MSCloudInternals-XDRInternals

  Public
  A PowerShell module for the Defender XDR portal

  PowerShell

  •

  MIT License

  •5•0•0•0•Updated Dec 24, 2025Dec 24, 2025

• hrbrmstr-cmu-ciso-dds-ddi

  Public
  Clone from codeberg.org

  Typst

  •

  Other

  •0•0•0•0•Updated Dec 20, 2025Dec 20, 2025

• Pinperepette-MacPersistenceChecker

  Public
  macOS persistence mechanism scanner with code signature verification and timeline tracking.

  Swift

  •

  MIT License

  •8•0•0•0•Updated Dec 20, 2025Dec 20, 2025

• cisagov-LME

  Public
  Logging Made Easy (LME) is a no cost, open source platform that centralizes log collection, enhances threat detection, and enables real-time alerting, helping small to medium-sized organizations secure their infrastructure. LME Docs can be found at https://cisagov.github.io/lme-docs/docs/

  Shell

  •

  Other

  •132•0•0•0•Updated Dec 18, 2025Dec 18, 2025

• jonny-jhnson-EventSight

  Public
  AI-powered Windows Event Log analyzer that learns from your feedback. Uses Claude AI with RAG to detect suspicious activity, improve accuracy over time, and share learnings across your team. CLI and MCP server interfaces.

  Python

  •

  MIT License

  •7•0•0•0•Updated Dec 18, 2025Dec 18, 2025

• goretk-redress

  Public
  Redress - A tool for analyzing stripped Go binaries

  Go

  •

  GNU Affero General Public License v3.0

  •65•0•0•0•Updated Dec 17, 2025Dec 17, 2025

• goretk-gore

  Public
  GoRE - Package gore is a library for analyzing Go binaries

  Go

  •

  GNU Affero General Public License v3.0

  •59•0•0•0•Updated Dec 17, 2025Dec 17, 2025

• CroodSolutions-CTRL-ESC-HOST

  Public
  CTRL-ESC-HOST is a project to organize knowledge and resources to empower better testing, knowledge-sharing, and awareness, as it relates to Escape-to-Host flaws.

  GNU General Public License v3.0

  •1•0•0•0•Updated Dec 17, 2025Dec 17, 2025

• SigmaHQ-sigma

  Public
  Generic Signature Format for SIEM Systems

  Python

  •

  Other

  •2.5k•0•0•3•Updated Dec 15, 2025Dec 15, 2025

• mvt-project-mvt

  Public
  MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.

  Python

  •

  Other

  •1.2k•0•0•1•Updated Dec 13, 2025Dec 13, 2025

• xdanx-open-klara

  Public
  Open KLara Project

  PHP

  •

  Other

  •143•0•0•0•Updated Dec 12, 2025Dec 12, 2025

• pshenok-server-survival

  Public
  Tower defense game that teaches cloud architecture. Build infrastructure, survive traffic, learn scaling.

  JavaScript

  •

  MIT License

  •449•0•0•0•Updated Dec 10, 2025Dec 10, 2025

• lsecqt-Find-AdminAccess

  Public
  This C# tool sprays for admin access over the entire domain

  C#

  •8•0•0•0•Updated Dec 7, 2025Dec 7, 2025

• zack0x01-vuln-app-CVE-2025-55182

  Public
  TypeScript

  •

  Other

  •7•0•0•0•Updated Dec 6, 2025Dec 6, 2025

• landlock-lsm-island

  Public
  Sandboxing tool powered by Landlock

  Rust

  •

  Apache License 2.0

  •8•0•0•0•Updated Dec 5, 2025Dec 5, 2025

• msanft-CVE-2025-55182

  Public
  Explanation and PoC for CVE-2025-55182

  TypeScript

  •184•0•0•0•Updated Dec 4, 2025Dec 4, 2025

• ejpir-CVE-2025-55182-poc

  Public
  CVE-2025-55182 POC

  JavaScript

  •208•0•0•0•Updated Dec 3, 2025Dec 3, 2025

• BadSamuraiDev-bs-lists

  Public
  Cybersecurity lists of TLDs, domains and URLs for threat hunting and posture policy (warn or block)

  MIT License

  •1•0•0•0•Updated Dec 3, 2025Dec 3, 2025

• Kicksecure-privleap

  Public
  Limited Privilege Escalation Framework

  Python

  •

  Other

  •4•0•0•0•Updated Dec 3, 2025Dec 3, 2025

• google-security-research

  Public
  This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.

  C

  •

  Apache License 2.0

  •509•1•0•0•Updated Dec 3, 2025Dec 3, 2025

• gadievron-raptor

  Public
  Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents, and skills, we configure the agent for adversarial thinking, and perform research or attack/defense operations.

  Python

  •

  MIT License

  •110•0•0•0•Updated Dec 2, 2025Dec 2, 2025

• monsieurPale-RSA-Backdoor

  Public
  Go

  •19•0•0•0•Updated Dec 1, 2025Dec 1, 2025

• carlospolop-PEASS-ng

  Public
  PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

  C#

  •

  Other

  •3.3k•0•0•0•Updated Dec 1, 2025Dec 1, 2025

• N1ckDunn-COBOLCodeSecurity

  Public
  COBOL code security review guidelines

  1•0•0•0•Updated Nov 29, 2025Nov 29, 2025

• AlchemicalChef-Safeguard

  Public
  online remediation and takeback platform

  C#

  •

  MIT License

  •1•0•0•0•Updated Nov 29, 2025Nov 29, 2025