Unknown
How to Track Fresh Exploits Directly in GitHub Repositories
Learn how to track fresh PoC exploits in GitHub repositories using nomi-sec/PoC-in-GitHub, understand real-world attack vectors, and stay ahead of critical vulnerabilities.
Security
28 projectsPenetration testing, cryptography, network security, and tooling for defenders and researchers.
Python
How to Check the Security of AI Services and Agents Using AI Infra Guard
AI-Infra-Guard is an open-source platform for securing AI services and agents. It scans AI infrastructure for CVEs, audits MCP servers and agent skills, and tests LLM resistance to jailbreaks.
Python
How I Delegated Google Dorking to Neural Network Agents
Delegating Google Dorking to neural network agents: a look at DorkAgent, a tool that automates search queries using Serper API and LLMs.
Rust
How to Turn a $5 Board into a Hardware Security Key
Turn a $5 RP2350 microcontroller board into a full-featured USB security token with FIDO2, OpenPGP, and post-quantum cryptography support.
Python
How to hide an archive in an audio spectrogram and find hidden data with one command
StegoForge combines steganography and steganalysis tools into one CLI with support for images, audio, video, documents, and network packets.
Python
Interactive Network Map and Vulnerability Scanner Based on L0p4Map
Tool combines ARP scanning, Nmap, and passive traffic monitoring with an interactive topology map for network audits.
Python
How to Confuse Vulnerability Scanners with Krawl
Krawl is a deception server that pretends to be a vulnerable web app, feeding scanners infinite trap pages and wasting their resources.
Python
How to Check MCP Servers for Hidden Threats and Backdoors
Open-source mcp-scanner audits MCP servers for hidden threats using YARA, LLM-as-judge, and Docker sandboxing.
Rust
How to Build a Private Surveillance Camera on Raspberry Pi Without Clouds and Subscriptions
Build a private surveillance camera on Raspberry Pi with end-to-end encryption and zero-trust architecture — no cloud subscriptions required.
Go
How to check Docker container security without extra headaches
DockerScan combines vulnerability scanning, secret detection, and configuration auditing in one fast Go-based tool for comprehensive container security checks.
HTML
How to Clean Traffic at DNS Level Without Bloated Filter Lists
Tired of managing dozens of blocklists? 1Hosts offers a lean alternative with just two versions covering ads, trackers, and phishing—available in dozens of formats.
Dart
AuthPass and Why the Good Old KeePass Got a New Lease on Life with Flutter
AuthPass brings a fresh look to KeePass with a unified Flutter client that works across Android, iOS, macOS, Windows, Linux, and the browser — all open source.
Go
How Google Checks Access Permissions for Billions of Users and What SpiceDB Has to Do With It
Google built Zanzibar for authorization at scale. Learn how SpiceDB, an open-source database inspired by it, handles permissions for billions of users.
Python
How Coldcard Firmware Is Structured and Why Developers Should Run Its Emulator on a PC
Coldcard firmware is fully open-source. Here's what's inside the repository, how reproducible builds work, and why running the emulator on your PC is worth it.
Rust
How to Run an AI Agent Locally Without Leaking Your SSH Keys
A look at Nono — a Rust-based sandboxing tool that isolates AI agents without containers, protecting SSH keys and cloud credentials while keeping terminal performance snappy.
TypeScript
CCleaner Replacement Without Ads and Telemetry — Exploring the Open-Source Kudu Utility
An open-source CCleaner alternative under MIT license that handles system maintenance and cleanup without ads, telemetry, or premium subscriptions.
HTML
How to Block Hundreds of Thousands of Phishing Sites with a Single Line of Code
Destroylist is an open threat intelligence project with 888k+ tracked domains and 180k verified phishing sites. Learn how to block them with a single line of code.
Python
Autonomous Hacker in a Docker Container: How Decepticon Changes the Game for Red Team
Decepticon is an autonomous Red Team agent that runs attack chains like a real pentester. It scored 98% on the XBOW benchmark and uses 16 specialized agents for different attack stages.
Shell
How to Keep Your Server from Becoming a Sitting Duck with konstruktoid's Hardening Scripts
Discover how to automate Ubuntu server hardening with konstruktoid's Shell scripts that leverage systemd isolation and CIS benchmarks to minimize attack surface.
Java
NFCGate: The Swiss Army Knife for NFC Research on Android
NFCGate is an open-source Android tool for capturing, analyzing, and relaying NFC traffic. Created by TU Darmstadt researchers, it's essential for security researchers.
Python
Andriller CE — Swiss Army Knife for Android Forensics
Andriller CE is a Python-based forensic toolkit for Android devices that extracts data, bypasses locks, and analyzes app backups including encrypted WhatsApp databases.
C
Capstone Engine — Your Universal Key to Understanding Machine Code
Capstone Engine is a powerful multi-architecture disassembly framework essential for reverse engineering, malware analysis, and binary security research.
Python
Ciphey: When a cipher reveals its secrets on its own in 3 seconds
Discover Ciphey, an automated decryption tool that identifies encryption types and decodes data in under 3 seconds using AI and NLP.
21,474
Python
openSquat: Open-Source Phishing Domain Detector
openSquat is a Python OSINT tool that detects phishing domains, typosquatting, IDN attacks, and lookalikes before attackers use them.
976