This is your work, valued
one_gadget. The best tool for finding one gadget RCE in libc.so.6
★ 2.3kseccomp-tools. Provide powerful tools for seccomp analysis
★ 1.1kkvm-kernel-example. Examples for: Learning KVM - implement your own kernel
★ 384ctf-writeups. Collection of scripts and writeups
★ 321heapinfo. An interactive memory info for pwning / exploiting
★ 98defcon-2017-tools. DEFCON CTF 2017 Stuff of Shit by HITCON
★ 96gdb-ruby. It's time for Ruby lovers to use Ruby in gdb, and gdb in Ruby!
★ 65rbelftools. ELF parser library implemented in pure Ruby!
★ 46honest. Are your installed packages _really_ the same as you saw on GitHub?
★ 23crabstone. crabstone is a Ruby binding to the capstone disassembly library by Nguyen Anh Quynh
★ 19hitcon-2021-chaos. C++
★ 13memory_io. Read/Write structures in memory easily
★ 10dotfiles. Python
★ 5ayu-dark.pry-theme. Let your pry look much better!
★ 4codebook. C++
★ 3youtubeblock. Don't like YouTube's recommendation? Just skip it!
★ 3hitcon-training. Ruby
★ 1meow. Change all images to cats
★ 1how2heap. A repository for learning various heap exploitation techniques.
★ 1scriptc. TypeScript-to-Native Compiler
★ 2.6kctf-skills. Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more
★ 2.9kcodebase-memory-mcp. High-performance code intelligence MCP server. Indexes codebases into a persistent knowledge graph — average repo in milliseconds. 158 languages, sub-ms queries, 99% fewer tokens. Single static binary, zero dependencies.
★ 37kandrej-karpathy-skills. A single CLAUDE.md file to improve Claude Code behavior, derived from Andrej Karpathy's observations on LLM coding pitfalls.
★ 198kAnthropic-Cybersecurity-Skills. 817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
★ 27kMemeTalk. 輸入文字或圖片,LLM會找出適合的梗圖來回覆你
★ 59gem_badge. A lightweight tool that allows you to showcase the download count of your Ruby gem using shield.io.
★ 21Second-Me. Train your AI self, amplify you, bridge the world
★ 16kkillport. A command-line tool to kill processes and containers running on specified ports.
★ 1.8ktailwindcss-animate. A Tailwind CSS plugin for creating beautiful animations
★ 3kstimulus. A modest JavaScript framework for the HTML you already have
★ 13kinitial_avatar. Create Gmail like text avatars for profile pictures using SVG.
★ 37rails_admin. RailsAdmin is a Rails engine that provides an easy-to-use interface for managing your data
★ 8krails7-on-docker. Working Rails 7 demo application running in Docker. No node.js or webpack required.
★ 288docker-pi-hole. The official Pi-hole Docker image from pi-hole.net
★ 11kVirtualTableDump. VTable dumper for IDA 7.7+
★ 19dreamberd-interpreter. Interpreter for the perfect programming language
★ 447zephyr. Primary Git Repository for the Zephyr Project. Zephyr is a new generation, scalable, optimized, secure RTOS for multiple hardware architectures.
★ 16kGulfOfMexico. perfect programming language
★ 14kshadPS4. PlayStation 4 emulator for Windows, Linux, macOS and FreeBSD written in C++
★ 32ksshamble. SSHamble: Unexpected Exposures in SSH
★ 1.2kawesome-rust. A curated list of Rust code and resources.
★ 59ktop-github-users. Check your ranking in GitHub! Don't forget to star ⭐ this repository.
★ 4.9kchangedetection.io. Best and simplest tool for website change detection, web page monitoring, and website change alerts. Perfect for tracking content changes, price drops, restock alerts, and website defacement monitoring—all for free or enjoy our SaaS plan!
★ 33krich. Rich is a Python library for rich text and beautiful formatting in the terminal.
★ 57ktextual. The lean application framework for Python. Build sophisticated user interfaces with a simple Python API. Run your apps in the terminal and a web browser.
★ 37kelixir. The Elixir Cross Referencer
★ 1.2khanami. A flexible framework for maintainable Ruby apps
★ 6.4kbrowser-learning. Games and exercises to learn about browsers and security
★ 13pi-hole. A black hole for Internet advertisements
★ 60kpkgx. Run Anything
★ 9.9kpawnyable. PAWNYABLE!
★ 243developer. the first library to let you embed a developer agent in your own app!
★ 12kthe-algorithm. Source code for the X Recommendation Algorithm
★ 74kChatGPT. Reverse engineered ChatGPT API
★ 28kantlr4. ANTLR (ANother Tool for Language Recognition) is a powerful parser generator for reading, processing, executing, or translating structured text or binary files.
★ 19klemmeknow. The fastest way to identify anything!
★ 1.1kscrcpy. Display and control your Android device
★ 147kweggli. weggli is a fast and robust semantic search tool for C and C++ codebases. It is designed to help security researchers identify interesting functionality in large codebases.
★ 2.5kpyscript. An open source platform for Python in the browser. https://pyscript.net Docs: https://docs.pyscript.net/ Try it: https://pyscript.com/ Community: https://discord.gg/HxvBtukrg2
★ 19kvinix. Vinix is an effort to write a modern, fast, and useful operating system in the V programming language
★ 2.2kv. Simple, fast, safe, compiled language for developing maintainable software. Compiles itself in <1s with zero library dependencies. Supports automatic C => V translation. https://vlang.io
★ 38kcli. 🥧 HTTPie CLI — modern, user-friendly command-line HTTP client for the API era. JSON support, colors, sessions, downloads, plugins & more.
★ 38kpersonal-security-checklist. 🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
★ 22kBITB. Browser In The Browser (BITB) Templates
★ 2.9kconcurrent-ruby. Modern concurrency tools including agents, futures, promises, thread pools, supervisors, and more. Inspired by Erlang, Clojure, Scala, Go, Java, JavaScript, and classic concurrency patterns.
★ 5.8ktenderjit. JIT for Ruby that is written in Ruby
★ 427asmrepl. A REPL for x86-64 assembly language
★ 871fisk. A pure Ruby assembler
★ 311google_calendar. A minimal wrapper around the Google Calendar API
★ 318icisc_rnnfuzz. The tools used to train the models used for the ICISC paper "Recurrent neural networks for fuzz testing web browsers"
★ 27DirtyPipe-Android. Dirty Pipe root exploit for Android (Pixel 6)
★ 852CVE-2022-25636. CVE-2022-25636
★ 436autocomplete. IDE-style autocomplete for your existing terminal & shell
★ 25kfig. Public issue tracker for Fig.
★ 2kterminal-table. Ruby ASCII Table Generator, simple and feature rich.
★ 1.6kbfs. A breadth-first version of the UNIX find command
★ 1.3kiree. A retargetable MLIR-based machine learning compiler and runtime toolkit.
★ 3.9kslack-ruby-client. A ruby client for the Slack Web and Event APIs.
★ 1.3krhizome. A JIT for Ruby, implemented in pure Ruby
★ 821kitty. If you live in the terminal, kitty is made for you! Cross-platform, fast, feature-rich, GPU based.
★ 34kbroot. A new way to see and navigate directory trees : https://dystroy.org/broot
★ 13kpocketlang. A lightweight, fast embeddable scripting language.
★ 1.5ktailwindcss. A utility-first CSS framework for rapid UI development.
★ 96kpspy. Monitor linux processes without root permissions
★ 6.1kduf. Disk Usage/Free Utility - a better 'df' alternative
★ 15kprocs. A modern replacement for ps written in Rust
★ 6.1kcheat.sh. the only cheat sheet you need
★ 42knushell. A new type of shell
★ 40kslidev. Presentation Slides for Developers
★ 48kruby-enum. A handy way to define enums in Ruby.
★ 189sd. Intuitive find & replace CLI (sed alternative)
★ 7.3knotcurses. blingful character graphics/TUI library. definitely not curses.
★ 4.6koutrun. Execute a local command using the processing power of another Linux machine.
★ 3.1kfmt. A modern formatting library
★ 24kMagicMirror. MagicMirror² is an open source modular smart mirror platform. With a growing list of installable modules, the MagicMirror² allows you to convert your hallway or bathroom mirror into your personal assistant.
★ 24krpitx. RF transmitter for Raspberry Pi
★ 4.5kr4cppp. Rust for C++ programmers
★ 3.9kseeing_is_believing. Displays the results of every line of code in your file
★ 1.3kytop. A TUI system monitor written in Rust
★ 2.2kbingrep. like ~~grep~~ UBER, but for binaries
★ 1.8kfd. A simple, fast and user-friendly alternative to 'find'
★ 44kpueue. :stars: Manage your shell commands.
★ 6.3kaction-update-license-year. GitHub Action that in a pull request updates the copyright year(s) in your license file.
★ 70OpenClubhouse. A third-part web application based on flask to play Clubhouse audio.
★ 1.1kkernelpwn. kernel-pwn and writeup collection
★ 725My-Presentation-Slides. Collections of Orange Tsai's public presentation slides.
★ 761apex_dqn_pytorch. Ape-x DQN implementation on Pikachu Volleyball
★ 51multiagent-competition. Code for the paper "Emergent Complexity via Multi-agent Competition"
★ 836pikachu-volleyball. Pikachu Volleyball reimplemented in JavaScript by reverse engineering the original game
★ 1.1krawdrawandroid. Build android apps without any java, entirely in C and Make
★ 4.3kdeskreen. Deskreen turns any device with a web browser into a secondary screen for your computer. ⭐️ Star to support our work!
★ 21kwebsocat. Command-line client for WebSockets, like netcat (or curl) for ws:// with advanced socat-like functions
★ 8.6klumina_server. Local server for IDA Lumina feature
★ 193the-super-tiny-compiler. :snowman: Possibly the smallest compiler ever
★ 29kanbox. Anbox is a container-based approach to boot a full Android system on a regular GNU/Linux system
★ 9.1kGopherus. This tool generates gopher link for exploiting SSRF and gaining RCE in various servers
★ 3.4kkhal. :calendar: CLI calendar application
★ 3krehex. Reverse Engineers' Hex Editor
★ 2.5kgron. Make JSON greppable!
★ 14krust-raspberrypi-OS-tutorials. :books: Learn to write an embedded OS in Rust :crab:
★ 15kdelta. A syntax-highlighting pager for git, diff, grep, rg --json, and blame output
★ 32kvmlinux-to-elf. A tool to recover a fully analyzable .ELF from a raw kernel, through extracting the kernel symbol table (kallsyms)
★ 1.8kwtfpython. What the f*ck Python? 😱
★ 37kgdb-frontend. ☕ GDBFrontend is an easy, flexible and extensible gui debugger.
★ 3kraspap-webgui. The easiest, full-featured wireless router setup for Debian-based devices. Period.
★ 5.2kWiringPi. The arguably fastest GPIO Library for the Raspberry Pi
★ 3.3kruby_jard. Just Another Ruby Debugger. Provide a rich Terminal UI that visualizes everything your need, navigates your program with pleasure, stops at matter places only, reduces manual and mental efforts. You can now focus on real debugging.
★ 842GitTools. A repository with 3 tools for pwn'ing websites with .git repositories available
★ 4.2kqiling. A True Instrumentable Binary Emulation Framework
★ 6kdust. A more intuitive version of du in rust
★ 12kpwn2own2020. Compromising the macOS Kernel through Safari by Chaining Six Vulnerabilities
★ 414Ropper. Display information about files in different file formats and find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64, MIPS, PowerPC, SPARC64). For disassembly ropper uses the awesome Capstone Framework.
★ 2.1kidawasm. IDA Pro loader and processor modules for WebAssembly
★ 372pikachu-volleyball-p2p-online. Pikachu Volleyball peer-to-peer online via WebRTC data channels
★ 342abyss. abyss - augmentation of Hexrays decompiler output
★ 346intrigue-ident. Application and Service Fingerprinting
★ 134boost_bandwidth_via_speedtest. Python
★ 139p0tools. Project Zero Docs and Tools
★ 849UTM. Virtual machines for iOS and macOS
★ 35ktrapcc. Computing with traps
★ 1.3kfast_double_parser. Fast function to parse strings into double (binary64) floating-point values, enforces the RFC 7159 (JSON standard) grammar: 4x faster than strtod
★ 670structurae. Data structures for high-performance JavaScript applications.
★ 730moonjit. Just-In-Time Compiler for the Lua Programming language. Fork of LuaJIT to continue development. This project does not have an active maintainer, see https://twitter.com/siddhesh_p/status/1308594269502885889?s=20 for more detail.
★ 514COVID-19. Novel Coronavirus (COVID-19) Cases, provided by JHU CSSE
★ 29kdarkshadow. :trollface: Gem built for simple rapid exploit development using ruby. :trollface:
★ 1ferrum. Headless Chrome Ruby API
★ 2kbrew. 🍺 The Package Manager for Everywhere
★ 49kmodern-cpp-tutorial. 📚 Modern C++ Tutorial: C++11 to C++26 On the Fly | https://changkun.de/modern-cpp/
★ 26kthor. Thor is a toolkit for building powerful command-line interfaces.
★ 5.3k8BQube. Codebook of NTU 8BQube by baluteshih, briansu, icube
★ 41rubocop-action. Lint your Ruby code in parallel to your builds
★ 79rspec-benchmark. Performance testing matchers for RSpec
★ 618tty-table. A flexible and intuitive table generator
★ 206tty-spinner. A terminal spinner for tasks that have non-deterministic time frame.
★ 439tty-reader. A set of methods for processing keyboard input in character, line and multiline modes.
★ 97tty-progressbar. Display a single or multiple progress bars in the terminal.
★ 435tty-markdown. Convert a markdown document or text into a terminal friendly output.
★ 327tty-file. File manipulation utility methods
★ 68tty-cursor. Terminal cursor movement and manipulation of cursor properties such as visibility
★ 78tty-box. Draw various frames and boxes in your terminal window
★ 193tty. Toolkit for developing sleek command line apps.
★ 2.5ktty-logger. A readable, structured and beautiful logging for the terminal
★ 293algorithms. Ruby algorithms and data structures. C extensions
★ 2.7ktmuxinator. Manage complex tmux sessions easily
★ 14kFIDL. A sane API for IDA Pro's decompiler. Useful for malware RE and vulnerability research
★ 465kernel-exploits. Some kernel exploits
★ 145kpatch. NOTICE: kpatch is deprecated
★ 1.7kHouse-of-Corrosion. A description of the "House of Corrosion" GLIBC heap exploitation technique.
★ 224lsix. Like "ls", but for images. Shows thumbnails in terminal using sixel graphics.
★ 4.2kvim-game-code-break. Block-breaking game in vim 8.0
★ 1.6kpwndock. A pwning environment, now on docker!
★ 18ipwndfu. open-source jailbreaking tool for many iOS devices
★ 7.4kKarta. Karta - source code assisted fast binary matching plugin for IDA
★ 908ysoserial.net. Deserialization payload generator for a variety of .NET formatters
★ 3.8kwebhook.site. ⚓️ Easily test HTTP webhooks with this handy tool that displays requests instantly.
★ 6.7kgraal. GraalVM compiles applications into native executables that start instantly, scale fast, and use fewer compute resources 🚀
★ 22kctf-script. Python
★ 1eng-practices. Google's Engineering Practices documentation
★ 23kGhIDA. Python
★ 815linux-kernel-module-rust. Framework for writing Linux kernel modules in safe Rust
★ 1.3kidapkg. Packages for IDA Pro (written in python but supports all)
★ 131hitcon2019. To share the material for presentation
★ 11HITCON-Badge-2019. HITCON electric badge for HITCON CMT 2019.
★ 77CCIP-Android. A Community Checkin with Interactivity Project for Android app
★ 196dc2019f-aoool-public. C++
★ 19aSiagaming. My Chrome and Safari exploit code + write-up repo
★ 533wireguard-monolithic-historical. Historical monolithic WireGuard repository, split into wireguard-tools, wireguard-linux, and wireguard-linux-compat.
★ 2.3kTabNine. AI Code Completions
★ 11kdbg-macro. A dbg(…) macro for C++
★ 3.2kAFLplusplus. The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!
★ 6.7kyard-doctest. Doctests from YARD examples
★ 11735C3_Modern_Windows_Userspace_Exploitation. Python
★ 152LazyFragmentationHeap. WCTF 2019 challenge
★ 103TPM2137. Migrated to Codeberg
★ 46yosys. Yosys Open SYnthesis Suite
★ 4.6kv86. x86 PC emulator and x86-to-wasm JIT, running in the browser
★ 23kzsh_for_beginners. Shell
★ 13icestorm. Project IceStorm - Lattice iCE40 FPGAs Bitstream Documentation (Reverse Engineered)
★ 1.2kmetasm. This is the main repository for metasm, a free assembler / disassembler / compiler written in ruby
★ 475Tool-Solutions. Scripts to build a wheel and a Docker image containing a complete ML framework stack, including dependencies, for AArch64 CPUs, as well as a selection of examples and benchmarks.
★ 274tslime.vim. Send command from vim to a running tmux session
★ 261strace. strace is a diagnostic, debugging and instructional userspace utility for Linux
★ 2.7khyperpwn. A hyper plugin to provide a flexible GDB GUI frontend with the help of GEF, pwndbg or peda
★ 639qemu-vm-escape. C
★ 286security. Some of my security stuff and vulnerabilities. Nothing advanced. More to come.
★ 865IDASkins. Advanced skinning plugin for IDA Pro
★ 935PayloadsAllTheThings. A list of useful payloads and bypass for Web Application Security and Pentest/CTF
★ 80kspectre-meltdown-checker. Reptar, Downfall, Zenbleed, ZombieLoad, RIDL, Fallout, Foreshadow, Spectre, Meltdown vulnerability/mitigation checker for Linux & BSD
★ 3.9kautotest. Autotest - Fully automated tests on Linux
★ 723Dell-Support-Assist-RCE-PoC. Python
★ 163pub. The pub command line tool
★ 1.1ktermshark. A terminal UI for tshark, inspired by Wireshark
★ 10kPySnooper. Never use print for debugging again
★ 17kgem5. The official repository for the gem5 computer-system architecture simulator.
★ 2.7ktiming-analysis. Python3 library for sophisticated timing attacks using Gaussian Mixture Model.
★ 22sudo_inject. [Linux] Two Privilege Escalation techniques abusing sudo token
★ 730ascii-zip. A deflate compressor that emits compressed data that is in the [A-Za-z0-9] ASCII byte range.
★ 177ai-notebooks. Some ipython notebooks implementing AI algorithms
★ 1.4kEvilClippy. A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.
★ 2.2k