bestofgithub.devStars gained in the last 6 hours (history is still building up)
Reverse engineer anything with agents, from app behavior down to native binaries.
npm install -g rea-agentsdsh-go — DeepSeek Harness 装进口袋：手机本机运行，也能遥控你的电脑。
git clone https://github.com/ccch1mneyyy/dsh-Go.git在 dsh 里装上这个插件即可，无需登录、注册或填 API Key，就能使用包括 DeepSeek V4.1 Flash、Kimi K3 在内的前沿模型——完全免费，不限量。 All you do is install this plugin in dsh: no login, no sign-up, no API key — the frontier models are just there, DeepSeek V4.1 Flash and Kimi K3 among them. Completely free, with no usage cap.
git clone https://github.com/Ebony-Vinyl/dsh-our-free-model.gitDeepTutor: Lifelong Personalized Tutoring. https://deeptutor.info/.
git clone https://github.com/HKUDS/DeepTutor && cd DeepTutor && docker compose up -dThe design vocabulary for your coding agent. Steer with polish and bolder, review with critique and audit, catch AI slop before it ships.
npm install -g impeccableIndependent Auditing of AI Agents. Run by human or the agent itself, to answer the most crucial question in the AI Agent Economy. Is the agent doing what is supposed to do? With iFixAi you can have this answer in less than 120 seconds.
pipx install ifixai68 of 1,687 repositories
Bitcoin Core integration/staging tree
brew install bitcoinA collection of various awesome lists for hackers, pentesters and security researchers
git clone https://github.com/Hack-with-Github/Awesome-Hacking.gitGhidra is a software reverse engineering (SRE) framework
brew install ghidraA list of useful payloads and bypass for Web Application Security and Pentest/CTF
git clone https://github.com/swisskyrepo/PayloadsAllTheThings.gitALL IN ONE Hacking Tool For Hackers
git clone https://github.com/Z4nzu/hackingtool && cd hackingtool && docker compose up -dA spy satellite simulator in your browser, except the data is real. Live open source spatial intelligence on a photorealistic 3D globe.
git clone https://github.com/bilawalsidhu/gods-eye-view && cd gods-eye-view && docker compose up -d"rsync for cloud storage" - Google Drive, S3, Dropbox, Backblaze B2, One Drive, Swift, Hubic, Wasabi, Google Cloud Storage, Azure Blob, Azure Files, Yandex Files
brew install rcloneDebloat any Android or Google TV over Wi-Fi and get an Apple TV-style home.
git clone https://github.com/Gathin23/cleanyourtv.git🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
brew install --cask imhexAn open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
git clone https://github.com/x64dbg/x64dbg.gitOpenZeppelin Contracts is a library for secure smart contract development.
git clone https://github.com/OpenZeppelin/openzeppelin-contracts.gitThe Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
npm install cyberchefThe OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
git clone https://github.com/OWASP/CheatSheetSeries.gitNetwork-wide ads & trackers blocking DNS server
go install github.com/AdguardTeam/AdGuardHome@latestNuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
brew install nucleiComfortably monitor your network traffic 🕵️♂️
brew install sniffnet🕵️♂️ All-in-one OSINT tool for analysing any website
git clone https://github.com/lissy93/web-check && cd web-check && docker compose up -dSpacedrive is an open source cross-platform file explorer, powered by a virtual distributed filesystem written in Rust.
brew install --cask spacedriveOWASP Juice Shop: Probably the most modern and sophisticated insecure web application
git clone https://github.com/juice-shop/juice-shop.gitAn evolving how-to guide for securing a Linux server.
git clone https://github.com/imthenachoman/How-To-Secure-A-Linux-Server.git🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.
git clone https://github.com/StevenBlack/hosts.gitKeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.
brew install --cask keepassxcFind, verify, and analyze leaked credentials
brew install trufflehogSet up a personal VPN in the cloud
git clone https://github.com/trailofbits/algo.gitUNIX-like reverse engineering framework and command-line toolset
brew install radare2⚙️ NGINX config generator on steroids 💉
git clone https://github.com/digitalocean/nginxconfig.io.gitCommunity guide to securing and improving privacy on macOS.
git clone https://github.com/drduh/macOS-Security-and-Privacy-Guide.gitWazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
git clone https://github.com/wazuh/wazuh.gitDamn Vulnerable Web Application (DVWA)
git clone https://github.com/digininja/DVWA && cd DVWA && docker compose up -d🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
git clone https://github.com/lissy93/personal-security-checklist.gitWeighs the soul of incoming HTTP requests to stop AI crawlers
brew install anubisThe ZAP by Checkmarx Core project
git clone https://github.com/zaproxy/zaproxy.gitFree and Open Source Reverse Engineering Platform powered by rizin
brew install --cask cutterOpenVPN is an open source VPN daemon
git clone https://github.com/OpenVPN/openvpn.gitSimpleX - the first messaging network operating without user identifiers of any kind - 100% private by design! iOS, Android and desktop apps 📱!
git clone https://github.com/simplex-chat/simplex-chat.gitSource code for Hacker101.com - a free online web and mobile security class.
git clone https://github.com/Hacker0x01/hacker101.gitThe Rogue Access Point Framework
git clone https://github.com/wifiphisher/wifiphisher.gitCommunity curated list of templates for the nuclei engine to find security vulnerabilities.
git clone https://github.com/projectdiscovery/nuclei-templates.gitWeb path scanner
pipx install dirsearchManage your dotfiles across multiple diverse machines, securely.
brew install chezmoiA collection of awesome software, libraries, documents, books, resources and cools stuffs about security.
git clone https://github.com/sbilly/awesome-security.gitOpen-Source Phishing Toolkit
go get github.com/gophish/gophish🚀 An open and lightweight modification to Windows, designed to optimize performance, privacy and usability.
git clone https://github.com/Atlas-OS/Atlas.gitGet Android app updates straight from the source.
git clone https://github.com/ImranR98/Obtainium.gitMVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
pipx install mvtCryptomator for Windows, macOS, and Linux: Secure client-side encryption for your cloud storage, ensuring privacy and control over your data.
brew install --cask cryptomatorOSS-Fuzz - continuous fuzzing for open source software.
git clone https://github.com/google/oss-fuzz.gitA collection of hacking tools, resources and references to practice ethical hacking.
git clone https://github.com/sundowndev/hacker-roadmap.git一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
go get github.com/shadow1ng/fscanExploitation Framework for Embedded Devices
git clone https://github.com/threat9/routersploit && cd routersploit && docker compose up -dDOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
npm install dompurifyScapy: the Python-based interactive packet manipulation program & library.
pipx install scapy面向开发人员梳理的代码安全指南
git clone https://github.com/Tencent/secguide.gitAutomated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
git clone https://github.com/1N3/Sn1per && cd Sn1per && docker compose up -dCommunity guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.
git clone https://github.com/drduh/YubiKey-Guide.git一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档
git clone https://github.com/chaitin/xray.gitTink is a multi-language, cross-platform, open source library that provides cryptographic APIs that are secure, easy to use correctly, and hard(er) to misuse.
git clone https://github.com/tink-crypto/tink.gitThe best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.
git clone https://github.com/jason5ng32/MyIP && cd MyIP && docker compose up -dAgent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
brew install vulsA curated list of CTF frameworks, libraries, resources and softwares
git clone https://github.com/apsdehal/awesome-ctf.gitUniversal Radio Hacker: Investigate Wireless Protocols Like A Boss
brew install urhFree cross-platform password manager compatible with KeePass
brew install --cask keewebOpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.
git clone https://github.com/evilsocket/opensnitch.git404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目
git clone https://github.com/knownsec/404StarLink.gitFirefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening
git clone https://github.com/arkenfox/user.js.gitRated, auto-refreshed list of decompiled, recompiled & reverse-engineered games: decomps, static recomps, source ports, engine remakes, browser ports.
git clone https://github.com/SubmitGame/awesome-decomp-games.gitTake the ads, tracking and clutter out of your Fire TV over ADB, no root. Every step can be undone. Comes with its own open-source home screen.
git clone https://github.com/humblemuzzu/dumbtv.gitDebloat your Android TV, install apps, browse and transfer files on it, all from your phone. Under 3 MB, no tracking, no root, no PC.
git clone https://github.com/man15h/tellyscope.git