Awesome CTF resources: curated list of Capture The Flag tools, platforms, frameworks, writeups and courses for beginner and experienced players 🚩
- Language
- Not specified
- Licence
- MIT
- Stars
- 819
- Last push
- 2026-10-30
- Indexed
- 2026-11-08
awesomeawesome-listcapture-the-flagcrackingcryptographyctfctf-resourcesctf-tools
Source: GitHub repository metadata.
Secret scanner for exposed Google Gemini API keys in JavaScript, source maps, Wayback snapshots and Android APKs. Validates keys, reports restrictions and bypasses.
- Language
- Python
- Licence
- MIT
- Stars
- 134
- Last push
- 2026-10-30
- Indexed
- 2026-11-08
ai-securityandroidapi-keyapi-keysapkbug-bountybugbountycredential-leak
Source: GitHub repository metadata.
An authoritative list of awesome devsecops tools with the help from community experiments and contributions.
- Language
- Not specified
- Licence
- CC0-1.0
- Stars
- 5,513
- Last push
- 2024-05-11
- Indexed
- 2026-11-08
devopsdevsecopspodcastthreat-intelligence
Source: GitHub repository metadata.
Collaborative Incident Response platform
- Language
- Shell
- Licence
- LGPL-3.0
- Stars
- 1,621
- Last push
- 2026-10-22
- Indexed
- 2026-11-08
csirt-toolingdigital-forensicsdigital-forensics-incident-responseforensicforensic-analysisforensic-toolsincident-responsepython
Source: GitHub repository metadata.
Forensics artefact collection tool for systems running Microsoft Windows
- Language
- C++
- Licence
- LGPL-2.1
- Stars
- 453
- Last push
- 2026-10-08
- Indexed
- 2026-11-08
collectiondfirincident-response
Source: GitHub repository metadata.
Digital Forensics Investigation Platform
- Language
- JavaScript
- Licence
- Not specified
- Stars
- 915
- Last push
- 2024-10-12
- Indexed
- 2026-11-08
artifactsdfirdigital-forensicsincident-responseparsersecurity
Source: GitHub repository metadata.
DFIRTrack - The Incident Response Tracking Application
- Language
- Python
- Licence
- Not specified
- Stars
- 539
- Last push
- 2026-01-13
- Indexed
- 2026-11-08
dfirdigital-forensicsincident-managementincident-responseincident-response-tooling
Source: GitHub repository metadata.
Load Windows Event Log (.evtx) files into Elasticsearch, or export them as JSON lines. Born on an offline threat hunt; rebuilt for Elasticsearch 9.
- Language
- Python
- Licence
- Apache-2.0
- Stars
- 122
- Last push
- 2026-10-26
- Indexed
- 2026-11-08
blue-teamdfirelasticsearchevtxforensicsincident-responselog-analysispython
Source: GitHub repository metadata.
Developer-focused security scanning platform: scans repos for secrets, vulnerable dependencies, insecure code, container/infra misconfig, API and smart-contract risks. CLI, HTTP API, and dashboard.
- Language
- TypeScript
- Licence
- MIT
- Stars
- 0
- Last push
- 2026-11-01
- Indexed
- 2026-11-08
clidependency-scanningdevsecopsdockeriac-securitysastsecret-scanningsecurity
Source: GitHub repository metadata.
🚀Optimizer for mobile applications
- Language
- Kotlin
- Licence
- Apache-2.0
- Stars
- 5,077
- Last push
- 2026-11-05
- Indexed
- 2026-11-08
androidbytecode-manipulationgradle-pluginoptimizerstatic-analysis
Source: GitHub repository metadata.
A native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps
- Language
- JavaScript
- Licence
- Not specified
- Stars
- 5,350
- Last push
- 2026-11-04
- Indexed
- 2026-11-08
aesasn1certificateciphercryptocryptographycsrhmac
Source: GitHub repository metadata.
A curated list of awesome Memory Forensics for DFIR
- Language
- Not specified
- Licence
- CC0-1.0
- Stars
- 579
- Last push
- 2026-10-20
- Indexed
- 2026-11-08
awesomeawesome-listdigital-forensicsdigital-forensics-incident-responseforensicsincident-responsemalwaremalware-analysis
Source: GitHub repository metadata.
The portal to the new, open Internet. ([I:b])
- Language
- TypeScript
- Licence
- AGPL-3.0
- Stars
- 1,589
- Last push
- 2026-11-06
- Indexed
- 2026-11-08
arweaveblockchainbrowser-extensioncryptocryptographydefidwebencryption
Source: GitHub repository metadata.
Bug bounty focused JavaScript security analysis for crawling web assets, source maps, and secret discovery
- Language
- Go
- Licence
- Apache-2.0
- Stars
- 66
- Last push
- 2026-10-16
- Indexed
- 2026-11-08
bug-bountyjavascript-securitysecret-detectionsecret-scanningsource-maps
Source: GitHub repository metadata.
A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
- Language
- Batchfile
- Licence
- Not specified
- Stars
- 487
- Last push
- 2021-02-21
- Indexed
- 2026-11-08
bashbatchcybersecuritydfirforensicsincident-responsemalwarenirsoft
Source: GitHub repository metadata.
Stop supply chain attacks before they reach your machine or CI pipeline.
- Language
- Python
- Licence
- Apache-2.0
- Stars
- 12
- Last push
- 2026-11-07
- Indexed
- 2026-11-08
cargoclicooldown-gatesdependency-scanninghomebrewnpmpypisecurity
Source: GitHub repository metadata.
Executable DevSecOps reference: API tests, CI gates, supply-chain evidence, Kubernetes policy, and incident response.
- Language
- Python
- Licence
- MIT
- Stars
- 61
- Last push
- 2026-10-26
- Indexed
- 2026-11-08
automationawesomechecklistcybersecuritydevsecopskubernetessecuritytechniques
Source: GitHub repository metadata.
A simple management tool for dnscrypt-proxy
- Language
- C#
- Licence
- MIT
- Stars
- 2,471
- Last push
- 2026-03-19
- Indexed
- 2026-11-08
cryptographydnsdnscryptdnscrypt-proxydnscrypt-proxy2mahappswindows
Source: GitHub repository metadata.
Agentic OSINT toolkit. Autonomous identity triangulation, 6-dimension cognitive profiling, breach analysis. CLI-first. 30+ platforms. 5 languages.
- Language
- Python
- Licence
- MIT
- Stars
- 293
- Last push
- 2026-11-07
- Indexed
- 2026-11-08
agentic-aiclicyber-securitycyber-threat-intelligencecybersecurity-toolsdeepseekdigital-forensicsidentity-intelligence
Source: GitHub repository metadata.
GitHub 코드의 보안 위험을 근거와 함께 확인하는 서비스
- Language
- Not specified
- Licence
- Not specified
- Stars
- 0
- Last push
- 2026-11-07
- Indexed
- 2026-11-08
application-securitydependency-scanningnextjssecret-detectionstatic-analysissupabasetypescript
Source: GitHub repository metadata.
What this index tells you
We collect selected public repository metadata through GitHub’s official API and store it on our server. This is not a complete index of GitHub. Categories come from discovery queries and topics; a “skills” or “plugins” result is not a verified installation format. We do not run or audit the projects listed here.
Check the original repository’s licence, installation instructions and maintenance history before using it. Stars do not establish security, and a recent push does not prove that a project works. GitHub may have newer information than our last indexed record.
Search is lexical, not an AI answer engine. Short words and spelling differences can affect matches. This site is independent of GitHub. Report a wrong category, stale result or removal request.