magic-wormhole/magic-wormhole
get things from one computer to another, safely
Running commentary
Checking recent Hacker News mentions…
A star delta has been computed for 62,678 of 63,382 tracked repositories in this period, and only those can be ranked in it.
A repository missing here has not been measured far enough back yet. That does not mean it did not move.
Star counts measured between 02:16 and 17:24 (BKK).
get things from one computer to another, safely
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Open-Source Unified Vulnerability Management, DevSecOps & ASPM
The recursive internet scanner for hackers. 🧡
Inspect: A framework for large language model evaluations
Red-teaming and evaluation framework for AI agents, built around an OWASP-inspired ASI01–ASI10 taxonomy
Low-latency local speech-to-speech voice assistant with Ming-3.0-audio-tiny on AMD and Nvidia GPUs. Easy setup on Windows and Linux
AI-powered bug bounty hunting toolkit that works with or without subscription.
AI-Powered Dark Web OSINT Tool
Google Chromium, sans integration with Google
🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Automatic SQL injection and database takeover tool
E-mails, subdomains and names Harvester - OSINT
High fidelity detection mechanism for node2shell (CVE-2026-111497)
AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.
The Python Risk Identification Tool for generative AI (PyRIT) is an open source framework built to empower security professionals and engineers to proactively identify risks in generative AI systems.
Collection of many countries websites consolidating their main official numbers in easy to read slides
🕵️♂️ (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a single Email/Username. Analyzes 2720+ actively maintained scan vectors (210+ email / 2510+ username) for security research, investigations, and digital footprinting.
Security Scanner for Agent Skills
NeMo Guardrails is an open-source toolkit for easily adding programmable guardrails to LLM-based conversational systems.
Looking Ahead: Modeling Future Evolution in Autoregressive Video Generation
Malware Configuration And Payload Extraction
基于dsh web实现的多种模式，目的是服务于redteam进行授权的安全研究，覆盖渗透测试、红队评估、代码审计等范围领域，请勿用于非法行为。（允许二开，赋予模块各位自己的业务逻辑，方法论只有自己熟练的才好用，好的方法论=好的生态）
Autonomous Hacking Agent for Red Team
Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.
开源的泛拉丁与泛中日韩像素字体，黑体风格
Best DDoS Attack Script Python3, (Cyber / DDos) Attack With 60 Methods
Showing 30 of 492 repositories
Running commentary
Linked from Hacker News and Reddit in the last 7 days, newest first. Our count, not GitHub’s.
