Tools

infoslack/awesome-web-hacking

Curated list of web application security resources including books, tools, cheat sheets, labs, and courses for learning penetration testing and…

owasp/cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

wolfssl/wolfssl

The wolfSSL library is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3 and DTLS…

pyca/cryptography

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.

byt3l0rd/cve-2017-1000486

Python-based exploit for CVE-2020-1039909, a remote code execution vulnerability in Primefaces JSF. Executes arbitrary commands via padding oracle…

libssh/libssh-mirror

C library implementing the SSH protocol for secure remote access, authentication, and encrypted communication. Includes fuzzing support via OSS-Fuzz…

gchq/cyberchef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

google/fully-homomorphic-encryption

Homomorphic Encryption demos

carterperez-dev/cybersecurity-projects

Building 70 Projects ranging from beginner to advanced so anyone can — learn from, build upon, use as a reference, or even copy directly. Gamified…

glincker/sslx

A fast, modern alternative to OpenSSL's CLI - inspect, grade, and manage certificates from the terminal

ltb-project/self-service-password

Web interface to change and reset password in an LDAP directory

openssl/openssl

General purpose TLS and crypto library

sigstore/fulcio

Certificate authority issuing short-lived code-signing certificates tied to OpenID Connect identities, enabling verifiable software supply chain…

tls-attacker/tls-scanner

Automated TLS server and client configuration scanner for pentesters and researchers. Evaluates cipher suites, protocol versions, and security…

opennhp/opennhp

A lightweight, cryptography-powered, open-source toolkit built to enforce Zero Trust security for infrastructure, applications, and data in the…

jpaulmora/pyrit

The famous WPA precomputed cracker, Migrated from Google.

jedisct1/libsodium

A modern, portable, easy to use crypto library.

donalhighnecked528/yellowkey-bitlocker-cve-2026-45585

Manage BitLocker recovery keys, unlock encrypted drives, and monitor encryption status with this lightweight Windows utility.