CVE-2026-63030 + CVE-2026-60137 exploit RCE chain.
PythonSecurity#cve#cve-2026-60137#cve-2026-63030#cve-scanning
293
+163 this week
Hidden gems: Security
Smaller projects (50 to 2,000 stars) growing fast relative to their size, with real activity behind the stars.
21 Hidden gem
1 2 A curated collection of REA and AI-assisted reverse engineering cases, projects, and ideas. Updated every four hours.
PythonSecurity#ai#awesome-list#rea#reverse-engineering245+135 this week3 PS5 firmware 14.10 kernel attack surface research - 62 Lua probes mapping syscalls, memory, networking, and exploit paths from userland
LuaSecurity133+61 this week4 EnigmaKeep is a offline encrypted password manager.
TypeScriptSecurity#encrypted-store#offline-password-manager#password-manager#password-safety89+39 this week5 THE MOST POWERFUL OFFENSIVE AI AGENT FOR PENTESTING , OSINT , AND ETHICAL HACKING
PythonSecurity#ai-bug-bounty#ai-bug-finder#ai-bug-reporter#ai-hacking110+43 this week6 Evidence-grounded repository audit CLI - deterministic scanner, MCP server, live dashboard, and a GitHub Action that posts PR diffs.
PythonSecurity#code-review#dependency-vulnerabilities#github-actions#mcp-server563+191 this week7 Small set of tools for helping with reverse engineering Linux drivers
ShellSecurity154+52 this week8 Rated, auto-refreshed list of decompiled, recompiled & reverse-engineered games: decomps, static recomps, source ports, engine remakes, browser ports.
PythonSecurity#awesome#awesome-list#decompilation#game-preservation1.7k+465 this week9 Overdrive, a PS5 homebrew game store with 1,800+ games.
C++Security#exfat#game-store#homebrew#jailbreak725+154 this week10 Curated reverse-engineering tools and learning resources for binaries, apps, firmware, formats, and protocols.
Security#awesome-list#binary-analysis#firmware#ghidra774+111 this week11 Native 100% ARM64 Android port of the 2007 cosmic gravity platformer with OpenGL ES 3.2, AAudio, Hor+ ultrawide, and touch controls.
C++Security#aaudio#android#arm64#game-preservation216+25 this week12 GhostTrack 中文汉化版 | OSINT 追踪工具（IP/手机号/用户名）· 逻辑零改动纯汉化 · 原项目 HunxByts/GhostTrack
PythonSecurity214+23 this week13 Agent-first reverse engineering for macOS, Windows and Linux: any ACP agent reads, renames and patches binaries, Android apps and GPU kernels next to you.
TypeScriptSecurity#acp#ai-agents#android#decompiler732+70 this week14 Forza Horizon (Xbox 360) natively on PC, rebuilt around the modern Horizon experience: shared online free roam, leaderboards and rivals, 120/144 fps, and a self-hostable online server.
PythonSecurity#decompilation#forza#forza-horizon#reverse-engineering211+20 this week15 625+59 this week16 A free office suite where your document is inside the link and easy to share. There's no account and nothing saved unless you choose.
TypeScriptSecurity#local-first#office-suite#privacy#cloudflare-workers420+34 this week17 基于 REA 深度拆解并高保真还原 Claude 官方桌面端 UI。还原 30 个独立 React 组件与 8 项硬核交互物理算法，附带 3000+ 行逆向分析手册。
TypeScriptSecurity#anthropic#audioworklet#claude#design-system1.2k+96 this week18 Real-time network traffic visualizer — see every connection your computer makes. Privacy-first, 100% local. / Visualiseur de trafic réseau en temps réel, 100% local.
PythonSecurity#cybersecurity#d3js#electron#fastapi397+21 this week19 535+26 this week20 800+27 this week21 ARTEX 한국어판 · AI 자율 침투 테스트 프레임워크(upstream: Autumn-27/ARTEX, AGPL-3.0)
GoSecurity#ai-agent#autonomous-agents#blue-team#cybersecurity1.7k+40 this week
Updated · 29,767 repositories tracked