Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Repository Index
47,133 repositories indexed
1–24 of 33 · Most stars
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
Find secrets with Gitleaks 🔑
Find, verify, and analyze leaked credentials
一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
Adversary Emulation Framework
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
Go security checker
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
syzkaller is an unsupervised coverage-guided kernel fuzzer
Cameradar hacks its way into RTSP videosurveillance cameras
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
A repository of sysmon configuration modules
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Security sensor for realtime threat detection and protection
Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish/Japanese. For authorized, defensive and detection use only. (upstream: Autumn-27/ARTEX, AGPL-3.0)
Quickly clone or backup massive amounts of org/users repositories into one directory - Supports GitHub, GitLab, Bitbucket, and more 🐇🥚
Database anonymization and test data management
ARTEX · AI autonomous penetration testing system (multi-agent LLM, Go + Next.js) · AI 自主渗透测试系统 · 百度 agent+ 攻防挑战赛冠军
Program to reverse Docker images into Dockerfiles
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
Galah: An LLM-powered web honeypot.
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.