A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
Repository Index
47,133 repositories indexed
25–48 of 137 · Most stars
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
Go security checker
Bandit is a tool designed to find common security issues in Python code.
🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩💻
A static analysis security vulnerability scanner for Ruby on Rails applications
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
Infection Monkey - An open-source adversary emulation platform
Next generation web scanner
A collection of awesome security hardening guides, tools and other resources
syzkaller is an unsupervised coverage-guided kernel fuzzer
Open Source Cloud Native Application Protection Platform (CNAPP)
Cameradar hacks its way into RTSP videosurveillance cameras
Dark Web OSINT Tool
Hide secrets with invisible characters in plain text securely using passwords 🧙🏻♂️⭐
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
Automated NoSQL database enumeration and web application exploitation tool.
🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.
A repository of sysmon configuration modules
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Patch-level verification for Bundler
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
Security sensor for realtime threat detection and protection
Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish/Japanese. For authorized, defensive and detection use only. (upstream: Autumn-27/ARTEX, AGPL-3.0)