Bandit is a tool designed to find common security issues in Python code.
- linter
- bandit
- security-tools
- security-scanner
Repository Index
47,133 repositories indexed
49–72 of 341 · Most stars
Trail of Bits skills for security research, vulnerability detection, and audit workflows
Multi-Cloud Security Auditing Tool
Automated Adversary Emulation Platform
- adversary-emulation
- caldera
- security-automation
- red-team
Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.
- network-security
- selfhosted
- wifi-network
- wifi-security
Securely and anonymously share files, host websites, and chat with friends using the Tor network
- tor
- file-sharing
- onionshare
- onion-service
Infection Monkey - An open-source adversary emulation platform
- penetration-testing
- security-tools
- security-automation
- infection-monkey
CTFs as you need them
A extendable, replaceable Python algorithmic backtest && trading framework supporting multiple securities
An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.
Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/
An all-in-one hacking tool to remotely take over Android devices.
- adb
- android
- android-debug-bridge
- cybersecurity
Scanning APK file for URIs, endpoints & secrets.
- mobile-security
- android-security
- reverse-engineering
- bugbounty
Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.
Dark Web OSINT Tool
- tor
- tor-network
- deepweb
- dark-web
w3af: web application attack and audit framework, the open source web vulnerability scanner.
The Leading Security Assessment Framework for Android.
A python script that finds endpoints in JavaScript files
- infosec
- endpoints
SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
- bro
- scans
- nmap
- network
pandas on AWS - Easy integration with Athena, Glue, Redshift, Timestream, Neptune, OpenSearch, QuickSight, Chime, CloudWatchLogs, DynamoDB, EMR, SecretManager, PostgreSQL, MySQL, SQLServer and S3 (Parquet, CSV, JSON and EXCEL).
A high performance offensive security tool for reconnaissance and vulnerability scanning
- reconnaissance
- scanner
- vulnerability-assessment
- vulnerability-scanner
CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool