47,133 repositories indexed
73–96 of 318 · Most stars
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
A high performance offensive security tool for reconnaissance and vulnerability scanning
CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
Collaborative forensic timeline analysis
Tool to look for several security related Android application vulnerabilities
Automated NoSQL database enumeration and web application exploitation tool.
Investigate malicious Windows logon by visualizing and analyzing Windows event log
A self-contained cryptographic library for Python
An open-source document parsing model with SOTA accuracy and speed, using an RSI loop during post-training.
Stop configuring your AI stack. Start using it. One command brings a complete pre-wired LLM stack with hundreds of services to explore.
Modern, privacy-friendly, and detailed web analytics that works without cookies or JS.
Safely pass trusted data to untrusted environments and back.
SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.
StreamAlert is a serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using datasources and alerting logic you define.
Create randomly insecure VMs
Repository for BLESS, an SSH Certificate Authority that runs as a AWS Lambda function
Automated Security Testing For REST API's
Phishing Campaign Toolkit
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
A fork and successor of the Sulley Fuzzing Framework
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
Bleeding edge django template focused on code quality and security.
IAM Least Privilege Policy Generator