A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
- security-audit
- penetration-testing
- penetration-test
- virtual-hosts
47,133 repositories indexed
121–144 of 318 · Most stars
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
Coordinate Claude, Codex and Cursor windows with shared tasks, acknowledgements, prechecks, parallel tests, source-bound proofs and independent review. Built-in skills recall lessons, simplify code and forecast work. Track progress, decisions and evidence in a bilingual local dashboard, with MCP plugins. Browse skills and verified security audits.
A modular vulnerability scanner with automatic report generation capabilities.
A collection of fascinating and bizarre Censys Search Queries
NFStream: a Flexible Network Data Analysis Framework.
Hercules is the world’s first open-source testing agent, enabling UI, API, Security, Accessibility, and Visual validations – all without code or maintenance. Automate testing effortlessly and let Hercules handle the heavy lifting! ⚡
Easily configure macOS security settings from the terminal.
NGINX configuration static analyzer
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
A pure Python HTML5 parser that just works. No C extensions to compile. No system dependencies to install. No complex API to learn.
An information security preparedness tool to do adversarial simulation.
IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction
A Game of Hackers (CTF Scoreboard & Game Manager)
A Unix, Windows, Raspberry Pi Object Speed Camera using python3, opencv, video streaming, motion tracking. Includes a Standalone Web Server , Image Search using opencv template match and a whiptail Admin Menu Interface Includes picam and webcam Plugins for motion track security camera configuration including rclone sync scripts.
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).
in-toto is a framework to protect supply chain integrity.
Python low-interaction honeyclient
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
Find exploit tool
A curated list of awesome Fuzzing(or Fuzz Testing) for software security
TranslatedOne-click replacement of the built-in prompts of three AI clients: DSH / WorkBuddy / ZCode. Double-click to use, self-verifiable, backup before changes, one-click restore. v8.29: card-style interface, activation code required to log in, automatic DSH plugin injection, official group verification. Single-file exe with no Python installation needed, completely free and open source.
TranslatedDeepSeek Harness integrated armor-breaking security analysis plugin: aggregating all domains of Android · Web · Native · Protocol · Malware · AI-Security (9 bundles + 1 preset)