Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Repository Index
47,133 repositories indexed
1–24 of 30 · Most stars
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
- static-analysis
- dynamic-analysis
- mobsf
- android-security
E-mails, subdomains and names Harvester - OSINT
Web path scanner
The Rogue Access Point Framework
- wifiphisher
- wifi
- rogue
- access-point
FakeNet-NG - Next Generation Dynamic Network Analysis Tool
- fakenet-ng
- traffic-redirection
- malware-analysis
- mandiant-flare
Extract and aggregate threat intelligence.
- ioc
- indicators-of-compromise
- threatintel
- threat-intelligence
Tor2web is an HTTP proxy software that enables access to Tor Hidden Services by mean of common web browsers
- twisted
- python
- proxy
- tor
HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.
- malware-analysis
- dynamic-analysis
- security
- linux
Defanged Indicator of Compromise (IOC) Extractor.
- ioc
- indicators-of-compromise
- library
- ioc-extractor
Raspberry PI-TIMOLO ( PI-TImelapse, MOtion, LOwLight ) uses RPI picamera and OpenCV for Remote Headless Security Monitoring using Motion Tracking, Rclone Auto Sync files with remote storage services. Auto Twilight Transitions and Low Light Camera Settings. Panoramic images using PanTiltHat and More. This project is featured on GitHub Awesome software.
- opencv
- pi-camera
- python
- lowlight
Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools
Minimal, consistent Python API for building integrations with malware sandboxes.
JWT authentication for Pyramid
Framework agnostic set of sqlalchemy classes that make building applications that require permissions an easy task.
- python
- pyramid
- flask
- sqlalchemy
An ICAP Server with yara scanner for URL and content.
- python
- icap-server
- yara
- malware-analysis
Cryptographic Dataset Generation & Modelling Framework
stacked authentication policies for pyramid
Create n-grams of wordlists based on words, characters, or charsets to use in offline password attacks and data analysis
- hashcat
- jtr
- mdxfind
- ngram
Session based authentication and role based security for a Pyramid web application.
Multi-head SSH honeypot system.
Prompt-injection firewall for LLM applications — 33 input detectors, 9 output scanners, federated ed25519-signed threat-intel feed. Apache 2.0, 1040 tests, F1 96.0% with 0% false positives. Docker, GitHub Action, LangChain/LlamaIndex/CrewAI integrations.
- agentic-ai
- ai-safety
- fastapi
- langchain
Deterministic quality scorer for AI agent instruction files — 8-dimension scoring with security, multi-format (SKILL.md, CLAUDE.md, .cursorrules, AGENTS.md), anti-gaming detection, zero dependencies
- autoresearch
- claude-code
- cli
- developer-tools
A script to automate the creation of cloud infrastructure for hash cracking.
- redteam-infrastructure
- redteaming
- pentest-tool
- password-cracker