Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Repository Index
47,133 repositories indexed
1–24 of 28 · Most stars
[MLsys2026 Best Paper]: https://arxiv.org/abs/2506.08276. RAG on Everything with LEANN. Enjoy 97% storage savings while running a fast, accurate, and 100% private RAG application on your personal device.
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
Integrated set of Django applications addressing authentication, registration, account management as well as 3rd party (social) account authentication. 🔁 Mirror of https://codeberg.org/allauth/django-allauth/
SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
Automated Security Testing For REST API's
- security
- restapiautomation
- python
- owasp
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.
Digital Forensics artifact repository
A modular vulnerability scanner with automatic report generation capabilities.
- artemis
- pentesting
- security
- security-scanner
NFStream: a Flexible Network Data Analysis Framework.
- data-science
- data-analysis
- data-mining
- network-analysis
Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part of NCC Group).
- dfir
- dissect
- python
Generate smart and powerful wordlists
- wordlist
- password
- hacking-tool
- password-cracking
macOS (& ios) Artifact Parsing Tool
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
Tor2web is an HTTP proxy software that enables access to Tor Hidden Services by mean of common web browsers
- twisted
- python
- proxy
- tor
🚀 Useful README.md, LICENSE, CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, GitHub Issues, Pull Requests and Actions templates to jumpstart your projects.
- readme
- documentation
- docs
- docs-generator
A Collection of Vulnerabilities in ERC20 Smart Contracts With Tokens Affected
- smart-contracts
- erc20-tokens
- vulnerabilities
- solidity
Samsung Tizen root
- embedded-linux
- firmware-analysis
- hardware-hacking
- mali-gpu
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
- network-security
- security
- arkime
- cybersecurity
Things we learned from Capture The Flag hacking competitions we participated in.
- hacking-competitions
- ctf-writeups
- ctf
- challenges
Simplifying third-party authentication for web applications.
⚡A curated list of awesome resources related to the Ⱥlgorand Blockchain ⛓
- awesome
- awesome-list
- algorand
- algorand-blockchain
A desktop app where AI agents decompile the games you own into C/C++ that rebuilds them byte for byte.
- ai
- artificial-intelligence
- artificialintelligence
- decompilation