47,133 repositories indexed
1–23 of 23 · Most stars
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
Trail of Bits skills for security research, vulnerability detection, and audit workflows
Multi-Cloud Security Auditing Tool
w3af: web application attack and audit framework, the open source web vulnerability scanner.
SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
Automated NoSQL database enumeration and web application exploitation tool.
SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
Coordinate Claude, Codex and Cursor windows with shared tasks, acknowledgements, prechecks, parallel tests, source-bound proofs and independent review. Built-in skills recall lessons, simplify code and forecast work. Track progress, decisions and evidence in a bilingual local dashboard, with MCP plugins. Browse skills and verified security audits.
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
十五个 AI 客户端的内置提示词一键替换：双击即用、可自证、改前备份、一键还原。v8.26：一键破甲全程托管（自动结束进程+注入+自动拉起）、注入步骤实时提示、写后自检回滚、托盘常驻。免装 Python 单文件 exe，完全免费开源。
Hacking Toolkit
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
Security Auditor Utility for GraphQL APIs
Simplifying encrypted traffic analysis for researchers by making protocol decryption effortless.
We took PersistenceSniper, merged it with Python, and misspelled it on purpose. Meet PyrsistenceSniper.
Django application that performs SAST and Malware Analysis for Android APKs
Open Source SIEM (Security Information and Event Management system).
Gixy-Next: NGINX Configuration Security Scanner & Performance Checker
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates
Runtime guardrails for Claude Code. Auto-approve what's safe, gate what's risky, block what's dangerous. Dual enforcement, full audit trail. MIT.
A tool to extract local data storage of an Android application in one click.