47,133 repositories indexed
1–22 of 22 · Most stars
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
Trail of Bits skills for security research, vulnerability detection, and audit workflows
Multi-Cloud Security Auditing Tool
w3af: web application attack and audit framework, the open source web vulnerability scanner.
SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
Automated NoSQL database enumeration and web application exploitation tool.
SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
Hacking Toolkit
Audit AI chat exports locally before sharing or migration. Find possible secrets, personal-data patterns, broken JSON/JSONL, SQLite issues, and scan gaps—without uploading the archive.
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
Security Auditor Utility for GraphQL APIs
Simplifying encrypted traffic analysis for researchers by making protocol decryption effortless.
We took PersistenceSniper, merged it with Python, and misspelled it on purpose. Meet PyrsistenceSniper.
Django application that performs SAST and Malware Analysis for Android APKs
Open Source SIEM (Security Information and Event Management system).
Gixy-Next: NGINX Configuration Security Scanner & Performance Checker
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates
Runtime guardrails for Claude Code. Auto-approve what's safe, gate what's risky, block what's dangerous. Dual enforcement, full audit trail. MIT.
A tool to extract local data storage of an Android application in one click.