47,133 repositories indexed
1–24 of 24 · Most stars
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
Multi-Cloud Security Auditing Tool
w3af: web application attack and audit framework, the open source web vulnerability scanner.
Automated NoSQL database enumeration and web application exploitation tool.
Reverse engineering tool for Linux
SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
Hacking Toolkit
Audit AI chat exports locally before sharing or migration. Find possible secrets, personal-data patterns, broken JSON/JSONL, SQLite issues, and scan gaps—without uploading the archive.
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
Security Auditor Utility for GraphQL APIs
Modified edition of cuckoo
We took PersistenceSniper, merged it with Python, and misspelled it on purpose. Meet PyrsistenceSniper.
Django application that performs SAST and Malware Analysis for Android APKs
HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy + Exploit Timing Attacks
Open Source SIEM (Security Information and Event Management system).
Gixy-Next: NGINX Configuration Security Scanner & Performance Checker
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates
Android Malware Behavior Deleter
Runtime guardrails for Claude Code. Auto-approve what's safe, gate what's risky, block what's dangerous. Dual enforcement, full audit trail. MIT.
A tool to extract local data storage of an Android application in one click.
Quantum-resistent asymmetric key generation tool for digital signatures.