Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Repository Index
47,133 repositories indexed
1–19 of 19 · Most stars
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
fsociety Hacking Tools Pack – A Penetration Testing Framework
- fsociety
- exploitation
- port-scanning
- fsociety-hacking
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
An agent skill that finds where a photo was taken — OpenStreetMap geometry, elevation skylines, satellite imagery and street view — and shows its work. Works with Claude Code, Codex, Cursor, Gemini CLI, OpenCode and GitHub Copilot.
- claude-code
- geoguessr
- geolocation
- osint
A python script that finds endpoints in JavaScript files
- infosec
- endpoints
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
Analyze the security of any domain by finding all the information possible. Made in python.
Bloodhound Reporting for Blue and Purple Teams
- active
- directory
- blueteam
- purpleteam
Generate smart and powerful wordlists
- wordlist
- password
- hacking-tool
- password-cracking
Find exploit tool
- exploit-database
- python
- pentest-tool
- exploits
Audit AI chat exports locally before sharing or migration. Find possible secrets, personal-data patterns, broken JSON/JSONL, SQLite issues, and scan gaps—without uploading the archive.
- chat-archive
- python
- secret-scanning
- sqlite
THE MOST POWERFUL OFFENSIVE AI AGENT FOR PENTESTING , OSINT , AND ETHICAL HACKING
- ai-bug-bounty
- ai-bug-finder
- ai-bug-reporter
- ai-hacking
🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️
Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
- crtsh
- cve
- cve-2026-109618
- cve-2026-109619
Find which of your direct GitHub dependencies is susceptible to RepoJacking attacks
- golang
- go
- supply-chain
- security
Create n-grams of wordlists based on words, characters, or charsets to use in offline password attacks and data analysis
- hashcat
- jtr
- mdxfind
- ngram
A Python DNS crawler to find identical domain names under different TLDs.
- python
- cybersecurity
- dns
- crawler
Simple tool to find the yara matches on a file
- yara
- yara-rules
- malware
- malware-analysis