🕵️♂️ Collect a dossier on a person by username from 6K websites
- osint
- social-network
- identification
- socmint
Repository Index
47,133 repositories indexed
1–24 of 51 · Most stars
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
- footprinting
- osint
- threatintel
- python
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
- static-analysis
- dynamic-analysis
- mobsf
- android-security
🕵️♂️ Offensive Google framework.
- osint
- hideandsec
Automated Penetration Testing Agentic Framework Powered by Large Language Models
The Rogue Access Point Framework
- wifiphisher
- wifi
- rogue
- access-point
CTF framework and exploit development library
Exploitation Framework for Embedded Devices
fsociety Hacking Tools Pack – A Penetration Testing Framework
- fsociety
- exploitation
- port-scanning
- fsociety-hacking
Low code web framework for real world applications, in Python and Javascript
- frappe
- erpnext
- python
- javascript
The recursive internet scanner for hackers. 🧡
📱 objection - runtime mobile exploration
An all-in-one hacking tool to remotely take over Android devices.
- adb
- android
- android-debug-bridge
- cybersecurity
w3af: web application attack and audit framework, the open source web vulnerability scanner.
The Leading Security Assessment Framework for Android.
Volatility 3.0 development
- digital-investigation
- forensics
- incident-response
- malware
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
- bro
- scans
- nmap
- network
StreamAlert is a serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using datasources and alerting logic you define.
- security
- kinesis
- serverless
- terraform
Automated Security Testing For REST API's
- security
- restapiautomation
- python
- owasp
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
- post-exploitation
- hacking
- backdoor
- stealth
A fork and successor of the Sulley Fuzzing Framework
The Offensive Manual Web Application Penetration Testing Framework.
- web-penetration-testing
- reconnaissance
- vulnerability-analysis
- scanning-enumeration
BARF : A multiplatform open source Binary Analysis and Reverse engineering Framework
- binary-analysis
- reverse-engineering
- python
- x86