Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Repository Index
81,588 visible repositories in the index
1–24 of 324 · Most stars
SearXNG is a free internet metasearch engine which aggregates results from various search services and databases. Users are neither tracked nor profiled.
- metasearch
- search
- python
- searxng
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
- agent-security
- agent-skills
- agentic-ai
- ai-security
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
- static-analysis
- dynamic-analysis
- mobsf
- android-security
Useful tool to track location or mobile number
- fyp
- hacking
- hacking-tool
- indonesia
Daemon to ban hosts that cause multiple authentication errors
E-mails, subdomains and names Harvester - OSINT
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.
- information-gathering
- osint
- osint-tools
- open-source-intelligence
The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
- malware
- malware-analysis
- malware-samples
- malware-research
Open-source intelligence for the global theater. Track everything from the corporate/private jets of the wealthy, and spy satellites, to seismic events in one unified interface. Hook an AI agent up to have it parse through data and find previously unseen correlations. The knowledge is available to all but rarely aggregated in the open, until now.
- osint
- osint-resources
- asdb
- cctv
An OSINT tool to search for accounts by username and email in social networks.
- osint
- pentesting
- cybersecurity
- python
TranslatedOneForAll is a powerful subdomain collection tool
- subdomain
- subdomain-scanner
- subdomain-enumeration
- subdomain-bruteforcing
the LLM vulnerability scanner
- ai
- llm-evaluation
- llm-security
- security-scanners
📱 objection - runtime mobile exploration
(⌐■_■) - Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.
- ai
- deep-reinforcement-learning
- wpa-psk
- handshakes
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
A free & open modern, fast email client with user-friendly encryption and privacy features
- security
- pgp
- search-engine
Malicious traffic detection system
Reverse-engineer any video, shot by shot: filmed, AI-generated or coded, and how to remake it. Breakdowns in the open VIDEO.md format. 逆向一切视频，逐个镜头看是拍的、AI 生成的还是代码做的，再告诉你怎么复刻；拆解结果按 VIDEO.md 格式输出。
- agent-skills
- ai-video
- aigc-detection
- claude-code
GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux
A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.