47,133 repositories indexed
1–24 of 57 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Most advanced XSS scanner.
Web path scanner
Exploitation Framework for Embedded Devices
fsociety Hacking Tools Pack – A Penetration Testing Framework
The recursive internet scanner for hackers. 🧡
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Scanning APK file for URIs, endpoints & secrets.
Automated Αll-in-One OS command injection exploitation tool.
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
w3af: web application attack and audit framework, the open source web vulnerability scanner.
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
A high performance offensive security tool for reconnaissance and vulnerability scanning
Loki - Simple IOC and YARA Scanner
Automated NoSQL database enumeration and web application exploitation tool.
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
Tool to scan for secret files on HTTP servers
The Offensive Manual Web Application Penetration Testing Framework.
ICS/SCADA honeypot
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
A modular vulnerability scanner with automatic report generation capabilities.
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.