47,133 repositories indexed
1–24 of 45 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Most advanced XSS scanner.
Web path scanner
Exploitation Framework for Embedded Devices
fsociety Hacking Tools Pack – A Penetration Testing Framework
The recursive internet scanner for hackers. 🧡
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Scanning APK file for URIs, endpoints & secrets.
Automated Αll-in-One OS command injection exploitation tool.
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
w3af: web application attack and audit framework, the open source web vulnerability scanner.
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
A high performance offensive security tool for reconnaissance and vulnerability scanning
Loki - Simple IOC and YARA Scanner
Automated NoSQL database enumeration and web application exploitation tool.
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
Tool to scan for secret files on HTTP servers
Find web directories without bruteforce
The Offensive Manual Web Application Penetration Testing Framework.
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
A modular vulnerability scanner with automatic report generation capabilities.
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
Audit AI chat exports locally before sharing or migration. Find possible secrets, personal-data patterns, broken JSON/JSONL, SQLite issues, and scan gaps—without uploading the archive.