Repository Index

Web path scanner

• fuzzer
• fuzzing
• python
• security

Exploitation Framework for Embedded Devices

• python
• security
• infosec
• router-exploitation-framework

Bandit is a tool designed to find common security issues in Python code.

• linter
• bandit
• security-tools
• security-scanner

Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.

• network-security
• selfhosted
• wifi-network
• wifi-security

w3af: web application attack and audit framework, the open source web vulnerability scanner.

• scanner
• security
• appsec
• cross-site-scripting

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.

• bro
• scans
• nmap
• network

Tool to scan for secret files on HTTP servers

• security
• websecurity

Find web directories without bruteforce

• pentesting
• security
• security-tools
• websec

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

• security-audit
• penetration-testing
• penetration-test
• virtual-hosts

A modular vulnerability scanner with automatic report generation capabilities.

• artemis
• pentesting
• security
• security-scanner

SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.

• sip
• voip
• password-cracker
• svwar

Volatility plugin for extracts configuration data of known malware

• malware
• volatility
• forensics
• python

Automated client-side template injection (sandbox escape/bypass) detection for AngularJS v1.x.

• angularjs
• xss
• xss-scanners
• exploit

🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️

• finder
• graphql
• security
• spider

Android Mobile Device Hardening

• forensic
• security
• hardening
• android-security

Gixy-Next: NGINX Configuration Security Scanner & Performance Checker

• gixy
• nginx
• nginx-configuration
• security

Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design

• exploit
• php
• php2shell
• php2shell-cve

Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.

• crtsh
• cve
• cve-2026-109618
• cve-2026-109619

🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.

• ansible
• ansible-playbook
• devsecops
• infrastructure-as-code

Honeypot detection toolkit

• cybersecurity
• detection
• honeypot
• honeypot-detection