Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Repository Index
47,133 repositories indexed
1–24 of 41 · Most stars
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
- footprinting
- osint
- threatintel
- python
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
- agent-security
- agent-skills
- agentic-ai
- ai-security
Daemon to ban hosts that cause multiple authentication errors
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
- security
- security-tools
- security-audit
- security-hardening
Scapy: the Python-based interactive packet manipulation program & library.
- scapy
- python
- network
- network-analysis
Bandit is a tool designed to find common security issues in Python code.
- linter
- bandit
- security-tools
- security-scanner
Infection Monkey - An open-source adversary emulation platform
- penetration-testing
- security-tools
- security-automation
- infection-monkey
Dark Web OSINT Tool
- tor
- tor-network
- deepweb
- dark-web
Automated NoSQL database enumeration and web application exploitation tool.
- nosql
- nosql-databases
- penetration-testing
- scanner
Find web directories without bruteforce
Curated reverse-engineering tools and learning resources for binaries, apps, firmware, formats, and protocols.
- awesome-list
- binary-analysis
- ghidra
- malware-analysis
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
- security-audit
- penetration-testing
- penetration-test
- virtual-hosts
A modular vulnerability scanner with automatic report generation capabilities.
- artemis
- pentesting
- security
- security-scanner
A collection of fascinating and bizarre Censys Search Queries
- censys
- dorks
- queries
- search
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
- sip
- voip
- password-cracker
- svwar
Python low-interaction honeyclient
- honeyclient
- client-honeypot
- python
- security-tools
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
Find exploit tool
- exploit-database
- python
- pentest-tool
- exploits
Hacking Toolkit
- network-analysis
- networking
- scapy
- python3
Extract and aggregate threat intelligence.
- ioc
- indicators-of-compromise
- threatintel
- threat-intelligence
:hammer: Manage your website via terminal
- php
- security-tools
- python
- pentest
Credentials catching honeypot
- honeypot
- deception
- security
- security-tools
Visualize network topologies and collect graph statistics based on pcap files
- network-topology
- python
- pcap
- security-tools