Repository Index

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

• agents
• artificial-intelligence
• cybersecurity
• penetration-testing

Daemon to ban hosts that cause multiple authentication errors

• linux
• macos
• security
• intrusion-prevention

This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.

• security
• security-tools
• security-audit
• security-hardening

Scapy: the Python-based interactive packet manipulation program & library.

• scapy
• python
• network
• network-analysis

Bandit is a tool designed to find common security issues in Python code.

• linter
• bandit
• security-tools
• security-scanner

Dark Web OSINT Tool

• tor
• tor-network
• deepweb
• dark-web

Find web directories without bruteforce

• pentesting
• security
• security-tools
• websec

Curated reverse-engineering tools and learning resources for binaries, apps, firmware, formats, and protocols.

• awesome-list
• binary-analysis
• ghidra
• malware-analysis

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

• security-audit
• penetration-testing
• penetration-test
• virtual-hosts

A modular vulnerability scanner with automatic report generation capabilities.

• artemis
• pentesting
• security
• security-scanner

SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.

• sip
• voip
• password-cracker
• svwar

"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.

• pentesting
• hacking
• hacking-tool
• pentest-tool

Credentials catching honeypot

• honeypot
• deception
• security
• security-tools

AWS Identity and Access Management Visualizer and Anomaly Finder

• aws
• iam
• security
• security-tools

We took PersistenceSniper, merged it with Python, and misspelled it on purpose. Meet PyrsistenceSniper.

• cybersecurity
• cybersecurity-tools
• incident-response
• security

Open Source SIEM (Security Information and Event Management system).

• siem
• risk-management
• risk-assessment
• vulnerability-management

Distributed Honeypot

• distributed
• honeypot
• deception
• security

Android Malware Behavior Deleter

• android
• malware
• antivirus
• editor

WebLogic Honeypot is a low interaction honeypot to detect CVE-2017-10271 in the Oracle WebLogic Server component of Oracle Fusion Middleware. This is a Remote Code Execution vulnerability.

• security
• security-tools
• honeypot
• deception

🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.

• ansible
• ansible-playbook
• devsecops
• infrastructure-as-code

Stream-first CAN & J1939 toolkit for security research and AI agents — typed JSONL events, CLI, TUI, fuzzing, MCP server.

• automotive-security
• can-bus
• can-bus-hacking
• can-bus-security