Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Repository Index
47,133 repositories indexed
1–24 of 44 · Most stars
Most advanced XSS scanner.
- xss
- xss-scanner
- xss-exploit
- xss-bruteforce
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
Integrated set of Django applications addressing authentication, registration, account management as well as 3rd party (social) account authentication. 🔁 Mirror of https://codeberg.org/allauth/django-allauth/
📱 objection - runtime mobile exploration
(⌐■_■) - Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.
- ai
- deep-reinforcement-learning
- wpa-psk
- handshakes
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Common User Passwords Profiler (CUPP)
- wordlist-generator
- wordlist
- dictionary-attack
- password
An agent skill that finds where a photo was taken — OpenStreetMap geometry, elevation skylines, satellite imagery and street view — and shows its work. Works with Claude Code, Codex, Cursor, Gemini CLI, OpenCode and GitHub Copilot.
- claude-code
- geoguessr
- geolocation
- osint
Github.com/CryptoSignal - Trading & Technical Analysis Bot - 4,100+ stars, 1,100+ forks
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
- malware
- deobfuscation
- strings
- flare
Automated Security Testing For REST API's
- security
- restapiautomation
- python
- owasp
Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.
- wordlist
- wordlist-generator
- password
- cracking
Phishing catcher using Certstream
- phishing
- threat-intelligence
- certificate-transparency
- osint
📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.
GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.
- digital-human-rights
- anonymity
- security
- python
Automated Red Team Infrastructure deployement using Docker
A pure Python HTML5 parser that just works. No C extensions to compile. No system dependencies to install. No complex API to learn.
An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction
Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
Run programs on linux with selectively restricted permissions.
- python
- security
- containers
- docker
A machine learning tool that ranks strings based on their relevance for malware analysis.
- machine-learning
- fireeye-flare
- strings
- malware-analysis
USB Keystroke Injection Protection