Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Daemon to ban hosts that cause multiple authentication errors
The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
Main Sigma Rule Repository
Integrated set of Django applications addressing authentication, registration, account management as well as 3rd party (social) account authentication. 🔁 Mirror of https://codeberg.org/allauth/django-allauth/
Malicious traffic detection system
Common User Passwords Profiler (CUPP)
- wordlist-generator
- wordlist
- dictionary-attack
- password
Dark Web OSINT Tool
- tor
- tor-network
- deepweb
- dark-web
PyInstaller Extractor
Free, open-source check for traces of mercenary spyware (Pegasus, Predator, Graphite, Candiru and more) on computers, Android phones and iPhone backups. Double-click apps for Windows, Mac and Linux, in 27 languages.
Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
Investigate malicious Windows logon by visualizing and analyzing Windows event log
Reverse engineering tool for Linux
Repository for BLESS, an SSH Certificate Authority that runs as a AWS Lambda function
Automated Security Testing For REST API's
IAM Least Privilege Policy Generator
Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.
- wordlist
- wordlist-generator
- password
- cracking
Find web directories without bruteforce
yarGen is a generator for YARA rules
GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.
- digital-human-rights
- anonymity
- security
- python
ThePhish: an automated phishing email analysis tool
Bloodhound Reporting for Blue and Purple Teams
- active
- directory
- blueteam
- purpleteam
Full featured multi arch/os debugger built on top of PyQt5 and frida