Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
Repository Index
55,140 visible repositories in the index
1–19 of 19 · Most stars
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
- sn1per
- sn1per-professional
- bugbounty-platform
- attack-surface
A collection of small bash scripts for heavy terminal users
- bash
- currency-converter
- stock-prices
- weather
The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.
Testing TLS/SSL encryption anywhere on any port
- tls
- cipher
- openssl
- ct
All-in-One Hacking Tools For Hackers! And more hacking tools! For termux.
- hacking
- termux
- cibersecurity
- all-in-one
Run GUI applications and desktops in docker and podman containers. Focus on security.
The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!
- hacking-vps
- bug-bounty
- tmux
- axiom
UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.
- incident-response
- forensics
- computer-forensics
- triage
Collection of android malware samples
Customizable Linux Persistence Tool for Security Research and Detection Engineering.
Scalpel is an open source data carving tool. It is not being actively maintained.
Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux
Detect hidden files and text in images
- steganography
- ctf
- stego
- capture-the-flag
Real-time secret-leak guardrails for AI coding agents (Claude Code, Codex), Git hooks, and CI.
A simple low-interaction port monitoring honeypot.
Very simple but effective honeypot to detect port scanning on your network
Detect the Shai Hulud 2.0 npm supply chain attack (796+ packages). Scans for malicious files, hashes, and compromised ecosystems. Fast, accurate scanner.
- cdn
- cve
- polyfill
- polyfill-io
Detect CVE-2025-55182 (React2Shell) RCE vulnerability in React Server Components. Fast, accurate scanner with zero false positives.