Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
Repository Index
59,621 visible repositories in the index
1–22 of 22 · Most stars
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
- sn1per
- sn1per-professional
- bugbounty-platform
- attack-surface
The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.
Testing TLS/SSL encryption anywhere on any port
- tls
- cipher
- openssl
- ct
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
Run GUI applications and desktops in docker and podman containers. Focus on security.
Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.
- case-management
- cyber-security
- endpoint-security
- information-security
SocialBox is a Bruteforce Attack Framework [ Facebook , Gmail , Instagram ,Twitter ] , Coded By Belahsan Ouerghi Edit By samsesh for termux on android
- hacking
- hack
- bruteforce
- brute-force
The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!
- hacking-vps
- bug-bounty
- tmux
- axiom
:busts_in_silhouette: A bash-tool to store your private data inside a git repository.
- git-secret
- git
- git-addons
- gpg
A helm plugin that help manage secrets with Git workflow and store them anywhere
- helm
- helm-plugin
- helm-plugins
- kubernetes
Collaborative Incident Response platform
- forensic
- incident-response
- csirt-tooling
- python
UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.
- incident-response
- forensics
- computer-forensics
- triage
Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.
Password cracking rules and masks for hashcat that I generated from cracked passwords.
Remote forensics meta tool
Scans for accessibility tools backdoors via RDP
A Suricata Docker image.
- suricata
- ids
- nsm
- docker
openssh on musl accepted any 257+ char password for accounts with no password. since 2016. check.sh, poc, patch.
Real-time secret-leak guardrails for AI coding agents (Claude Code, Codex), Git hooks, and CI.
A simple low-interaction port monitoring honeypot.
Detect the Shai Hulud 2.0 npm supply chain attack (796+ packages). Scans for malicious files, hashes, and compromised ecosystems. Fast, accurate scanner.
- cdn
- cve
- polyfill
- polyfill-io