Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
Repository Index
83,087 visible repositories in the index
1–24 of 33 · Most stars
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
- sn1per
- sn1per-professional
- bugbounty-platform
- attack-surface
A collection of small bash scripts for heavy terminal users
- bash
- currency-converter
- stock-prices
- weather
The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.
Claude Code skill to support Android app's reverse engineering
All-in-One Hacking Tools For Hackers! And more hacking tools! For termux.
- hacking
- termux
- cibersecurity
- all-in-one
Run GUI applications and desktops in docker and podman containers. Focus on security.
easy-rsa - Simple shell based CA utility
Git All the Payloads! A collection of web attack payloads.
- payload
- payloads
- xss
- sqli
Makes reverse engineering Android apps easier, automating repetitive tasks like pulling, decoding, rebuilding and patching an APK.
- android
- apk
- frida
- reverse-engineering
EMBA - The firmware security analyzer
- firmware
- linux
- embedded-linux
- security-tools
Introducing "URL Making Technology" to the world for the very FIRST TIME. Give a Mask to Phishing URL like a PRO.. A MUST have tool for Phishing.
- phishing
- tool
- socialengineering
- social-engineering
Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.
- ai-agents
- ai-security
- bug-bounty
- claude-code
SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.
- bash
- exploitation
- exploitation-tool
- hacking
obtain free SSL certificates from letsencrypt ACME server Suitable for automating the process on remote servers.
- getssl
- certificate
- ssl-certificate
- acme-server
Hack Instagram From Termux With Help of Tor
- hacking-tool
- termux-tools
- termux
- noob-friendly
reverse engineering tools for android（android 逆向工程工具集）
pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)
- netcat
- ncat
- nc
- port-forwarding
Educational, CTF-styled labs for individuals interested in Memory Forensics
Find exploits in local and online databases instantly
- exploits
- metasploit
- nmap
- pentest
The OSINT project, the main idea of which is to collect all the possible Google dorks search combinations and to find the information about the specific web-site: common admin panels, the widespread file types and path traversal. The 100% automated.
PhoneInfoga is one of the most advanced tools to scan phone numbers using only free resources.
- termux
- termux-hacking
- termux-tools
- phoneinfoga
GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).
Install your own AmneziaWG 3.1 VPN server on a fresh Ubuntu or Debian VPS with one command. Made for networks that block WireGuard. No Docker, QR-code import, 2.0 on request for routers.