58,136 visible repositories in the index
289–312 of 2,367 · Most stars
Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.
The slightly more awesome standard unix password manager for teams
TranslatedDeepAudit: An AI hacker team for everyone, putting vulnerability discovery within reach. Beginners can deploy and run it with one click, with autonomous collaborative auditing + automated sandbox PoC verification. Supports private deployment with Ollama and one-click report generation. Supports relay stations. Making security no longer expensive and auditing no longer complicated.
Reverse Engineering: Decompiling Binary Code with Large Language Models
RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
Predatory ESP32 Firmware
Repository for my flipper zero badUSB payloads. Now almost entirely plug and play.
[DEPRECATED] Stanford Javascript Crypto Library
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock
Infection Monkey - An open-source adversary emulation platform
CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access
The all-in-one browser extension for offensive security professionals 🛠
An open source, portable, easy to use, readable and flexible TLS library, and reference implementation of the PSA Cryptography API. Releases are on a varying cadence, typically around 3 - 6 months between releases.
autonomous red teaming platform; multi-agent offensive-security meta-harness
External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets.
CTFs as you need them
A native macOS KeePass client
The user infrastructure platform. You choose the frontend, backend, and database. Hexclave handles everything else.
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.
Reproduce DeFi hacked incidents using Foundry.
:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens