Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
- sn1per
- sn1per-professional
- bugbounty-platform
- attack-surface
47,133 repositories indexed
25–48 of 126 · Most stars
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
A curated list of tools for incident response
An awesome list of awesome YouTubers that teach about technology. Tutorials about web development, computer science, machine learning, game development, cybersecurity, and more.
Automated Adversary Emulation Platform
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
A collection of awesome security hardening guides, tools and other resources
An all-in-one hacking tool to remotely take over Android devices.
🚗 A curated list of resources for learning about vehicle security and car hacking.
💚🇺🇸🗽Secure remote browsing anywhere, any way you like it. Since 2018.
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish/Japanese. For authorized, defensive and detection use only. (upstream: Autumn-27/ARTEX, AGPL-3.0)
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.
A secure low code deception runtime framework, leveraging AI for System Virtualization.
Curated reverse-engineering tools and learning resources for binaries, apps, firmware, formats, and protocols.
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
Splunk Security Content
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
A curated list of awesome resources related to executable packing
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
ThePhish: an automated phishing email analysis tool
Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.