SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
Repository Index
47,133 repositories indexed
25–48 of 79 · Most stars
Patch-level verification for Bundler
- bundler-audit
- ruby-advisory-db
- ruby
- dependency-checker
Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish/Japanese. For authorized, defensive and detection use only. (upstream: Autumn-27/ARTEX, AGPL-3.0)
Th3Inspector 🕵️ Best Tool For Information Gathering 🔎
- information-gathering
- reverse-phone-lookup
- mx-lookup
- whois-lookup
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
- android
- antivirus
- machine-learning
- malware-detection
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
- rootkit
- lkm-rootkit
- c
- kernel
Agent-Native multi-platform reverse engineering and CWE-602 client-side authorization audit workbench.
Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.
- php
- access-control
- audit
- browser-extension
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
- graphql
- security-scanner
- graphql-security
- api-documentation-tool
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
- csrf
- crawler
- csrf-attacks
- token-generation
A collection of practical security-focused guides and checklists for smart contract development
PE Tools - Portable executable (PE) manipulation toolkit
- pefile
- hex-editor
- disassembler
- entropy
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
- sip
- voip
- password-cracker
- svwar
RockYou2021.txt is a MASSIVE WORDLIST compiled of various other wordlists. RockYou2021.txt DOES NOT CONTAIN USER:PASS logins!
- wordlist
- rockyou
- rockyou2021
- wordlists
Hacking Toolkit
- network-analysis
- networking
- scapy
- python3
Audit AI chat exports locally before sharing or migration. Find possible secrets, personal-data patterns, broken JSON/JSONL, SQLite issues, and scan gaps—without uploading the archive.
- chat-archive
- python
- secret-scanning
- sqlite
Audited & minimal JS implementation of elliptic curve cryptography.
- crypto
- cryptography
- ecdsa
- ed25519
Audited & minimal JS implementation of hash functions, MACs and KDFs.
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
- sigma
- python3
- evtx
- sigma-rules
PE-bear (builds only)
- pe-analyzer
- pe-format
- pe-editor
Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.
- codereview
- cybersecurity
- ruby
- sinatra
phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code
- php
- php-codesniffer
- phpcs
- static-code-analysis
Security Auditor Utility for GraphQL APIs
:white_check_mark: .NET crypto done right. Professionally audited.
- crypto
- cryptography
- c-sharp
- aead