Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Repository Index
70,234 visible repositories in the index
49–72 of 401 · Most stars
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
- java
- deserialization
- gadget
- exploit
People tracker on the Internet: OSINT analysis and research tool by Jose Pino
- tracking
- osint
- footprint
- hacking-tool
Modern authentication, on your terms. Open source alternative to Auth0, Clerk, WorkOS, Stytch.
- passkeys
- webauthn
- fido2
- authentication
A vault for securely storing and accessing AWS credentials in development environments
- aws
- iam
- temporary-credentials
- keychain
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.
- security-tools
- osint
- recon
- recon-engine
The open-source, privacy-friendly CAPTCHA you host yourself. Bots and AI agents out, people in.
- captcha
- javascript
- proof-of-work
- antispam
Unified Policy as Code
- kubernetes
- compliance
- governance
- policy-as-code
This is a multi-use bash script for Linux systems to audit wireless networks.
- evil-twin
- wps
- security
- beef
OmniAuth is a flexible authentication system utilizing Rack middleware.
- omniauth
- authentication
- hacktoberfest
- ruby
Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]
- penetration-testing
- red-teaming
- windows
- fireeye-flare
Lightweight vault and password manager for Android, KeePassDX allows editing encrypted data in a single file in KeePass format and fill in the forms in a secure way.
- keepass
- android
- android-application
- material-design
A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.
Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.
- ai-security
- alert-triage
- cybersecurity
- detection-engineering
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
- zanzibar
- permissions
- database
- distributed-systems
:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock
- gtfobins
- exploit
- privesc
- privilege-escalation
A spec compliant, secure by default PHP OAuth 2.0 Server
AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.
- agent-framework
- ai-agents
- ai-safety
- compliance
the official Rust and C implementations of the BLAKE3 cryptographic hash function
An adversarial example library for constructing attacks, building defenses, and benchmarking both
Full-featured Social Engineering Framework with Page Cloning, MITM Proxy, Credential Capture, Session Extraction, and Real-time Monitoring.
- hack
- hacking-tool
- social-engineering
- social-engineering-attacks
Bjorn is a powerful network scanning and offensive security tool for the Raspberry Pi with a 2.13-inch e-Paper HAT. It discovers network targets, identifies open ports, exposed services, and potential vulnerabilities. Bjorn can perform brute force attacks, file stealing, host zombification, and supports custom attack scripts.
- automated-pentesting
- bruteforce
- cybersecurity
- e-paper
The FLARE team's open-source tool to identify capabilities in executable files.
- malware-analysis
- reverse-engineering
- binary-analysis
- threat-intelligence
Adversarial Robustness Toolbox (ART) - Python Library for Machine Learning Security - Evasion, Poisoning, Extraction, Inference - Red and Blue Teams
- python
- attack
- adversarial-machine-learning
- poisoning