Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
Repository Index
47,133 repositories indexed
49–72 of 668 · Most stars
In-depth attack surface mapping and asset discovery
- go
- dns
- subdomain
- enumeration
The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
- security
- security-tools
- security-audit
- security-hardening
Web path scanner
The Rogue Access Point Framework
- wifiphisher
- wifi
- rogue
- access-point
一款内网综合扫描工具,方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
- fscan
- scanner
- scanning
- sec
Decrypt and export passwords, cookies, history and more from 20 browsers on Windows, macOS and Linux. For authorized security research, incident response and DFIR.
- chrome
- macos
- windows
- pentest-tool
Open-Source Phishing Toolkit
- gophish
- phishing
- golang
- security
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
- owasp
- javascript
- vulnerable
- hacking
Damn Vulnerable Web Application (DVWA)
- dvwa
- php
- sql-injection
- security
Prevents you from committing secrets and credentials into git repositories
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
Community curated list of templates for the nuclei engine to find security vulnerabilities.
- nuclei-templates
- nuclei
- bugbounty
- security
Exploitation Framework for Embedded Devices
A vulnerability scanner for container images and filesystems
Free cross-platform password manager compatible with KeePass
- keeweb
- keepass
- security
- password-manager
Associate users with roles and permissions
- laravel
- php
- permission
- secure
Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening
An HTTP toolkit for security research.
hydra
- penetration-testing
- password-cracker
- network-security
- hydra
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
- vuls
- vulnerability-scanners
- golang
- go
The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.
Adversary Emulation Framework
- security-tools
- implant
- golang
- dns-server