Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.
- ai-security
- bug-bounty
- claude
- ctf
Repository Index
81,337 visible repositories in the index
817–840 of 1,736 · Most stars
Stealthy, Linux-first multi-operator C2 with a self-healing mesh, in-memory execution, and an AI-driven MCP assistant.
- post-exploitation
- stealth
- linux
- hacking-tool
An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses
- owasp
- api-security
- security
- bugbounty
A framework for secure and scalable network traffic analysis - https://netcap.io
- network
- security
- monitoring
- detection
Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.
- bugbounty
- burp-extensions
- burpsuite
- bug-bounty
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
- graphql
- security-scanner
- graphql-security
- api-documentation-tool
Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.
Spring Boot JAR 安全加密运行工具，支持的原生JAR。
- springboot
- jar
- encryption
- decryption
The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.
Real-world infosec wordlists, updated regularly
- bugbounty
- content-discovery
- directory-bruteforce
- hacking
LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines.
- libtomcrypt
- cryptography
- c
- encryption
JSON Object Signing and Encryption library for PHP.
Gives you one-liners that aids in penetration testing operations, privilege escalation and more
- hacking
- hacking-tool
- web-delivery
- metasploit
:closed_lock_with_key: multi factor authentication system (2FA, MFA, OTP, FIDO Server)
- python
- two-factor
- authentication
- identityserver
jSQL Injection is a Java application for automatic SQL database injection.
- java
- sql-injection
- ctf-tools
- spring-boot
Obfuscation library based on C++20 and metaprogramming
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
Free email OSINT tool, 5000+ platforms, identity clustering, breach detection. No API keys required. pip install mailaccess
ODAT: Oracle Database Attacking Tool
- oracle-database
- pentest-tool
- pentest
- privilege-escalation
Official JavaScript repository for Clerk authentication
An authorization library that supports access control models like ACL, RBAC, ABAC in Python
- casbin
- python
- pycasbin
- access-control
Manage your GnuPG keys with ease! 🔐
- gnupg
- gpg
- tui
- gpg-tui
Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.
- cisa-kev
- claude-ai
- cve
- cybersecurity
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.