Repository Index

Audit AI chat exports locally before sharing or migration. Find possible secrets, personal-data patterns, broken JSON/JSONL, SQLite issues, and scan gaps—without uploading the archive.

• chat-archive
• python
• secret-scanning
• sqlite

High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)

A friendly car security exploration tool for the CAN bus

• python
• can-bus
• security-scanner
• security-testing

:camera: PictShare is an open source image, mp4, pastebin hosting service with a simple resizing and upload API that you can host yourself. :rice_scene:

• docker
• images
• selfhosted
• picture

Scan files or process memory for CobaltStrike beacons and parse their configuration

The AI Agent for Cyber Security.

• ai-agent
• ai-security
• appsec
• bug-bounty

raven is a Linkedin information gathering tool that can be used by pentesters to gather information about an organization employees using Linkedin.

Simple Bash IOC Scanner

Multi-role and whitelist based authorization gem for Rails (and not only Rails!)

• ruby
• cancan
• rails
• access-control

A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.

• application-security
• appsec
• bug-bounty
• burp-alternative

Laika BOSS: Object Scanning System

HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.

• malware-analysis
• dynamic-analysis
• security
• linux

Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.

• codereview
• cybersecurity
• ruby
• sinatra

Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.

• pentesting
• security
• chrome-extension
• api-keys

🚀 Useful README.md, LICENSE, CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, GitHub Issues, Pull Requests and Actions templates to jumpstart your projects.

• readme
• documentation
• docs
• docs-generator

ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.

• clamscan
• file-scanner
• virus-scan
• docker-compose

Modular file scanning/analysis framework

• python
• analytic-machines
• analysis-framework
• python-script

bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.

• xss
• bxss
• security
• bugbounty

AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.

• ai
• attack-surface-management
• bbot
• cybersecurity

Machinae Security Intelligence Collector

Catch risky npm dependency changes before they merge.

• dependency-analysis
• devsecops
• github-actions
• malware

Standalone password candidate generator using the PRINCE algorithm

Volatility plugin for extracts configuration data of known malware

• malware
• volatility
• forensics
• python

:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.