AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.
- ai
- attack-surface-management
- bbot
- cybersecurity
Repository Index
47,133 repositories indexed
73–96 of 103 · Most stars
Simplifying encrypted traffic analysis for researchers by making protocol decryption effortless.
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
- network-security
- security
- arkime
- cybersecurity
teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.
- ids
- teler
- waf
- teler-ids
Discover internet-wide misconfigurations while drinking coffee
- cybersecurity
- scanner
- golang
- osint
Visualize network topologies and collect graph statistics based on pcap files
- network-topology
- python
- pcap
- security-tools
Passive DNS Capture and Monitoring Toolkit
- passivedns
- passive-dns
- dns-server
- dns
TranslatedPacket monster (っ‘-’)╮=͟͟͞͞◒ ヽ( '-'ヽ) TUI tool for sending packets of arbitrary input and monitoring packets on any network interfaces (default: eth0). Windows/macOS/Linux
- packet-generator
- packet-analyzer
- network
- networking
A secure, efficient TCP/UDP tunneling solution that delivers fast, reliable access across network restrictions using pre-established TCP/QUIC/WebSocket or HTTP/2 connections.
- api-rest
- connection-pooling
- cybersecurity
- devops
PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡
- proxy
- tcp
- tcp-proxy
- penetration-testing
Chiron - An IPv6 Security Assessment framework with advanced IPv6 Extension Headers manipulation capabilities.
- ipv6
- security-assessments
gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that you can join on Google Groups: https://groups.google.com/forum/#!topic/gonids/
- suricata
- parse
- security-tools
- network-security
Goma Gateway – Lightweight, High-Performance API Gateway and Reverse Proxy with declarative config, robust middleware, and support for REST, GraphQL, TCP, UDP, and gRPC.
- api-gateway
- go-proxy
- microservices
- api-management
Ziti SDK for Golang
- golang
- networking
- sdk
- zero-trust
Mock an SSH server and define all commands it supports (Python, Twisted)
Defensive mitigation and testing toolkit for PHP security vulnerabilities (CVE-2026-109618, CVE-2026-109619, CVE-2026-115560), including Apache protections and PHP hardening guidance
- cybersecurity
- defenses
- patches
- php
Collection of ssl verification functions for Erlang
CetusGuard is a tool that protects the Docker daemon socket by filtering calls to its API endpoints.
OpenIG is an open-source identity gateway (reverse-proxy) that secures, routes, and manages web traffic. It enables authentication, access control, and integration with identity providers, delivering single sign-on and API security for web and cloud applications.
- sso
- reverse-proxy
- rewrite
- openam
Potiron - Normalize, Index and Visualize Network Capture
- tshark
- network-capture
- graph
- pcap
This library protects against typical web attacks. It was inspired in rack-protection Ruby gem.
Cardea is an SSH bastion server with access control, session recording, and optional TPM-backed key protection.
- audit
- bastion
- firewall
- networking
LazyVPN is an Omarchy VPN manager for WireGuard connections. It replaces manual systemd-networkd configuration with a fast, keyboard-driven TUI featuring killswitch, auto-recovery, and Waybar integration.
A Python DNS crawler to find identical domain names under different TLDs.
- python
- cybersecurity
- dns
- crawler