86,076 visible repositories in the index
97–120 of 173 · Most stars
OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an easy-to-use web hacking environment designed for labs, security enthusiasts, classrooms, CTF, and vulnerability assessment tool targets.
NeuroSploit is an advanced, AI-powered penetration testing framework designed to automate and augment various aspects of offensive security operations.
The SOC Analysts all-in-one CLI tool to automate and speed up workflow.
LuaN1aoAgent is a fully autonomous AI-driven penetration testing agent powered by graph-based cognitive reasoning.
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
A resource containing all the tools each ransomware gangs uses
Watcher - Open Source AI-powered Cyber Threat Intelligence & Hunting Platform. Developed with Django & React JS.
An advanced tool for email reconnaissance
API Security Project aims to present unique attack & defense methods in API Security field
SploitScan is a sophisticated cybersecurity utility designed to provide detailed information on vulnerabilities and associated exploits.
a list of 350+ Free TryHackMe rooms to start learning cybersecurity with THM
Useful Google Dorks for WebSecurity and Bug Bounty
ThePhish: an automated phishing email analysis tool
The open-source cybersecurity harness. Automate red team & blue team workflows with custom agents - code analysis, pentesting, LLM redteaming, reverse engineering, vulnerability verification, and fixing. Web Interface, CLI and MCP for agents.
IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
:key: Hash type identifier (CLI & lib)
TranslatedFull-Chain Sentinel (全链哨兵, "full-chain sentinel") is a cybersecurity Agent that integrates web penetration testing, Android app security testing, iOS app security testing, batch target probing for offensive and defensive operations, automated emergency response, and open-source vulnerability monitoring. It is used to assist with automating security service delivery. Use for illegal purposes is prohibited.
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
The AI Agent for Cyber Security.
A concise, directive, specific, flexible, and free incident response plan template
Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteur réseau temps réel + pare-feu sortant, agent de flotte Rust, exports SIEM. 100 % local.
Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.