AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.
- ai
- attack-surface-management
- bbot
- cybersecurity
86,076 visible repositories in the index
121–144 of 173 · Most stars
AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.
Scirius is a web application for Suricata ruleset management and threat hunting.
🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
OWASP Honeypot, Automated Deception Framework.
Built-in Panther detection rules and policies
Cyber Incident Response Team Playbook Battle Cards
Discover internet-wide misconfigurations while drinking coffee
A Python RESTful API framework for online malware analysis and threat intelligence services.
Astral-PE is a low-level mutator (Headers/EP obfuscator) for native Windows PE files (x32/x64)
The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups
We took PersistenceSniper, merged it with Python, and misspelled it on purpose. Meet PyrsistenceSniper.
A modular Python application to collect intelligence for malicious hosts.
Automated Tactics Techniques & Procedures
Sandia Cyber Omni Tracker (SCOT)
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.
Protect your SIP Servers from bad actors at https://sentrypeer.org
This is an aspiring project aimed at accumulating knowledge from the world of cybersecurity and presenting it in a cogent way, so it is accessible to as large an audience as possible and so that everyone has a good resource to learn hacking from.
A Highly Accessible and Automated Virtualization Platform for Security Education
Suricata rules for network anomaly detection
🔍A cutting edge context aware GraphQL API fuzzing tool!
Open Source Threat Intelligence Platform
Modern honeypot supporting multiple services, realistic website cloning, and AI-powered features