Read-only, local-first cloud security scanner for AWS, Azure and GCP. Your scan data stays on your machine.
Repository Index
47,133 repositories indexed
169–192 of 273 · Most stars
A convenience library for generating, comparing and inspecting password hashes using the scrypt KDF in Go 🔑
A Highly Accessible and Automated Virtualization Platform for Security Education
- cybersecurity
- virtualization
- docker
- virtualbox
Watchtower | Self-hosted AI security assessment, asset intelligence, and evidence workflows.
- ai-agents
- attack-surface-management
- docker
- penetration-testing
simple YARA-based IOC scanner
- yara
- ioc
- security
- incident-response
TranslatedA domain searcher named GoogleSSLdomainFinder - a subdomain lookup tool based on Google SSL certificate transparency
- domain-scanner
- subdomain
Hascat Rules Collection – Probably the largest collection of hashcat rule-files anywhere.
- hashcat
- hashcat-rules
- hashcat-rule
- password-cracking
TranslatedPassword generation tool: flexible and scriptable password dictionary generator which can support brute-force, combination, complex rule mode etc...
- password-generator
- password-dictionaries
- wordlist-generator
- brute-force
Generate graphs and charts based on password cracking result
- cracking
- hashcat
- matplotlib
- password
A Boilerplate for deno RESTful apis
:sunglasses:Package captcha provides an easy to use, unopinionated API for captcha generation
- golang
- captcha
- captcha-generator
- image-captcha
Generate Keyboard Walk Dictionaries for cracking
Library to generate TOTP/HOTP codes
NeuraVision — AI content generation platform (PHP backend engine: auth, credits, generation, analytics)
- ab-testing
- ai-platform
- analytics
- backend-api
Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.
- networking
- udp
- ipv6
- ipv4
JWT auth for Laravel and Lumen
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
- exploit
- php
- php2shell
- php2shell-cve
The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.
- ai-agents
- bug-bounty
- electron
- offensive-security
A free, public vulnerability feed: CVE, GHSA, OSV, CISA KEV and EPSS merged into one entry per vulnerability. RSS, JSON API and MCP. Docs and issues only.
A blade runner for your network. Detects shadow AI agents before they go rogue.
Scan your computer for applications that are either susceptible to dylib hijacking or have been hijacked.
TranslatedCyclops is a browser with XSS detection capabilities
- security
- xss
- taint-tracking
- vulnerability
The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX account.
acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.