47,133 repositories indexed
1–24 of 69 · Most stars
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
The easiest, and most secure way to access and protect all of your infrastructure.
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64\arm64 and loong64.
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
Trail of Bits skills for security research, vulnerability detection, and audit workflows
Multi-Cloud Security Auditing Tool
A static analysis security vulnerability scanner for Ruby on Rails applications
w3af: web application attack and audit framework, the open source web vulnerability scanner.
SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
Cloud Security Posture Management (CSPM)
Automated NoSQL database enumeration and web application exploitation tool.
🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.
OS X Auditor is a free Mac OS X computer forensics tool
SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Patch-level verification for Bundler
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
Agent-Native multi-platform reverse engineering and CWE-602 client-side authorization audit workbench.