47,133 repositories indexed
1–24 of 32 · Most stars
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
World's fastest and most advanced password recovery utility
E-mails, subdomains and names Harvester - OSINT
In-depth attack surface mapping and asset discovery
Fast passive subdomain enumeration tool.
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
Community curated list of templates for the nuclei engine to find security vulnerabilities.
Credentials recovery project
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
Digging Deeper....
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation
Hashtopolis - distributed password cracking with Hashcat
APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.
Discover internet-wide misconfigurations while drinking coffee
Evidence-based DSM ransomware recovery: preservation, RAM key recovery, copy decryption, and GitLab validation.
Reverse engineering tool for automatic structure recovering and memory use analysis based on DynamoRIO and Capstone
EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.
Protect your SIP Servers from bad actors at https://sentrypeer.org
A SDK for the creation of analysis tools without obtaining app source code in order to profile runtime performance, examine code coverage, and track high-risk behaviors of a given app on Android 5.0 and above.
SuperGhidra: Autonomous Agent Reverse Engineering, Lock-Free Ghidra Daemon & C++ Recovery Suite
Content discovery and fuzzing with HTTP/3 support (100k requests per second)