SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Repository Index
47,133 repositories indexed
1–24 of 161 · Most stars
Automatic SQL injection and database takeover tool
- sql-injection
- detection
- exploitation
- python
The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
- data-analysis
- data-manipulation
- encryption
- encoding
Find secrets with Gitleaks 🔑
.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!
- decompiler
- decompiler-engine
- c-sharp
- dotnet
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
- agent-security
- agent-skills
- agentic-ai
- ai-security
The easiest, and most secure way to access and protect all of your infrastructure.
- ssh
- go
- bastion
- teleport-binaries
Bitwarden infrastructure/backend (API, database, Docker, etc).
- aspnetcore
- aspnet
- sql-server
- api
Cryptomator for Windows, macOS, and Linux: Secure client-side encryption for your cloud storage, ensuring privacy and control over your data.
- cryptomator
- java
- cloud-storage
- cryptography
🍃 Organic Maps is a free Android & iOS offline maps app for more than 6M travelers, tourists, hikers, and cyclists. It uses crowd-sourced OpenStreetMap data and is developed with love by the community. No ads, no tracking, no data collection, no crapware. Please donate to support the development!
Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname
- osint
- osint-python
- python3
Database governance built for humans and agents — controlling changes and access across every major database.
Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).
- chrome
- macos
- windows
- pentest-tool
Cross-platform backup tool for Windows, macOS & Linux with fast, incremental backups, client-side end-to-end encryption, compression and data deduplication. CLI and GUI included.
- deduplication
- backup
- google-cloud-storage
- encryption
OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.
- application-firewall
- firewall
- linux
- networking
Download pictures (or videos) along with their captions and other metadata from Instagram.
- instagram-client
- instagram-feed
- downloader
[MLsys2026 Best Paper]: https://arxiv.org/abs/2506.08276. RAG on Everything with LEANN. Enjoy 97% storage savings while running a fast, accurate, and 100% private RAG application on your personal device.
The all-in-one, open-source backend platform for agentic coding. InsForge gives your coding agent database, auth, storage, compute, hosting, and AI gateway to ship full-stack apps end-to-end.
Custom Selenium Chromedriver | Zero-Config | Passes ALL bot mitigation systems (like Distil / Imperva/ Datadadome / CloudFlare IUAM)
🔥 A well-tested feature-rich modular Firebase implementation for React Native. Supports both iOS & Android platforms for all Firebase services.
Your personal intelligence agent. Watches the world from multiple data sources and pings you when something changes.
Expose your FastAPI endpoints as Model Context Protocol (MCP) tools, with Auth!
A collection of Linux Sysadmin Test Questions and Answers. Test your knowledge and skills in different fields with these Q/A.
- interview
- interview-questions
- exam
- answers
Vulnerability scanner written in Go which uses the data provided by https://osv.dev