47,133 repositories indexed
1–24 of 50 · Most stars
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Directory/File, DNS and VHost busting tool written in Go
Program for determining types of files for Windows, Linux and MacOS.
OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
Investigate malicious Windows logon by visualizing and analyzing Windows event log
Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
Th3Inspector 🕵️ Best Tool For Information Gathering 🔎
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
Streamline your web application's authentication with Polis, an SSO service supporting SAML and OpenID Connect protocols. Beyond enterprise-grade Single Sign-On, it also supports Directory Sync via the SCIM 2.0 protocol for automatic user and group provisioning/de-provisioning.
Reconnaissance Swiss Army Knife
UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.
Bloodhound Reporting for Blue and Purple Teams
Free Windows Detector Software
🕵️ Tool to reverse-engineer Protocol Buffers with unknown definition
Detect deauthentication frames using an ESP8266
Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.
OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications
APKinspector is a powerful GUI tool for analysts to analyze the Android applications.
Elixir encryption library designed for Ecto
Linker/Compiler/Tool detector for Windows, Linux and MacOS.
Machinae Security Intelligence Collector
OpenDJ is an open-source LDAP directory server written in Java. It provides robust, scalable, and secure directory services for identity management, access control, and authentication in enterprise environments. OpenDJ supports LDAPv3 standard, replication, REST APIs, and high-performance