47,133 repositories indexed
1–24 of 51 · Most stars
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites
A 100% free modern JS SaaS boilerplate (React, NodeJS, Prisma). Full-featured: Auth (email, google, github, slack, MS), Email sending, Background jobs, Landing page, Payments (Stripe, Polar.sh), Shadcn UI, S3 file upload. AI-ready with tailored AGENTS.md, skills, and Claude Code plugin. One cmd deploy. Powered by Wasp full-stack framework.
Minimal authorization through OO design and pure Ruby classes
The FLARE team's open-source tool to identify capabilities in executable files.
Free, open-source check for traces of mercenary spyware (Pegasus, Predator, Graphite, Candiru and more) on computers, Android phones and iPhone backups. Double-click apps for Windows, Mac and Linux, in 27 languages.
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
A self-contained cryptographic library for Python
A modern, open source password manager for individuals and teams.
Modern Honey Network
The best tool for finding one gadget RCE in libc.so.6
FakeNet-NG - Next Generation Dynamic Network Analysis Tool
Minimalistic web app designed for sending private and secure notes.
Indicators of Compromises (IOC) of our various investigations
Analyze the security of any domain by finding all the information possible. Made in python.
Static asset revisioning by appending content hash to filenames: `unicorn.css` → `unicorn-d41d8cd98f.css`
ThePhish: an automated phishing email analysis tool
Bloodhound Reporting for Blue and Purple Teams
A DNS rebinding attack framework.
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
Extract and aggregate threat intelligence.
A machine learning tool that ranks strings based on their relevance for malware analysis.
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)