Why is this running? Trace any process, port, container, or file back to what started it - CLI + TUI.
Repository Index
60,121 visible repositories in the index
1–24 of 134 · Most stars
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
- privacy
- security
- censorship
- cybersecurity
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
- security
- compliance
- log-analysis
- vulnerability-detection
Decrypt and export passwords, cookies, history and more from 20 browsers on Windows, macOS and Linux. For authorized security research, incident response and DFIR.
- chrome
- macos
- windows
- pentest-tool
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
- owasp
- javascript
- vulnerable
- hacking
Open-source intelligence for the global theater. Track everything from the corporate/private jets of the wealthy, and spy satellites, to seismic events in one unified interface. Hook an AI agent up to have it parse through data and find previously unseen correlations. The knowledge is available to all but rarely aggregated in the open, until now.
- osint
- osint-resources
- asdb
- cctv
The recursive internet scanner for hackers. 🧡
A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig – [✩Star] if you're using it!
- kubernetes
- openshift
- configmap
- secrets
TranslatedOneForAll is a powerful subdomain collection tool
- subdomain
- subdomain-scanner
- subdomain-enumeration
- subdomain-bruteforcing
📱 objection - runtime mobile exploration
game of active directory
- active-directory
- infrastructure-as-code
- pentest
- ansible
The open-source, privacy-friendly CAPTCHA you host yourself. Bots and AI agents out, people in.
- captcha
- javascript
- proof-of-work
- antispam
A guide to smart contract security best practices
Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.
- ai-security
- alert-triage
- cybersecurity
- detection-engineering
An adversarial example library for constructing attacks, building defenses, and benchmarking both
Fluxion is a remake of linset by vk496 with enhanced functionality.
- fluxion
- handshake
- linset
- fakeap
Sysmon configuration file template with default high-quality event tracing
- sysmon
- threatintel
- threat-hunting
- sysinternals
GRR Rapid Response: remote live forensics for incident response
OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
- hids
- security
- pci-dss
- nist800-53
IntelOwl: manage your Threat Intelligence at scale
- security-tools
- python
- threat-intelligence
- ioc
Volatility 3.0 development
- digital-investigation
- forensics
- incident-response
- malware
Digging Deeper....
- incident-response
- forensics-investigations
- inventory-management
- endpoint-security
ESP32DIV is a multi-purpose wireless offensive and defensive toolkit powered by an ESP32
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
- vulnerabilities
- scanner
- firefox-extension
- grunt-plugins