56,638 visible repositories in the index
1–24 of 26 · Most stars
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.
Reproduce DeFi hacked incidents using Foundry.
WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.
Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!
The full stack toolkit to build onchain app UX
Magicrew. The first open-source all-in-one AI productivity platform (Generalist AI Agent + Workflow Engine + IM + Online collaborative office system)
Your web application for managing personal data.
LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures from Android devices. It also minimizes its interaction between user and kernel space processes during acquisition, which allows it to produce memory captures that are more forensically sound than those of other tools designed for Linux memory acquisition.
This is the development tree. Production downloads are at:
An opinionated production-ready SQL-/Swagger-first RESTful JSON API written in Go, highly integrated with VSCode DevContainers by allaboutapps.
The Ultimate Boilerplate for Products.
Application template for Rails projects; preloaded with best practices for TDD, security, deployment, and developer productivity.
A production-ready SaaS template built with Next.js 15, Supabase, and Tailwind CSS. Includes authentication, user management, file storage, task management demos, and secure RLS policies. Now with a complete React Native + Expo mobile app template! Easily customizable with pre-built themes, i18n support (EN/PL/ZH), and legal documents.
A Rails 6 boilerplate to create your next Saas product. Preloaded with graphQL, devise, JWT, CanCanCan, RailsAdmin, Rubocop, Rspec, i18n and more.
Wraps around various tools and provides some additional checks/information to produce a centralized report of a PE file.
A secure and easy-to-use store for your production secrets
Sectiv is a skill-driven AI security review for Burp Suite. Pick captured traffic and a review goal (IDOR, XSS, SQLi, SSRF…), and get a severity dashboard with description, steps to reproduce, impact, PoC, CWE/CVE and HTML/MD/JSON export. Built with Kotlin + Swing on the Montoya API.
Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.
CTF in a box. Minimal setup required. (not production-ready yet)
Creates a readable stream producing cryptographically strong pseudo-random data using `crypto.randomBytes()`
🚀 Production-ready AI-friendly Go REST API boilerplate with Clean Architecture, JWT auth, RBAC, PostgreSQL migrations, and highly tested. AI-optimized with built-in guidelines for most used IDEs. Docker hot-reload, Swagger docs, one-command setup. Build production APIs in minutes, not weeks.
The open-source safety layer for AI agents — block unsafe tool calls, require approval, enforce budgets, audit, replay.
A developer CLI tool that manages .env files, detects secret leaks, syncs env drift across teammates, and validates environment parity between local/staging/prod all from your terminal. Written in Go.