Repository Index

Hunt down social media accounts by username across social networks

• osint
• reconnaissance
• linux
• cli

Real-time global intelligence dashboard. AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational awareness interface

• ai
• dashboard
• geopolitics
• monitoring

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

• agents
• artificial-intelligence
• cybersecurity
• penetration-testing

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

• penetration-testing
• pentesting
• security-audit
• security-automation

🕵️‍♂️ Collect a dossier on a person by username from 6K websites

• osint
• social-network
• identification
• socmint

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

• cve-scanner
• subdomain-takeover
• nuclei-engine
• vulnerability-detection

Find secrets with Gitleaks 🔑

• security
• security-tools
• git
• golang

Find, verify, and analyze leaked credentials

• secret
• trufflehog
• credentials
• security

Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.

• llm
• prompt-engineering
• prompts
• llmops

SQL powered operating system instrumentation, monitoring, and analytics.

• security
• monitoring
• intrusion-detection
• sql

Simple, unobtrusive authentication for Node.js.

• nodejs
• express
• passport
• oauth

The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.

• password-sniffer
• mitm
• rogue-ap
• wifi

Free and Open Source Reverse Engineering Platform powered by rizin

• cutter
• gui
• reverse-engineering
• security

E-mails, subdomains and names Harvester - OSINT

• osint
• subdomain-enumeration
• redteam
• recon

Automated Penetration Testing Agentic Framework Powered by Large Language Models

• penetration-testing
• python
• large-language-models
• llm

A 100% free modern JS SaaS boilerplate (React, NodeJS, Prisma). Full-featured: Auth (email, google, github, slack, MS), Email sending, Background jobs, Landing page, Payments (Stripe, Polar.sh), Shadcn UI, S3 file upload. AI-ready with tailored AGENTS.md, skills, and Claude Code plugin. One cmd deploy. Powered by Wasp full-stack framework.

• full-stack
• open-source
• saas
• nodejs

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

Web path scanner

• fuzzer
• fuzzing
• python
• security

The Rogue Access Point Framework

• wifiphisher
• wifi
• rogue
• access-point

John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs

• john
• c
• ripper
• password

Prevents you from committing secrets and credentials into git repositories

Incredibly fast crawler designed for OSINT.

• crawler
• spider
• python
• osint

Exploitation Framework for Embedded Devices

• python
• security
• infosec
• router-exploitation-framework

Small and highly portable detection tests based on MITRE's ATT&CK.

• mitre
• mitre-attack