Ghidra is a software reverse engineering (SRE) framework
- software-analysis
- disassembler
- reverse-engineering
Repository Index
47,133 repositories indexed
1–24 of 704 · Most stars
Hunt down social media accounts by username across social networks
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
- hex-editor
- reverse-engineering
- ips
- dear-imgui
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
- penetration-testing
- pentesting
- security-audit
- security-automation
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
🕵️♂️ Collect a dossier on a person by username from 6K websites
- osint
- social-network
- identification
- socmint
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Automatic SQL injection and database takeover tool
- sql-injection
- detection
- exploitation
- python
🕵️♂️ All-in-one OSINT tool for analysing any website
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
- ai-agents
- ai-security-tool
- autonomous-agents
- golang
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
- cve-scanner
- subdomain-takeover
- nuclei-engine
- vulnerability-detection
Find secrets with Gitleaks 🔑
Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.
KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.
- keepassxc
- keepass
- password-manager
- linux
The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
- totp
- ldap
- sso-authentication
- two-factor-authentication
Find, verify, and analyze leaked credentials
- secret
- trufflehog
- credentials
- security
⚙️ NGINX config generator on steroids 💉
The authentication glue you need.
- saml
- saml-idp
- saml-sp
- oauth2
UNIX-like reverse engineering framework and command-line toolset
- radare2
- c
- commandline
- reverse-engineering
API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites
- osint
- social-media
- analyzer
- username
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
- footprinting
- osint
- threatintel
- python
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
- agent-security
- agent-skills
- agentic-ai
- ai-security