Hunt down social media accounts by username across social networks
Repository Index
47,133 repositories indexed
1–24 of 428 · Most stars
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
- penetration-testing
- pentesting
- security-audit
- security-automation
A pure Unix shell script ACME client for SSL / TLS certificate automation
- acme
- acme-protocol
- certbot
- shell
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
A tool for secrets management, encryption as a service, and privileged access management
- vault
- go
- secrets
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
- ai-agents
- ai-security-tool
- autonomous-agents
- golang
Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.
- acme
- acme-client
- certbot
- certificate
Composio powers 1000+ toolkits, tool search, context management, authentication, and a sandboxed workbench to help you build AI agents that turn intent into action.
Find secrets with Gitleaks 🔑
Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.
Find, verify, and analyze leaked credentials
- secret
- trufflehog
- credentials
- security
⚙️ NGINX config generator on steroids 💉
DNS-Blocklists: For a better internet - keep the internet clean!
- dns
- ads
- blacklist
- blocklist
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
Simple and flexible tool for managing secrets
PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
Loads environment variables from .env for nodejs projects.
- dotenv
- environment-variables
- javascript
- node
Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.
- casbin
- access-control
- authorization
- rbac
Useful tool to track location or mobile number
- fyp
- hacking
- hacking-tool
- indonesia
Daemon to ban hosts that cause multiple authentication errors
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.