Ranked by Attention Score: stars gained over the last 90 complete days
30 repositories by Attention Score · Aug 5, 2026 – Nov 2, 2026 (UTC)
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
Daemon to ban hosts that cause multiple authentication errors
Dark Web OSINT Tool
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
Scapy: the Python-based interactive packet manipulation program & library.
Bandit is a tool designed to find common security issues in Python code.
Infection Monkey - An open-source adversary emulation platform
A modular vulnerability scanner with automatic report generation capabilities.
Automated NoSQL database enumeration and web application exploitation tool.
We took PersistenceSniper, merged it with Python, and misspelled it on purpose. Meet PyrsistenceSniper.
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
A collection of fascinating and bizarre Censys Search Queries
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
Find web directories without bruteforce
Extract and aggregate threat intelligence.
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
Python low-interaction honeyclient
Hacking Toolkit
Find exploit tool
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
Credentials catching honeypot
:hammer: Manage your website via terminal
Open Source SIEM (Security Information and Event Management system).
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
Stream-first CAN & J1939 toolkit for security research and AI agents — typed JSONL events, CLI, TUI, fuzzing, MCP server.
Visualize network topologies and collect graph statistics based on pcap files
Collaborative malware analysis framework
Collecting & Hunting for IOCs with gusto and style
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation