1.owasp-amass / amass
In-depth attack surface mapping and asset discovery
Ranked by Attention Score: stars gained over the last 180 complete days
23 repositories by Attention Score · May 7, 2026 – Nov 2, 2026 (UTC)
In-depth attack surface mapping and asset discovery
Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.
hydra
Lightweight network IP scanner written in Go. With notifications, history, export to Grafana
🍯 T-Pot - The All In One Multi Honeypot Platform 🐝
Blazing-fast remote access
Scapy: the Python-based interactive packet manipulation program & library.
Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64 and arm64.
Next generation web scanner
eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
A cross-platform programmable network tool
Scriptable local traffic workbench for inspecting, intercepting, replaying, and rewriting HTTP/HTTPS and WebSocket traffic.
Skills and career roadmap for various security roles like application security, cloud security, DevSecOps, security engineer, security researchers, pentesting, api security, network security, mobile security and so on with helpful resources, guidelines
Best practices for segmentation of the corporate network of any company
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
NFStream: a Flexible Network Data Analysis Framework.
Scirius is a web application for Suricata ruleset management and threat hunting.
A Suricata based NDR distribution
🛡️ Free AI that blocks hackers while you sleep. Runs on cheap hardware. When someone in Tokyo gets attacked, you're protected in 30 seconds. No fees. No experts needed. Just protection. One node's detection → everyone's protection.
Respounder detects presence of responder in the network.