Security

This is a multi-use bash script for Linux systems to audit wireless networks.

🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

Skills for threat modeling, scanning, triage, patching, plus an autonomous scanning harness you can /customize

Automated Adversary Emulation Platform

A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.

A list of web application security

Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.

🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙‍♀️

A static analysis security vulnerability scanner for Ruby on Rails applications

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

Infection Monkey - An open-source adversary emulation platform

Force Proxy to any Windows/MacOS/Linux Application TCP and UDP traffic

Next generation web scanner

Ultimate DevSecOps library

Static analysis for GitHub Actions (and more)

Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.

One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Linux privilege escalation auditing tool

A Modern Orchestration Engine for Security

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

A curated list of GPT agents for cybersecurity

A collection of awesome security hardening guides, tools and other resources

Autonomous Hacking Agent for Red Team

AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.

A curated list of various bug bounty tools

An all-in-one hacking tool to remotely take over Android devices.

Reverse engineering and pentesting for Android applications

syzkaller is an unsupervised coverage-guided kernel fuzzer

Bjorn is a powerful network scanning and offensive security tool for the Raspberry Pi with a 2.13-inch e-Paper HAT. It discovers network targets, identifies open ports, exposed services, and potential vulnerabilities. Bjorn can perform brute force attacks, file stealing, host zombification, and supports custom attack scripts.

GNU Radio – the Free and Open Software Radio Ecosystem

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

Monitor linux processes without root permissions

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...

Open-source tool to enforce privacy & security best-practices on Windows, macOS and Linux, because privacy is sexy

The Official USB Rubber Ducky Payload Repository

An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

The Network Execution Tool

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

Automated Αll-in-One OS command injection exploitation tool.

A professional, high-fidelity de-anonymization and vulnerability diagnostic framework. Features a zero-coupling modular architecture for browser-based intelligence gathering, hardware fingerprinting, and security research.

a secure dotenv—from the creator of `dotenv`

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

:computer:🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.

AI-powered bug bounty hunting toolkit that works with or without subscription.

Study Notes For Web Hacking / Web安全学习笔记