Search awesome repositories

Hunt down social media accounts by username across social networks

🕵️‍♂️ Collect a dossier on a person by username from 6K websites

Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

🕵️‍♂️ Offensive Google framework.

Information gathering framework for phone numbers

E-mails, subdomains and names Harvester - OSINT

In-depth attack surface mapping and asset discovery

holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.

Fast passive subdomain enumeration tool.

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

Incredibly fast crawler designed for OSINT.

the LLM vulnerability scanner

WebGoat is a deliberately insecure application

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

An OSINT tool to search for accounts by username and email in social networks.

An adversarial example library for constructing attacks, building defenses, and benchmarking both

Adversarial Robustness Toolbox (ART) - Python Library for Machine Learning Security - Evasion, Poisoning, Extraction, Inference - Red and Blue Teams

Course materials for Modern Binary Exploitation by RPISEC

Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.

Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.

Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email

Google CTF

IntelOwl: manage your Threat Intelligence at scale

Course materials for Malware Analysis by RPISEC

Find leaked secrets via github search

DeepTeam is a framework to red team LLMs and AI agents.

A list of Reverse Engineering articles, books, and papers

Red Teaming & Pentesting checklists for various engagements