Search awesome repositories

Automated Mass Exploiter

IntelOwl: manage your Threat Intelligence at scale

🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.

State-of-the-art native debugging tools

Hide secrets with invisible characters in plain text securely using passwords 🧙🏻‍♂️⭐

My simple Swiss Army knife for http/https troubleshooting and profiling.

Open-source sandboxed agent harness for teams. Giving every employee a secured personal agent.

:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:

Automated NoSQL database enumeration and web application exploitation tool.

🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.

The Security Toolkit for LLM Interactions

Patch-level verification for Bundler

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

A AI general-purpose state-space search engine, validated first on autonomous penetration testing.

Security sensor for realtime threat detection and protection

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

Run any Linux process in a secure, unprivileged sandbox using Landlock. Think firejail, but lightweight, user-friendly, and baked into the kernel.

Find web directories without bruteforce

Resources to help you keep secrets (API keys, database credentials, certificates, ...) out of source code and remediate the issue in case of a leaked API key. Made available by GitGuardian.

:star: :star: Distributed tcpdump for cloud native environments :star: :star:

Search and download public exploits from the Vulners database — online, or fully offline from a local SQLite FTS5 index.

Database anonymization and test data management

open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.

Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

An Active Defense and EDR software to empower Blue Teams

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

A modular vulnerability scanner with automatic report generation capabilities.

Program to reverse Docker images into Dockerfiles

Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.