Search awesome repositories

A security scanner for your LLM agentic workflows

Python low-interaction honeyclient

Find exploit tool

Open-source autonomous AI penetration testing. 50 specialist agents across web, API, cloud, Active Directory, Kubernetes, CI/CD and AI/LLM (OWASP LLM Top 10). Runs on a local LLM behind a Privacy Gateway. Integrates with GitHub, GitLab, Jenkins, VS Code, JetBrains, n8n, Grafana & Splunk.

:key: Hash type identifier (CLI & lib)

Hacking Toolkit

My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.

Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.

Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

CMS/LMS/Library etc Versions Fingerprinter

Secure shell history commands by finding sensitive data

Open Source SIEM (Security Information and Event Management system).

Open-source security agents for cloud, code and runtime. 45 built-in agents audit AWS, GCP, Azure, Kubernetes, GitHub and GitLab for privilege escalation, public exposure, supply chain and more, or build your own in one markdown file. Live, read-only access to your infrastructure.

Faster and more efficient stateless SYN scanner and banner grabber due to userland TCP/IP stack usage.

:shower: Sanitising your documents, one threat at a time. — Content Disarm & Reconstruction Software

A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation

Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.

Security-focused linter for Docker Compose files. Catches dangerous misconfigurations before they reach production. Grounded in OWASP and CIS Docker Benchmark.

POMjs is a random password generator in HTML and pure Javascript with no cookies and no trackers. It has been translated into several languages.

Android Malware Behavior Deleter

🕵️‍♀️ Find, locate, and query files for ops and security experts ⚡️⚡️⚡️

A tool to extract local data storage of an Android application in one click.

Efficiently show and monitor end-of-life dates for a number of products in your terminal and CI using endoflife.date API

Linux Anti-Debugging Detection Library