Autumn-27 / ScopeSentry
ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes
Autumn-27 / ScopeSentry
akira-init1 / ChannelTerm
Shared terminal sessions for humans and AI agents, starting with serial and hardware debugging.
projectdiscovery / httpx
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
skyhook-io / radar
The missing open-source Kubernetes UI with a built-in MCP server for AI agents. See what's broken, why, and what changed. Issues, Topology, event timeline, Helm, GitOps, live service traffic, and cluster audits - all in one Go binary.
projectdiscovery / subfinder
Fast passive subdomain enumeration tool.
chromedp / chromedp
A faster, simpler way to drive browsers supporting the Chrome DevTools Protocol.
git-bug / git-bug
Distributed, offline-first bug tracker integrated in git
j3ssie / osmedeus
A Modern Orchestration Engine for Security
xalgorix / xalgorix
Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.
vigolium / vigolium
Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision
projectdiscovery / naabu
A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests
coze-dev / coze-loop
Next-generation AI Agent Optimization Platform: Cozeloop addresses challenges in AI agent development by providing full-lifecycle management capabilities from development, debugging, and evaluation to monitoring.
grafana / pyroscope
Continuous Profiling Platform. Debug performance issues down to a single line of code
stern / stern
⎈ Multi pod and container log tailing for Kubernetes
six2dez / OneListForAll
Rockyou for web fuzzing
halilkirazkaya / arsenal-ng
The classic launcher, evolved. Fast, Go-based command library equipped with 200+ cybersecurity cheat-sheets. Just install and start hacking.
projectdiscovery / interactsh
An OOB interaction gathering server and client library
Chocapikk / wpprobe
A fast WordPress plugin enumeration tool
R-s0n / ars0n-framework-v2
AI Native Bug Bounty Hunting Framework Designed to Help Beginners Compete w/ the Pros
zan8in / afrog
A Security Tool for Bug Bounty, Pentest and Red Teaming.
edoardottt / cariddi
Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
projectdiscovery / uncover
Quickly discover exposed hosts on the internet using multiple search engines.
hueristiq / xurlfind3r
A command-line tool for discovering URLs for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicly available.
enowdev / antares
Antares: a self-hosted AI pentest agent and assistant in one binary. Authorized penetration testing with security specialists, 7,000+ procedures and reports, plus files, shell, a real browser, memory and RAG.
0xPugal / fuzz4bounty
1337 Wordlists for Bug Bounty Hunting
hackwither / reap
reconnaissance for agent attack surfaces
haccer / subjack
DNS Takeover tool written in Go
wallarm / gotestwaf
An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses
projectdiscovery / urlfinder
A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.
vflame6 / leaker
Passive leak enumeration tool.
akha-security / akca
AKCA Advanced Web Security Scanner
rootdr-backup / Reconner
Self-hosted bug-bounty platform — verification-first recon & DAST, continuous monitoring. Your data stays on your machine.
okteto / okteto
Develop your applications directly in your Kubernetes Cluster
goforj / godump
Configurable Go value and struct dumps with colorized output, type visibility controls, and field redaction.
aarzilli / gdlv
GUI frontend for Delve
edoardottt / scilla
Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration
cc1a2b / JShunter
jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security vulnerabilities, making it an essential resource for and bug bounty hunters and security researchers.
duckbugio / flock
Autonomous AI dev-team bot
azrtydxb / procoder
Senior-developer discipline for AI coding agents. A commit gate that counts unchecked as failing, quality controllers that refuse to call unfinished work done, and a lessons loop that closes each escaped bug's class. One Go binary, no runtime deps, works with 20+ agents.
SeriousBug / webp-go-pure
A pure go implementation of webp encoding and decoding.
LuckyKuang / sub2api-plus
个人使用，不保证没有bug，使用前请仔细斟酌！
Spade-sec / jsowl
JsOwl —— Go 编写的 Web 安全信息收集利器。集 JavaScript 信息收集、API 端点提取、敏感信息扫描、攻击面梳理 于一体，同时提供 CLI 工具与 Go 库。内置 direct / browser / auto 三种采集模式，兼容 HaE 规则，支持登录态扫描、运行时交互、AI 辅助分析与 MCP Server，输出 JSON 与交互式 HTML 报告，是渗透测试、红队信息收集与 Web 安全测试的高效自动化方案。
go-delve / delve
Delve is a debugger for the Go programming language.
vmware-tanzu / sonobuoy
Sonobuoy is a diagnostic tool that makes it easier to understand the state of a Kubernetes cluster by running a set of Kubernetes conformance tests and other plugins in an accessible and non-destructive manner.
intigriti / misconfig-mapper
Misconfig Mapper is a fast tool to help you uncover security misconfigurations on popular third-party services used by your company and/or bug bounty targets!
edoardottt / csprecon
Discover new target domains using Content Security Policy
buger / jsonparser
THE fastest alternative JSON parser for Go that does not require schema