trhhubsd / ARTEX
ARTEX · AI autonomous penetration testing system (multi-agent LLM, Go + Next.js) · AI 自主渗透测试系统 · 百度 agent+ 攻防挑战赛冠军
trhhubsd / ARTEX
N4darae / shrt
A contract-driven gRPC regression harness for AI coding agents, with human-approved baselines. Snapshot the valid call chains of an API so an agent can look one up instead of tracing for it. gRPC today, OpenAPI next
gitleaks / gitleaks
Find secrets with Gitleaks 🔑
aquasecurity / trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
CarterPerez-dev / Cybersecurity-Projects
Building 70 Projects ranging from beginner to advanced so anyone can — learn from, build upon, use as a reference, or even copy directly. Owned by my cybersecurity company 👇
projectdiscovery / nuclei
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
Autumn-27 / ScopeSentry
ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes
hashicorp / terraform
Terraform enables you to safely and predictably create, change, and improve infrastructure. It is a source-available tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.
trufflesecurity / trufflehog
Find, verify, and analyze leaked credentials
gin-gonic / gin
Gin is a high-performance HTTP web framework written in Go. It provides a Martini-like API but with significantly better performance—up to 40 times faster—thanks to httprouter. Gin is designed for building REST APIs, web applications, and microservices.
getarcaneapp / arcane
Modern Docker Management, Designed for Everyone
Ernket / CodeScan-Artex
二开artex的代码审计平台 | 新增本地反编译java依赖库 | 多账号管理
google / osv-scanner
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
betterleaks / betterleaks
Find leaked secrets everywhere.
anchore / grype
A vulnerability scanner for container images and filesystems
PatchMon / PatchMon
Linux Patch Management & Automation Platform
BastionPHP / Bastion
Evidence-based PHP security assessment: patch verification, intrusion tracing, and offline reports.
danielmiessler / Fabric
Fabric is an open-source framework for augmenting humans using AI. It provides a modular system for solving specific problems using a crowdsourced set of AI prompts that can be used anywhere.
goharbor / harbor
An open source trusted cloud native registry project that stores, signs, and scans content.
aancw / php2shell-scanner
Scanner for PHP2Shell (CVE-2026-109618/109619): URL blackbox, local device and SSH.
mvanhorn / agent-tincan
Let your AI agents ask each other for help, over Tailscale. Wherever they run.
CangShui / workbuddy-gateway
用Go语言写的腾讯 CodeBuddy 账号池Cli/Web管理控制台 + OpenAI 兼容反代网关
google / osv.dev
Open source vulnerability DB and triage service.
pipelab-org / pipelock
Open-source AI agent firewall for MCP security and agent egress. Scans mediated HTTP, MCP, A2A, and WebSocket traffic for exfiltration, SSRF, and prompt injection, and emits mediator-signed action receipts: verifiable audit evidence from outside the agent.
felinics / Memoh
✨ The open-source multi-agent platform. Every agent gets its own computer, desktop, network, and long-term memory. You can bring your own key, or host your coding agent like Claude Code, Codex and so on.
yyhuni / lunafox
Open-source, self-hosted attack surface management platform with distributed agents for asset discovery, scan orchestration, and vulnerability management.
VictoriaMetrics / VictoriaLogs
Fast and easy to use database for logs, which can efficiently handle terabytes of logs
hashicorp / nomad
Nomad is an easy-to-use, flexible, and performant workload orchestrator that can deploy a mix of microservice, batch, containerized, and non-containerized applications. Nomad is easy to operate and scale and has native Consul and Vault integrations.
shadow1ng / fscan
一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
5rahim / seanime
Open-source media server with a web interface and desktop app for anime and manga.
MatinSenPai / SenPaiScanner
A light-weight scanner for Cloudflare IPs, written in Golang
xalgorix / xalgorix
Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.
291-Group / LAN-Orangutan
LAN-Orangutan is a self-hosted network discovery tool. Find every device on your LAN, label and group them, snapshot your network and compare it later, and get flagged when something unexpected shows up. Single binary, no setup, Tailscale built in. Built by 291 Group.
perplexityai / bumblebee
Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.
octelium / octelium
A next-gen FOSS self-hosted unified zero trust secure access platform that can operate as a remote access VPN, a ZTNA platform, API/AI/MCP gateway, a PaaS, an ngrok-alternative and a homelab infrastructure.
aquasecurity / trivy-operator
Kubernetes-native security toolkit
vigolium / vigolium
Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision
smallstep / certificates
🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.
projectdiscovery / naabu
A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests
future-architect / vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
ibnaleem / gosearch
🔍 Search anyone's digital footprint across 300+ websites
zmap / zgrab2
Fast Application Layer Scanner
thebanri / limoni
Terminal UI engine for Go that tests can click and AI agents can drive (MCP). Zero-allocation rendering, immediate mode + Elm architecture, 3D, images, charts, accessibility, WebAssembly.
Bearer / bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
kubescape / kubescape
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
claudiodangelis / qrcp
:zap: Transfer files over wifi from your computer to your mobile device by scanning a QR code without leaving the terminal.
volcano-sh / volcano
A Cloud Native Batch System (Project under CNCF)
orneryd / NornicDB
Nornicdb is a distributed low-latency, Graph+Vector, Temporal MVCC with all sub-ms HNSW search, graph traversal, and writes. Using Neo4j Bolt/Cypher and qdrant's gRPC means you can switch with no changes while adding intelligent features like schemas, managed embeddings, reranking+llm, GPU accel, Auto-TLP, Policy-based Memory Decay, and MCP server.
boostsecurityio / poutine
poutine, a supply chain vulnerability scanner for build pipelines
MatinSenPai / Gemini-Config-Checker
Chain region scanner: find proxy configs that get you into Google AI Studio and Gemini (signed-in browser check, anti-DPI, Windows/macOS/Linux/Android)
JaffaQuake / Star-Wars-Galactic-Racer-HOSAS-HOTAS-Binder
Galactic Racer HOSAS/HOTAS Bridge is a Windows utility that converts flight sticks, throttles, rudder pedals, and mapped buttons into Xbox and keyboard inputs for Star Wars: Galactic Racer, with custom HOSAS driving logic, HOTAS support and a few other goodies I've fit in there. Hoping smarter folks than I can make this even better!
zan8in / afrog
A Security Tool for Bug Bounty, Pentest and Red Teaming.
edoardottt / cariddi
Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
unkn0wn-root / resterm
Terminal API client for HTTP, GraphQL, gRPC, WebSocket and SSE. Plain .http files you can diff and version, with scripted tests, workflows, mocks, recorder, and a CLI runner for CI.
praetorian-inc / titus
High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.
ntthanh2603 / gemini-web-to-api
✨Reverse-engineered API for Gemini web app. It can be used as a genuine API key from OpenAI, Gemini, and Claude.
p10node / k10s
Kubernetes TUI you can click. Instant search, logs/exec/port-forward, 7 themes, context-aware AI. Single Go binary.
TarocchiLive / arcana-world
Arcana World 是一款基于 Go 的 bilibili 直播姬 + 弹幕姬
IBAX-io / go-ibax
An innovative Blockchain Protocol Platform, which everyone can deploy their own applications quickly and easily, such as Dapp, DeFi, DAO, Cross-Blockchain transactions, etc.
dwisiswant0 / crlfuzz
A fast tool to scan CRLF vulnerability written in Go