All repos — GH Trending Explorer

ARTEX · AI autonomous penetration testing system (multi-agent LLM, Go + Next.js) · AI 自主渗透测试系统 · 百度 agent+ 攻防挑战赛冠军

Distributed security asset discovery platform covering subdomain enumeration, port scanning, vulnerability scanning, and page monitoring.

security osint scanner

projectdiscovery / nuclei

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

aquasecurity / trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

hashicorp / terraform

Terraform core: a CLI and graph engine for declaring, planning, and applying infrastructure changes from versioned configuration files.

devops cloud automation

ltaoo / wx_channels_download

微信视频号下载器

trufflesecurity / trufflehog

Scans repositories, filesystems, and chats for leaked credentials, then verifies whether each one is still live.

security devops developer-tools

heartleo / zlib

A command-line tool for Z-Library. Search, download, send to Kindle, and integrate with AI agents.

anchore / grype

A vulnerability scanner for container images and filesystems

tbphp / gpt-load

Self-hosted AI gateway for multi-channel, multi-credential setups — API keys and subscription accounts, scheduling, failover, request logs and usage. 自托管 AI 网关：多渠道多凭据统一接入，含密钥与订阅账号、调度容错、日志与用量。

milvus-io / milvus

Milvus is a high-performance, cloud-native vector database built for scalable vector ANN search

shadow1ng / fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)

pipelab-org / pipelock

Open-source AI agent firewall for MCP security and agent egress. Scans mediated HTTP, MCP, A2A, and WebSocket traffic for exfiltration, SSRF, and prompt injection, and emits mediator-signed action receipts: verifiable audit evidence from outside the agent.

PatchMon / PatchMon

Linux Patch Management & Automation Platform

akira-init1 / ChannelTerm

Shared terminal sessions for humans and AI agents, starting with serial and hardware debugging.

googleapis / mcp-toolbox

MCP Toolbox for Databases is an open source MCP server for databases.

google / osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

nobiyou / wx_channel

微信视频号下载工具

betterleaks / betterleaks

Find leaked secrets everywhere.

sartoopjj / thefeed

DNS-based feed reader and lite messenger for environments where only DNS queries work. Read Telegram channels and public X accounts, and exchange end-to-end-encrypted messages with other users — all over DNS.

goreleaser / goreleaser

Release engineering, simplified

projectdiscovery / naabu

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

291-Group / LAN-Orangutan

LAN-Orangutan is a self-hosted network discovery tool. Find every device on your LAN, label and group them, snapshot your network and compare it later, and get flagged when something unexpected shows up. Single binary, no setup, Tailscale built in. Built by 291 Group.

nanolathe-gg / nanolathe

Total Annihilation engine reimplementation in Go.

future-architect / vuls

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

kubescape / kubescape

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

flannel-io / flannel

flannel is a network fabric for containers, designed for Kubernetes

k1LoW / tbls

tbls is a CI-Friendly tool to document a database, written in Go.

autobrr / autobrr

Modern, easy to use download automation for torrents and usenet.

rusq / slackdump

Save or export your private and public Slack messages, threads, files, and users locally without admin privileges.

dwisiswant0 / crlfuzz

A fast tool to scan CRLF vulnerability written in Go

vigolium / vigolium

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision

raskrebs / sonar

CLI tool for inspecting and managing services listening on localhost ports

projectdiscovery / urlfinder

A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.

praetorian-inc / titus

High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.

boostsecurityio / poutine

poutine, a supply chain vulnerability scanner for build pipelines

mitis-cloud / understudy

Best-effort high availability for single-replica Kubernetes workloads: no downtime from announced node disruptions (drains, upgrades, consolidation, spot reclaims) without a standing second replica.

swaggo / swag

Automatically generate RESTful API documentation with Swagger 2.0 for Go.

claudiodangelis / qrcp

:zap: Transfer files over wifi from your computer to your mobile device by scanning a QR code without leaving the terminal.

yggdrasil-network / yggdrasil-go

An experiment in scalable routing as an encrypted IPv6 overlay network

perplexityai / bumblebee

Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.

zan8in / afrog

A Security Tool for Bug Bounty, Pentest and Red Teaming.

5rahim / seanime

Open-source media server with a web interface and desktop app for anime and manga.

ibnaleem / gosearch

🔍 Search anyone's digital footprint across 300+ websites

abhinavxd / libredesk

Open-source, self-hosted customer support desk in a single binary. A lightweight alternative to Intercom, Zendesk, Chatwoot.

vmware-tanzu / sonobuoy

Sonobuoy is a diagnostic tool that makes it easier to understand the state of a Kubernetes cluster by running a set of Kubernetes conformance tests and other plugins in an accessible and non-destructive manner.

google / osv.dev

Open source vulnerability DB and triage service.

benmanns / goworker

goworker is a Go-based background worker that runs 10 to 100,000* times faster than Ruby-based workers.

Bearer / bearer

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

MatinSenPai / SenPaiScanner

A light-weight scanner for Cloudflare IPs, written in Golang

ramonvermeulen / whosthere

Local Area Network discovery tool with an interactive Terminal User Interface (TUI) written in Go. Discover, explore, and understand your LAN in an intuitive way. Knock Knock.. who's there? 🚪