usestrix / strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
usestrix / strix
xonsh / xonsh
🐚 Python-powered shell. Full-featured, cross-platform and AI-friendly.
apache / caldera
Automated Adversary Emulation Platform
infobyte / faraday
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.
DefectDojo / django-DefectDojo
Open-Source Unified Vulnerability Management, DevSecOps & ASPM
GH05TCREW / pentestagent
PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.
ossf / cve-bin-tool
The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.
fkie-cad / FACT_core
Firmware Analysis and Comparison Tool
berylliumsec / nebula
Cybersecurity Harness
aws-solutions / aws-waf-security-automations
This solution automatically deploys a single web access control list (web ACL) with a set of AWS WAF rules designed to filter common web-based attacks.
flosell / trailscraper
A command-line tool to get valuable information out of AWS CloudTrail
google / turbinia
Automation and Scaling of Digital Forensics Tools
CycodeLabs / raven
CI/CD Security Analyzer
pablosnt / rekono
Offensive security platform that automates attack surface discovery and vulnerability management
CybercentreCanada / assemblyline
Assemblyline 4: File triage and malware analysis
zricethezav / h1domains
HackerOne "in scope" domains
CrowdStrike / falconpy
The CrowdStrike Falcon SDK for Python
BushANQ / DRX-Operator
—
ErSilh0x / VULNaware
Open-source vulnerability prioritization engine that enriches scanner findings with vulnerability intelligence, identifies urgent risks, and automates alerts and ITSM ticketing.
MorDavid / NucleiSniper
AI-powered Nuclei template prioritization using deep target fingerprinting and TypeSafe Jev to surface relevant security findings faster.