splunk / security_content
Splunk Security Content
splunk / security_content
mushorg / conpot
ICS/SCADA honeypot
globaleaks / globaleaks-whistleblowing-software
GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.
huhusmang / Awesome-LLMs-for-Vulnerability-Detection
The community's most comprehensive, continuously-updated index of research on Large Language Models for software vulnerability detection — papers across function-level, repository-level, agentic, and smart-contract detection, plus datasets, benchmarks, and surveys.
ssh-mitm / ssh-mitm
SSH-MITM - ssh audits made simple
fkie-cad / FACT_core
Firmware Analysis and Comparison Tool
xaitax / SploitScan
SploitScan is a sophisticated cybersecurity utility designed to provide detailed information on vulnerabilities and associated exploits.
blacklanternsecurity / MANSPIDER
Spider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!
fuatakgun / eufy_security
Home Assistant integration to manage Eufy Security devices as cameras, home base stations, doorbells, motion and contact sensors.
Proviesec / google-dorks
Useful Google Dorks for WebSecurity and Bug Bounty
CIRCL / AIL-framework
AIL framework - Analysis Information Leak framework. Project moved to https://github.com/ail-project
jonluca / anubis
Subdomain enumeration tool
pypa / pip-audit
Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them
freelabz / secator
secator - the pentester's swiss knife
demisto / content
Demisto is now Cortex XSOAR. Automate and orchestrate your Security Operations with Cortex XSOAR's ever-growing Content Repository. Pull Requests are always welcome and highly appreciated!
Marven11 / Fenjing
专为CTF设计的Jinja2 SSTI全自动绕WAF脚本 | A Jinja2 SSTI cracker for bypassing WAF, designed for CTF
domainaware / parsedmarc
A Python package and CLI for parsing aggregate and forensic DMARC reports
owasp-dep-scan / dep-scan
OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.
topscoder / nuclei-wordfence-cve
80k+ WordPress Nuclei templates, updated daily from Wordfence intel—filter by severity/tags/CVE and scan in one line. 🚀🔒
freeipa / freeipa
Mirror of FreeIPA, an integrated security information management solution
mrwadams / attackgen
AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK framework. The tool generates tailored incident response scenarios based on user-selected threat actor groups and your organisation's details.
CERT-Polska / Artemis
A modular vulnerability scanner with automatic report generation capabilities.
DataDog / guarddog
:snake: :mag: GuardDog is a CLI tool to Identify malicious PyPI and npm packages
taranis-ai / taranis-ai
Taranis AI is an advanced Open-Source Intelligence (OSINT) tool, leveraging Artificial Intelligence to revolutionize information gathering and situational analysis.
blackhillsinfosec / WifiForge
WifiForge is a tool developed by Black Hills InfoSec to help train Pentesters on different Wi-Fi attack vectors and Wireless capabilities.
FunnyWolf / agentic-soc-platform
Agentic SOC Platform: A powerful, flexible, open-source, and agent-centric automated security operations platform (AI SOC)
Sec-Link / Argus-Agentic-SOC-Platform
An open source AI-native agentic SOC platform
test-zeus-ai / testzeus-hercules
Hercules is the world’s first open-source testing agent, enabling UI, API, Security, Accessibility, and Visual validations – all without code or maintenance. Automate testing effortlessly and let Hercules handle the heavy lifting! ⚡
larlarua / AutoCVE
Agent-driven automated CVE discovery platform for source code auditing, vulnerability verification, and report generation.
EmilStenstrom / justhtml
A pure Python HTML5 parser that just works. No C extensions to compile. No system dependencies to install. No complex API to learn.
mrwadams / stride-gpt
An AI-powered threat modeling tool that leverages OpenAI's GPT models to generate threat models for a given application based on the STRIDE methodology.
OWASP / DevSecOpsGuideline
The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.
GamehunterKaan / AutoPWN-Suite
AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.
laluka / bypass-url-parser
bypass-url-parser
berylliumsec / nebula
Cybersecurity Harness
capitalone / VulnHunter
Agentic AI security tool that applies proactive, attacker-first analysis directly to source code.
pageauc / speed-camera
A Unix, Windows, Raspberry Pi Object Speed Camera using python3, opencv, video streaming, motion tracking. Includes a Standalone Web Server , Image Search using opencv template match and a whiptail Admin Menu Interface Includes picam and webcam Plugins for motion track security camera configuration including rclone sync scripts.
tomsquest / docker-radicale
Docker image for Radicale calendar and contact server :calendar: + security :closed_lock_with_key: + addons :rocket:
danielrobbins / keychain
A manager for ssh-agent and gpg-agent, now in Python.
cisco-ai-defense / mcp-scanner
Scan MCP servers for potential threats & security findings.
secureblue / secureblue
A security-focused desktop and server linux operating system.
pikpikcu / airecon
AIRecon is an autonomous cybersecurity agent that combines a self-hosted Large Language Model (Ollama) with a Kali Linux Docker sandbox and a Textual TUI. It is designed to automate security assessments, penetration testing, and bug bounty reconnaissance — without any API keys or cloud dependency.
duo-labs / py_webauthn
Pythonic WebAuthn 🐍
farrokhi / dnsdiag
DNS Measurement, Troubleshooting and Security Auditing Toolset
aliyun / aliyun-openapi-python-sdk
The Alibaba Cloud V1.0 SDK will soon enter the Basic Security Maintenance phase and is no longer recommended for use. V2.0 SDK is available here: https://github.com/aliyun/alibabacloud-python-sdk
buffer / thug
Python low-interaction honeyclient
ail-project / ail-framework
AIL framework - Analysis Information Leak framework
stanislav-web / OpenDoor
OWASP Web Recon & Directory Discovery Platform
target / strelka
Real-time, container-based file scanning at enterprise scale
Cyber-Buddy / APKHunt
APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential security vulnerabilities in their code.
frangelbarrera / OSINT-BIBLE
Comprehensive 2026 OSINT guide — 450+ tools, AI intelligence, methodologies & ethics across 35 sections for investigation & threat intel.
asaotomo / ZipCracker
ZipCracker是Hx0战队出品的一款功能强大的Zip密码破解工具。它集成了字典攻击、掩码攻击、短明文 CRC32 枚举恢复、已知明文攻击、套娃ZIP解压等多种破解模式，并能自动修复伪加密文件。凭借其高性能与多功能的特点，ZipCracker已成为CTF比赛中的一把利器。（ZipCracker by Hx0 team is a tool for cracking passwords on Zip files, great for CTF competitions.）
ElectronicCats / CatSniffer
CatSniffer is an original multiprotocol and multiband board for sniffing, communicating, and attacking IoT (Internet of Things) devices using the latest radio IoT protocols. It is a highly portable USB stick that integrates TI CC1352, Semtech SX1262, and an RP2040 for V3 or a Microchip SAMD21E17 for V2
cdxiaodong / cain-agent
Real-world AI penetration testing engineer for authorized assessments — built-in cloud module covering AWS/Azure/GCP + Aliyun/Tencent/Huawei clouds. Built on Claude Agent SDK
FLOCK4H / Freeway
WiFi Penetration Testing & Auditing Tool
bitwire-it / ipblocklist
IP lists full of bad IPs - Updated every 2H
aws-solutions / aws-waf-security-automations
This solution automatically deploys a single web access control list (web ACL) with a set of AWS WAF rules designed to filter common web-based attacks.
pinterest / snappass
Share passwords securely
stratosphereips / StratosphereLinuxIPS
Slips, a free software behavioral Python intrusion prevention system (IDS/IPS) that uses machine learning to detect malicious behaviors in the network traffic. Stratosphere Laboratory, AIC, FEL, CVUT in Prague.
pocketpaw / pocketpaw
Your AI agent in 30 seconds. Not 30 hours. Self-hosted, open-source personal AI with desktop installer, multi-agent Command Center(Deep Work), and 7-layer security. Anthropic, OpenAI, or Ollama.