BullsEye0 / ghost_eye

Ghost Eye Informationgathering Footprinting Scanner and Recon Tool Release. Ghost Eye is an Information Gathering Tool I made in python 3. To run Ghost Eye, it only needs a domain or ip. Ghost Eye can work with any Linux distros if they support Python 3. Author: Jolanda de Koff

The-Art-of-Hacking / websploit

This is a learning created by Omar Santos (@santosomar) for different Cybersecurity training sessions. It includes many intentionally vulnerable applications running in Docker containers and thousands of cybersecurity resources.

OpenCTI-Platform / connectors

OpenCTI Connectors

vognik / maltego-telegram

🔎 OSINT Maltego Transforms for investigating Telegram channels, groups, and users, including deanonymization via stickers, forwarded messages, similar channels, deleted posts, and more.

CybercentreCanada / assemblyline

Assemblyline 4: File triage and malware analysis

google / mcp-security

—

GACWR / OpenUBA

A robust, and flexible open source User & Entity Behavior Analytics (UEBA) framework used for Security Analytics. Developed with luv by Data Scientists & Security Analysts from the Cyber Security Industry. [BETA]

aixisstudio / Snitch

Real-time network traffic visualizer — see every connection your computer makes. Privacy-first, 100% local. / Visualiseur de trafic réseau en temps réel, 100% local.

martian56 / redcell

AI red-team platform. Autonomous LLM agents run a penetration test end to end inside a Kali container and write the report. LangGraph plan/act engine, provider-agnostic models via LiteLLM, PDF/JSON/SARIF output. FastAPI + React.

s4ntrx / Cybersecurity-Threats-Guide

Cybersecurity Threats & Vulnerabilities Guide is a comprehensive educational resource that provides detailed documentation, detection scripts, and prevention strategies for various cybersecurity threats.

mubix / cyber-resume-reviewer-skill

A skill to help cybersecurity folks update and tweak their resume

devZero-Security / redStackPRO

A canvas for red team infrastructure and cyber ranges. Compose a topology, export runnable Terraform and Ansible, and deploy it yourself. Your cloud credentials never leave your machine.

OSINT-Experts-Society / Consensus-OSINT

🔎 Username, email & phone OSINT — 9,700+ lookup checks from 19 projects, with profile enrichment, bulk searches, evidence graphs and expert-reviewed updates.

s4ntrx / S4ntrx-Bot

The project is a multi-user cybersecurity education chatbot built with Flask, aimed at a school/classroom project.

aaravshah1311 / Agent-2

An autonomous AI agentic harness built to code anything, automate terminals, perform cybersecurity tasks, and execute complex real-world workflows with minimal human intervention. From writing and debugging code to analyzing systems, managing files, running commands, and orchestrating tools, Agent-2 turns simple prompts into autonomous execution.

lordx64 / pentestkit

Autonomous multi-agent pentest framework — plans, exploits, verifies (proof-required), CVSS-scores and writes client-ready reports. 104/104 (100%) on the XBOW validation benchmarks, powered by Kimi K3.

KorekKayu / IKONA-Security

🛡️ Comprehensive Cybersecurity Arsenal, Bug Bounty Payloads & Security Audit Tools by IKONA ONI

eldarshiraliyev / BugScanner

🐛 Advanced web vulnerability scanner with 5-rule false-positive reduction, WAF evasion, and modern HTML reports

mouteee / autonomous-offensive-llm-handbook

Step-by-step handbook for building autonomous security agents with clear limits, runnable lessons, diagrams, and honest evidence.

BushANQ / DRX-Operator

—

shaheeryasirofficial / SmuggleMyPayload

SmuggleMyPayload generates HTML pages that embed and reconstruct files client-side using JavaScript. The toolkit offers multiple HTML Smuggling techniques, payload encoding options, JavaScript variations, and pre-built HTML templates.

Y6THAY / Network_Traffic_Analyzer

A real-time, terminal-based network traffic analyzer built with Python, Scapy, and Rich. Captures live packets using multi-threading to display real-time protocol breakdowns and top active IP addresses in a dynamic CLI dashboard.

Blackfrost-AI / Cyber-Frost-Harness

Native red, blue, and purple security-agent harness for CYBER-FROST

P-BitM-Framework / P-BitM

P-BitM is a containerized platform for controlled and weaponized Browser-in-the-Middle

DevCop95 / shodan_reconsx

Portable passive hostname reconnaissance through Shodan CTL

ErSilh0x / VULNaware

Open-source vulnerability prioritization engine that enriches scanner findings with vulnerability intelligence, identifies urgent risks, and automates alerts and ITSM ticketing.

Tangruwo / RuwoScan

基于多智能体架构与自主决策机制，配合大语言模型的理解能力，输入自然语言指令，AI 自动完成从目标侦察到漏洞验证的完整渗透测试流程。

cleonaia / hack_cameraWeb

This project is used analyzing my own webcam’s network traffic from Kali Linux. The workflow uses Ettercap for an ARP MiTM demonstration, Wireshark for traffic analysis and Metasploit as an external lab tool. This repository also includes camera discovery and authenticated RTSP playback.

MorDavid / NucleiSniper

AI-powered Nuclei template prioritization using deep target fingerprinting and TypeSafe Jev to surface relevant security findings faster.

dotdna-io / assetatlas

Open-source asset inventory — turn scattered, contradictory tool data into one reliable inventory, then chat with it using the LLM of your choice. Tagging, posture rules, and alerting built in.

CorleoneSalute / SHADOW-BLOCKER-BLOCKLIST

Leave the shadows behind. Block trackers. Protect your privacy.

brooklynkray / in-the-dark

A guided cybersecurity reconnaissance and enumeration tool that helps learners understand what they discover and decide what to investigate next.

prox0959 / CyberCodex

Autonomous 23-Source Zero-Cost OSINT, Binary Image Forensics (EXIF/GPS/Stego), Data Breach/Leak & Threat Intelligence Engine in Pure Python

weidutech / PentestPi

Autonomous Penetration Testing Agent Framework with External State Memory & Anti-False-Falsification Guardrails.

kaifcodec / phonsint

🕵️‍♂️ Advanced phone number OSINT suite engineered for silent reconnaissance. Extracts masked emails, profile avatars and uncovers cross-platform account registrations, and enriches identity footprints with zero SMS alerts.

SagarBiswas-MultiHAT / NmapScanningTool

A secure, production-ready Python CLI wrapper for Nmap that makes powerful scans easy and repeatable. Includes 12 built-in profiles (SYN, aggressive, OS detection, vulnerability/NSE checks), interactive and non-interactive modes, strict input validation, Docker support, CI, and script-friendly flags for automation.