OSINT-Experts-Society / Consensus-OSINT

🔎 Username, email & phone OSINT — 9,700+ lookup checks from 19 projects, with profile enrichment, bulk searches, evidence graphs and expert-reviewed updates.

jumpserver / jumpserver

JumpServer is an Open-source Privileged Access Management (PAM) platform with AI-powered capabilities, providing DevOps and IT teams a unified workspace to securely access SSH, RDP, Kubernetes, databases, websites, RemoteApp, VirtualApp, and more.

eosphoros-ai / DB-GPT

open-source agentic AI data assistant for the next generation of AI + Data products.

fail2ban / fail2ban

Daemon to ban hosts that cause multiple authentication errors

maurosoria / dirsearch

Web path scanner

bunkerity / bunkerweb

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

NVIDIA / garak

the LLM vulnerability scanner

PyCQA / bandit

Bandit is a tool designed to find common security issues in Python code.

bleachbit / bleachbit

BleachBit system cleaner for Windows and Linux

lintsinghua / DeepAudit

DeepAudit：人人拥有的 AI 黑客战队，让漏洞挖掘触手可及。小白一键部署运行，自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ，一键生成报告。支持中转站。​让安全不再昂贵，让审计不再复杂。

AzeemIdrisi / PhoneSploit-Pro

An all-in-one hacking tool to remotely take over Android devices.

awarexone / Agentic-Bug-Hunter

AI-powered bug bounty hunting toolkit that works with or without subscription.

securo-finance / securo

Open-source personal finance manager. Self-hosted, privacy-first.

gadievron / raptor

Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents, and skills, and orchestrating security tool usage, we configure the agent for adversarial thinking, and perform research or attack/defense operations.

nabla-c0d3 / sslyze

Fast and powerful SSL/TLS scanning library.

coreruleset / coreruleset

OWASP CRS (Official Repository)

samugit83 / redamon

Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens PRs that fix what it finds. MCP both ways: plug in any MCP server as a tool, or drive RedAmon from Claude Code or your own agent.

Alfredredbird / tookie-osint

Tookie is a advanced OSINT information gathering tool that finds social media accounts based on inputs.

elementalsouls / Claude-OSINT

8 Claude skills · 100+ recon capabilities · 80 secret-regex patterns · 80+ dorks · 9 read-only credential validators · 27 attack-path templates · ~10,000 lines of structured tradecraft. Drop-in SKILL.md files that turn Claude into a god-mode external recon operator for authorized red-team and bug-bounty engagements.

dgunning / edgartools

Read and analyze SEC EDGAR filings in Python. 10-K, 8-K, XBRL financials, Form 3/4/5, 13F, ADV — clean API, well-typed, MIT-licensed.

cisco-ai-defense / skill-scanner

Security Scanner for Agent Skills

onekey-sec / unblob

Extract files from any kind of container formats

OpenOSINT / OpenOSINT

AI-powered OSINT agent with interactive REPL, MCP server, and CLI. 20 tools. Works with Claude, GPT-4, or local models. For authorized security research only.

scadastrangelove / awesome-ai-security-tools

A curated list of public-source, research, and commercial tools for AI security and AI-assisted cybersecurity — autotriage, agent security, AI/ML supply chain, pentest agents, AI SAST, LLM-driven fuzzing, threat intelligence, SOC/SIEM triage, reverse engineering, LLM red-teaming, and more.

Dataojitori / nocturne_memory

A lightweight, rollbackable, and visual Long-Term Memory Server for MCP Agents. Say goodbye to Vector RAG and amnesia. Empower your AI with persistent, graph-like structured memory across any model, session, or tool. Drop-in replacement for OpenClaw.

canarybyte / veridrop

在线检测：veridrop.app｜AI API 中转站检测工具：Claude 中转站检测、OpenAI 中转站检测、Gemini 中转站检测，中转站真伪检测、长上下文验证、思维签名验证、中转站红黑榜，自托管开源。

jagmarques / asqav-sdk

Python and TypeScript SDKs for verifiable evidence of AI agent actions. Signed receipts, policy enforcement, audit trails. Works with LangChain, CrewAI, MCP.

chris-ritsen / samsung-tv-root

Samsung QN90B and QN90F root

AshiteshSingh / PQC-post-quantum-signal-

Production & research-grade Post-Quantum KEM Double Ratchet protocol (FIPS 203 ML-KEM-768 + FIPS 204 ML-DSA-65). Resilient against Harvest-Now-Decrypt-Later FTQC attacks

StevenBlack / hosts

🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.

trailofbits / algo

Set up a personal VPN in the cloud

SWE-agent / SWE-agent

SWE-agent takes a GitHub issue and tries to automatically fix it, using your LM of choice. It can also be employed for offensive cybersecurity or competitive coding challenges. [NeurIPS 2024]

prowler-cloud / prowler

This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.

OWASP / mastg

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.

blacklanternsecurity / bbot

The recursive internet scanner for hackers. 🧡

xonsh / xonsh

🐚 Python-powered shell. Full-featured, cross-platform and AI-friendly.

JerBouma / FinanceDatabase

This is a database of 300.000+ symbols containing Equities, ETFs, Funds, Indices, Currencies, Cryptocurrencies and Money Markets.

bridgecrewio / checkov

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

apache / caldera

Automated Adversary Emulation Platform

bee-san / pyWhat

🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙‍♀️

netalertx / NetAlertX

Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.

onionshare / onionshare

Securely and anonymously share files, host websites, and chat with friends using the Tor network

reddelexc / hackerone-reports

Top disclosed reports from HackerOne

microsoft / agent-governance-toolkit

AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.

Azure / Azure-Sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

cloud-custodian / cloud-custodian

Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources

KellerJordan / modded-nanogpt

NanoGPT (124M) in 90 seconds

Giskard-AI / giskard-oss

🐢 Open-Source Evaluation & Testing library for LLM Agents

OWASP / Nettacker

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

JerBouma / FinanceToolkit

Transparent and Efficient Financial Analysis

iflytek / astron-rpa

Agent-ready RPA suite with out-of-the-box automation tools. Built for individuals and enterprises.

google / google-ctf

Google CTF

DefectDojo / django-DefectDojo

Open-Source Unified Vulnerability Management, DevSecOps & ASPM

microsoft / PyRIT

The Python Risk Identification Tool for generative AI (PyRIT) is an open source framework built to empower security professionals and engineers to proactively identify risks in generative AI systems.

intuitem / ciso-assistant-community

CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 200+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.

meta-llama / PurpleLlama

Set of tools to assess and improve LLM security.

jtesta / ssh-audit

SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

jekil / awesome-hacking

Awesome hacking is an awesome collection of hacking tools.

cea-sec / miasm

Reverse engineering framework in Python

TracecatHQ / tracecat

Open-source security automation platform for teams and AI agents