rawfilejson / awesome-osint-arsenal
OSINT & recon toolkit // 100+ tools, one-command installer, SOCMINT, GEOINT, network recon, dark web, forensics & more.
rawfilejson / awesome-osint-arsenal
edoardottt / awesome-hacker-search-engines
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
community-scripts / ProxmoxVE
Proxmox VE Helper-Scripts (Community Edition)
hwdsl2 / setup-ipsec-vpn
Set up your own IPsec VPN server in just a few minutes, with IPsec/L2TP, Cisco IPsec and IKEv2. Supports Ubuntu, Debian, CentOS/RHEL, Alpine Linux and Raspberry Pi OS. Includes client config and management scripts.
drduh / macOS-Security-and-Privacy-Guide
Community guide to securing and improving privacy on macOS.
google / oss-fuzz
OSS-Fuzz - continuous fuzzing for open source software.
telekom-security / tpotce
๐ฏ T-Pot - The All In One Multi Honeypot Platform ๐
toniblyx / my-arsenal-of-aws-security-tools
List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
six2dez / reconftw
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
v1s1t0r1sh3r3 / airgeddon
This is a multi-use bash script for Linux systems to audit wireless networks.
hwdsl2 / docker-ipsec-vpn-server
Docker image to run an IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2. Auto-generates server config and supports VPN client setup on Linux, Windows, macOS, iOS and Android.
The-Z-Labs / linux-exploit-suggester
Linux privilege escalation auditing tool
Security-Onion-Solutions / securityonion
Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.
mitchellkrogza / nginx-ultimate-bad-bot-blocker
Nginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DDOS, Wordpress Theme Detector Blocking and Fail2Ban Jail for Repeat Offenders
Astrosp / Awesome-OSINT-List
๐ก Comprehensive collection of OSINT tools for cybersecurity professionals, researchers, and bug bounty hunters. Topics: information gathering, reverse search, red team, trust & safety, AI.
BrowserBox / BrowserBox
๐๐บ๐ธ๐ฝSecure remote browsing anywhere, any way you like it.
nestybox / sysbox
An open-source, next-generation "runc" that empowers rootless containers to run workloads such as Systemd, Docker, Kubernetes, just like VMs.
e-m-b-a / emba
EMBA - The firmware security analyzer
BlackArch / blackarch
An ArchLinux based distribution for penetration testers and security researchers.
hwdsl2 / wireguard-install
WireGuard VPN server installer for Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS, Fedora, openSUSE and Raspberry Pi OS. Includes interactive setup and client management.
ComplianceAsCode / content
Security automation content in SCAP, Bash, Ansible, and other formats
0xSteph / pentest-ai-agents
Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.
lefayjey / linWinPwn
linWinPwn is a bash script that streamlines the use of a number of Active Directory tools
eugene1g / agent-safehouse
Sandbox your local AI agents so they can read/write only what they need
konstruktoid / hardening
Hardening Ubuntu. Systemd edition.
ashishb / osx-and-ios-security-awesome
OSX and iOS related security tools
hwdsl2 / openvpn-install
OpenVPN server installer for Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS, Fedora, openSUSE, Amazon Linux and Raspberry Pi OS. Includes interactive setup and client management.
Safe3 / uusec-waf
Industry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.
wireghoul / graudit
grep rough audit - source code auditing tool
drduh / pwd.sh
Manage secrets with Bash and GnuPG symmetric encryption
tclahr / uac
UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.
ViRb3 / magisk-frida
๐ Run frida-server on boot with Magisk, always up-to-date
aquasecurity / trivy-action
Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities
bivlked / amneziawg-installer
Install your own AmneziaWG 3.1 VPN server on a fresh Ubuntu or Debian VPS with one command. Made for networks that block WireGuard. No Docker, QR-code import, 2.0 on request for routers.
Athena-OS / athena
Athena OS is a Arch/Nix-based distro focused on Cybersecurity. Learn, practice and enjoy with any hacking tool!
wazuh / wazuh-docker
Wazuh - Docker containers
lord-alfred / ipranges
๐จ List all IP ranges from: Google (Cloud & GoogleBot), Bing (Bingbot), Amazon (AWS), Microsoft, Oracle (Cloud), GitHub, Facebook (Meta), OpenAI (GPTBot) and other with daily updates.
burghardt / easy-wg-quick
Creates Wireguard configuration for hub and peers with ease
ovh / debian-cis
PCI-DSS compliant Debian 12/13 hardening
Chocolate4U / Iran-v2ray-rules
Enhanced v2ray/xray and v2ray/xray-clients routing rules with built-in Iranian domains and a focus on security and adblocking.
GitHubSecurityLab / gh-secure
A GitHub CLI extension to enable security features on repositories following best practices from GitHub Security Lab.
systemd / particleos
โธญ An image-based, secure OS, built on top of various Linux distributions
drduh / Purse
Manage secrets with Bash and GnuPG asymmetric encryption (YubiKey)
raphabot / awesome-cybersecurity-agentic-ai
โ
Kicksecure / security-misc
Miscellaneous Linux security hardening settings for Kicksecure and derivatives
DouglasFreshHabian / AndroidForensics
Automated Android forensic toolkit: extract device info, apps, contacts, call logs, SMS, system logs, and more via ADB for security audits and investigations.
WMAL / kodachios
Kodachi OS is a Debian-based privacy & security OS by Warith Al Maawali, built for uncompromising privacy, anonymity, and reliability. It pairs hardened defaults with a curated toolkit for private browsing, advanced networking, and incident response, all in an intuitive interface.
kyverno / policies
Kyverno policies for security and best practices
0x10debug / vps-security-enhancement-scripts
VPS Handbook โ The Bedside Book for VPS & Cloud Ops (Script + 8-Chapter Handbook + Cheatsheets)
immanuwell / k16s-exam-simulator
K16S - CKA/CKS lab that could actually break kubelet, systemd, containerd, static pods, etcd and certificates (not kind)
buybitart / cyclepatrol
Bash tool for on-foot Wi-Fi security checks in a loop, with evidence reports. (re-invented wifi WarDriving)
UseOSINT / Skills
28 OSINT Agent Skills that turn Cursor, Claude & AI coding agents into a full open-source intelligence platform โ reconnaissance, attribution, GEOINT, breach checks & due diligence. Ethical, sourced, passive-first.
yingfff123 / AtlasX
ไผไธๆด้ฒ้ขๆถ้ไธๆ็ปญ็ๆง๏ผASM๏ผ่ชๆ็ฎก็ณป็ป๏ผๅคๆบ้้ใๅญๆดปไธๆ็บนๅฏๅใ้ฃ้ฉ็บฟ็ดขไธๅๆดๅฏน็ งใๆฏๆ Linux/Docker ไธ้ฎ้จ็ฝฒใ
The-AIE / the-gibson
A portable, self-improving SDLC harness for agent fleets โ plan โ issues โ build โ test โ review โ UX-eval โ security โ ship, on any runtime (Claude Code, Codex, Grok, Hermes). Apache-2.0.
sanjarbiy / bugbountyrules
Behavioral-discipline skill turning an AI agent into a methodical, non-robotic bug-bounty & pentest hunter - 42 always-on rules: scope, coverage, no false positives, never quits early.
filonux / Enkripta
Encrypts folders and files on Linux Mint (Cinnamon/Nemo) using AES-256, making it feel like a native part of the system: double-click on the desktop, right-click in Nemo, and a custom icon for encrypted files. Everything is installed with a single script, with no unusual dependencies.