rawfilejson / awesome-osint-arsenal

OSINT & recon toolkit // 100+ tools, one-command installer, SOCMINT, GEOINT, network recon, dark web, forensics & more.

edoardottt / awesome-hacker-search-engines

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

toniblyx / my-arsenal-of-aws-security-tools

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

six2dez / reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

The-Z-Labs / linux-exploit-suggester

Linux privilege escalation auditing tool

Security-Onion-Solutions / securityonion

Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.

Astrosp / Awesome-OSINT-List

📡 Comprehensive collection of OSINT tools for cybersecurity professionals, researchers, and bug bounty hunters. Topics: information gathering, reverse search, red team, trust & safety, AI.

e-m-b-a / emba

EMBA - The firmware security analyzer

BlackArch / blackarch

An ArchLinux based distribution for penetration testers and security researchers.

ComplianceAsCode / content

Security automation content in SCAP, Bash, Ansible, and other formats

0xSteph / pentest-ai-agents

Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.

konstruktoid / hardening

Hardening Ubuntu. Systemd edition.

wireghoul / graudit

grep rough audit - source code auditing tool

Athena-OS / athena

Athena OS is a Arch/Nix-based distro focused on Cybersecurity. Learn, practice and enjoy with any hacking tool!

GitHubSecurityLab / gh-secure

A GitHub CLI extension to enable security features on repositories following best practices from GitHub Security Lab.

WMAL / kodachios

Kodachi OS is a Debian-based privacy & security OS by Warith Al Maawali, built for uncompromising privacy, anonymity, and reliability. It pairs hardened defaults with a curated toolkit for private browsing, advanced networking, and incident response, all in an intuitive interface.

sanjarbiy / bugbountyrules

Behavioral-discipline skill turning an AI agent into a methodical, non-robotic bug-bounty & pentest hunter - 42 always-on rules: scope, coverage, no false positives, never quits early.