rawfilejson / awesome-osint-arsenal
OSINT & recon toolkit // 100+ tools, one-command installer, SOCMINT, GEOINT, network recon, dark web, forensics & more.
rawfilejson / awesome-osint-arsenal
edoardottt / awesome-hacker-search-engines
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
ohmyzsh / ohmyzsh
🙃 A delightful community-driven (with 2,500+ contributors) framework for managing your zsh configuration. Includes 300+ optional plugins (rails, git, macOS, hub, docker, homebrew, node, php, python, etc), 140+ themes to spice up your morning, and an auto-update tool that makes it easy to keep up with the latest updates from the community.
google / oss-fuzz
OSS-Fuzz - continuous fuzzing for open source software.
testssl / testssl.sh
Testing TLS/SSL encryption anywhere on any port
six2dez / reconftw
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
v1s1t0r1sh3r3 / airgeddon
This is a multi-use bash script for Linux systems to audit wireless networks.
ohmybash / oh-my-bash
A delightful community-driven framework for managing your bash configuration, and an auto-update tool so that makes it easy to keep up with the latest updates from the community.
deanpeters / Product-Manager-Skills
Product Management skills framework built on battle-tested methods for Claude Code, Cowork, Codex, and AI agents.
masonr / yet-another-bench-script
YABS - a simple bash script to estimate Linux server performance using fio, iperf3, & Geekbench
bats-core / bats-core
Bash Automated Testing System
Astrosp / Awesome-OSINT-List
📡 Comprehensive collection of OSINT tools for cybersecurity professionals, researchers, and bug bounty hunters. Topics: information gathering, reverse search, red team, trust & safety, AI.
leebaird / discover
Custom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Ubuntu. Limited support for Kali Linux.
e-m-b-a / emba
EMBA - The firmware security analyzer
BlackArch / blackarch
An ArchLinux based distribution for penetration testers and security researchers.
mvscode / frps-onekey
Frp server one-click configuration script. The script obtains the latest Frp version by default
spiritLHLS / Oracle-server-keep-alive-script
服务器资源占用脚本(甲骨文服务器保活脚本)(Oracle Server Keep Alive Script)
0xSteph / pentest-ai-agents
Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.
lefayjey / linWinPwn
linWinPwn is a bash script that streamlines the use of a number of Active Directory tools
ffffffff0x / f8x
红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool
openstack / devstack
System for quickly installing an OpenStack cloud from upstream git for testing and development. Mirror of code maintained at opendev.org.
webdevops / Dockerfile
:package: Dockerfiles from WebDevOps for PHP, Apache and Nginx
Athena-OS / athena
Athena OS is a Arch/Nix-based distro focused on Cybersecurity. Learn, practice and enjoy with any hacking tool!
lord-alfred / ipranges
🔨 List all IP ranges from: Google (Cloud & GoogleBot), Bing (Bingbot), Amazon (AWS), Microsoft, Oracle (Cloud), GitHub, Facebook (Meta), OpenAI (GPTBot) and other with daily updates.
peonist-ai / halogen-flash-server
The fastest way to run Qwen3.8-Flash-Next on Strix Halo (gfx1151)
Frogging-Family / nvidia-all
Nvidia driver latest to 396 series AIO installer
zhongfly / mpv-winbuild
Use Github Action to build mpv for Windows with latest commit.
R0GGER / public-iperf3-servers
A list of public iPerf3 servers...
testnet0 / testnet
TestNet资产管理系统（资产管理|信息收集|暴露面管理|子域名扫描|C段扫描|端口扫描|漏洞扫描|Hunter|Fofa）
GhostTroops / TOP
TOP All bugbounty pentesting CVE-2023- POC Exp RCE example payload Things
enomothem / Whoamifuck
用于Linux应急响应，快速排查异常用户登录情况和入侵信息排查，准确定位溯源时间线，高效辅助还原攻击链。
appium / appium-docker-android
Appium Server setup to automate android testing on real devices
Graylog2 / docker-compose
A set of Docker Compose files that allow you to quickly spin up a Graylog instance for testing or demo purposes.
levnikolaevich / claude-code-skills
Standalone skills for Claude Code and Codex: product discovery, architecture, implementation, technical foundations, reviews and delivery, with explicit scope and verification.
rabbitmq / erlang-rpm
Latest Erlang/OTP releases packaged as a zero dependency RPM, just enough for running RabbitMQ
lisenet / kubernetes-homelab
Building a Kubernetes homelab using kubeadm, Ansible, Helm and Terraform.
stunnel / static-curl
Static cURL with latest features
vernette / ipregion
🌎 Multi-source IP geolocation tester - check how streaming, GeoIP, and CDN services detect your location
sno-ai / sno-station-skills
Sno Station Skills: 31 tested skills that turn Claude Code and Codex into one working team. Cross-vendor peer review, automatic handoff when an agent hits its quota, a one-page morning brief, work orders with proof, and a nightly loop that learns from your own sessions. Open source, installed with one sno setup.
ejboy / agent-scripts
Token-efficient, local-first CLI tools for coding agents - compact Maven, npm/Node, and Go test output plus reusable development helpers.
xsser / dig
By spoofing the domain name response information of dig to deceive DeepSeek/GLM into implementing automated penetration testing for you.通过修改dig的域名返回信息欺骗让deepseek /glm为你实现自动化的渗透测试
azampatti / Qwen3.8-Flash-Next-Int4-FAST
Recipe for the fastest 4bit qwen3.8FlashNext
LambdaTest / rook
rook by TestMu AI: Agent Assurance from the terminal. Test how your AI agents actually behave across workflows, tools, and actions, and catch failures and vulnerabilities before they ship.
buybitart / cyclepatrol
Bash tool for on-foot Wi-Fi security checks in a loop, with evidence reports. (re-invented wifi WarDriving)
nexovir / Forbidra
A bug bounty tool for bypassing 401/403 access restrictions and testing endpoint accessibility.
Lyutoon / macOS_DSH_LPE
macOS LPE, tested on 26.5.2, fixed in 26.6
UseOSINT / Skills
28 OSINT Agent Skills that turn Cursor, Claude & AI coding agents into a full open-source intelligence platform — reconnaissance, attribution, GEOINT, breach checks & due diligence. Ethical, sourced, passive-first.
tillmeier / claude-code-guardrails
Incident-derived guardrail hooks and a plan→implement→verify→crosscheck delivery loop for Claude Code. Hook cost measured; 35 bats tests.
The-AIE / the-gibson
A portable, self-improving SDLC harness for agent fleets — plan → issues → build → test → review → UX-eval → security → ship, on any runtime (Claude Code, Codex, Grok, Hermes). Apache-2.0.
sanjarbiy / bugbountyrules
Behavioral-discipline skill turning an AI agent into a methodical, non-robotic bug-bounty & pentest hunter - 42 always-on rules: scope, coverage, no false positives, never quits early.
filonux / Browser-Cleaner
Bash script whose main purpose is to clean browsers in the simplest, most practical, and fastest way possible. It supports 14 different browsers and offers multiple automatic cleaning options. It is recommended for Firefox, LibreWolf, and Tor (my favorites).
novotnyllc / tart-xcode-runner
Run isolated Xcode builds and XCUITests in reusable, resettable Tart macOS VMs.
shellharbor / laraship
Laraship: one-command Laravel and Filament deployment for Ubuntu. A Bash script that sets up isolated Docker containers per site, a shared nginx reverse proxy with Let's Encrypt SSL, PostgreSQL or MySQL (containerized or native), Redis, cron and Basic Auth. Includes lifecycle tools and an end-to-end bats test suite with CI.
tonyd2wild / DGX-Spark-Hard-Poweroff-Fix
DGX Spark (GB10) random hard power-off: how to diagnose the log-less crash signature and stop it with a GPU clock cap. Field-tested fix + systemd persistence.