ibnaleem / gosearch
๐ Search anyone's digital footprint across 300+ websites
ibnaleem / gosearch
Netw0rkNoob / VulnClaw
ๅบไบ AI Agent + MCP ๅทฅๅ ท้พ + ๆธ้ Skill ็ผๆ๏ผ ้ ๅๅคง่ฏญ่จๆจกๅ๏ผ ่ช็ถ่ฏญ่จ่พๅ ฅ โ ่ชๅจๅฎๆใไฟกๆฏๆถ้ โ ๆผๆดๅ็ฐ โ ๆผๆดๅฉ็จ โ ๆฅๅ็ๆใๅ จๆต็จใ
brootware / awesome-cyber-security-university
๐ Because Education should be free. Contributions welcome! ๐ต๏ธ
BlackArch / blackarch
An ArchLinux based distribution for penetration testers and security researchers.
Yamato-Security / hayabusa
Hayabusa (้ผ) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
jherrodthomas / automotive-skills-suite
100+ installable Claude skills covering Engineering areas such as, ISO 26262 functional safety, ISO/SAE 21434 cybersecurity, ISO 21448 SOTIF, AIAG-VDA quality (APQP/PPAP/FMEA), Automotive SPICE, and continuous improvement tools โ every builder paired with a confirmation reviewer.
CyberStrikeus / CyberStrike
Open-source AI-powered offensive security harness for automated penetration testing.
GH05TCREW / pentestagent
PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.
samugit83 / redamon
Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens PRs that fix what it finds. MCP both ways: plug in any MCP server as a tool, or drive RedAmon from Claude Code or your own agent.
blackorbird / APT_REPORT
Interesting APT Report Collection And Some Special IOCs
Alfredredbird / tookie-osint
Tookie is a advanced OSINT information gathering tool that finds social media accounts based on inputs.
lirantal / awesome-nodejs-security
Awesome Node.js Security resources
frankwxu / digital-forensics-lab
Free hands-on digital forensics labs for students and faculty
WebBreacher / WhatsMyName
Community-maintained dataset of 700+ websites for finding accounts by username โ powers OSINT and digital footprint tools.
opencve / opencve
Vulnerability Intelligence Platform
skills / secure-code-game
Learn to code securely while having fun through our popular open source in-editor experience, designed for developers, students, and anyone curious about security. Get started for free in under 2 minutes, playing right from your browser.
ComplianceAsCode / content
Security automation content in SCAP, Bash, Ansible, and other formats
cipher387 / API-s-for-OSINT
List of API's for gathering information about phone numbers, addresses, domains etc
cisagov / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
x90skysn3k / brutespray
Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.
Idov31 / Nidhogg
Windows rootkit for Intel x64 with 25+ features, demonstrating rootkit techniques compatible with all Windows 10 and Windows 11 versions.
mitre-attack / attack-navigator
Web app that provides basic navigation and annotation of ATT&CK matrices
Shuffle / Shuffle
Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.
bst04 / CyberSources
A curated list of cybersecurity tools and resources.
beenuar / AiSOC
Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.
0xSteph / pentest-ai-agents
Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.
Jieyab89 / OSINT-Cheat-sheet
OSINT cheat sheet, list OSINT tools, wiki, dataset, article, book , red team OSINT for hackers and OSINT tips and OSINT branch. This repository will grow every time will research, there is a research, science and technology, tutorial. Please use it wisely.
notthehiddenwiki / NTHW
Not The Hidden Wiki - The largest repository of links related to cybersecurity
beelzebub-labs / beelzebub
A secure low code deception runtime framework, leveraging AI for System Virtualization.
m14r41 / PentestingEverything
Complete Solution for VAPT/AppSec and Pentesting Guide: Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | Network Pentesting | SAST | DAST etc...
FoxIO-LLC / ja4
JA4+ is a suite of network fingerprinting standards
yogsec / Hacking-Tools
A curated list of penetration testing and ethical hacking tools, organized by category. This compilation includes tools from Kali Linux and other notable sources.
phishdestroy / destroylist
Real-time phishing & scam domain blocklist - 205k+ curated threats, 1M+ community, free API, multiple formats
cisagov / cset
Cybersecurity Evaluation Tool
RoseSecurity / Red-Teaming-TTPs
Useful Techniques, Tactics, and Procedures for red teamers and defenders, alike!
cyb3rxp / awesome-soc
A curated knowledge base to build, run and mature a SOC (including CSIRT).
OpenAEV-Platform / openaev
Open Adversarial Exposure Validation Platform
jiwoochris / artex-global
ARTEX ํ๊ตญ์ดํ ยท AI ์์จ ์นจํฌ ํ ์คํธ ํ๋ ์์ํฌ(upstream: Autumn-27/ARTEX, AGPL-3.0)
OpenOSINT / OpenOSINT
AI-powered OSINT agent with interactive REPL, MCP server, and CLI. 20 tools. Works with Claude, GPT-4, or local models. For authorized security research only.
Purp1eW0lf / Blue-Team-Notes
You didn't think I'd go and leave the blue team out, right?
Bert-JanP / Hunting-Queries-Detection-Rules
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
0xSteph / pentest-ai
Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.
splunk / security_content
Splunk Security Content
scadastrangelove / awesome-ai-security-tools
A curated list of public-source, research, and commercial tools for AI security and AI-assisted cybersecurity โ autotriage, agent security, AI/ML supply chain, pentest agents, AI SAST, LLM-driven fuzzing, threat intelligence, SOC/SIEM triage, reverse engineering, LLM red-teaming, and more.
node-opcua / node-opcua
Unlocking the Full Potential of OPC UA with Typescript and NodeJS - http://node-opcua.github.io/
KatrielMoses / MailAccess
Free email OSINT tool, 5000+ platforms, identity clustering, breach detection. No API keys required. pip install mailaccess
mytechnotalent / Hacking-Windows
A FREE Windows C development course where we will learn the Win32API and reverse engineer each step utilizing IDA Free in both an x86 and x64 environment.
packing-box / awesome-executable-packing
A curated list of awesome resources related to executable packing
mukul975 / cve-mcp-server
Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs โ CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.
tirrenotechnologies / tirreno
tirreno is an open-source framework for building sovereign security, compliance and fraud prevention applications. Detect account takeovers, cyberfraud and business logic abuse inside your product.
webpwnized / mutillidae
OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an easy-to-use web hacking environment designed for labs, security enthusiasts, classrooms, CTF, and vulnerability assessment tool targets.
JoasASantos / NeuroSploit
NeuroSploit is an advanced, AI-powered penetration testing framework designed to automate and augment various aspects of offensive security operations.
trhhubsd / ARTEX
ARTEX ยท AI autonomous penetration testing system (multi-agent LLM, Go + Next.js) ยท AI ่ชไธปๆธ้ๆต่ฏ็ณป็ป ยท ็พๅบฆ agent+ ๆป้ฒๆๆ่ตๅ ๅ
thalesgroup-cert / Watcher
Watcher - Open Source AI-powered Cyber Threat Intelligence & Hunting Platform. Developed with Django & React JS.
xaitax / SploitScan
SploitScan is a sophisticated cybersecurity utility designed to provide detailed information on vulnerabilities and associated exploits.
Proviesec / google-dorks
Useful Google Dorks for WebSecurity and Bug Bounty
infosecB / awesome-detection-engineering
Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.
Hacking-Notes / Hacker-Roadmap
A detailed plan to achieve proficiency in hacking and penetration testing, with pathways including obtaining a degree in cybersecurity or earning relevant certifications.
freelabz / secator
secator - the pentester's swiss knife
topscoder / nuclei-wordfence-cve
80k+ WordPress Nuclei templates, updated daily from Wordfence intelโfilter by severity/tags/CVE and scan in one line. ๐๐