WerWolv / ImHex
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
WerWolv / ImHex
rawfilejson / awesome-osint-arsenal
OSINT & recon toolkit // 100+ tools, one-command installer, SOCMINT, GEOINT, network recon, dark web, forensics & more.
Armur-Ai / Pentest-Swarm-AI
Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitoring, and CTF modes. Built with Go and 7+ native security tools.
x64dbg / x64dbg
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
Fazmin / cve-intel
Local security intelligence for CVE triage - 31 data sources and 32 tools, risk scores and an MCP server for AI agents, all in native Rust. Private by default.
CasterPalace / kahoot-answer-rpocket-team-free-access
Get correct Kahoot answers instantly and free—no limits, fees, or subscriptions. Boost your quiz scores now.
VirtualPurser / Far-Cry-3-Value-Forge-resocket
Far Cry 3 Ultimate Trainer & Memory Editor 2026 Toolkit
JoasASantos / Malvex
AI-driven malware analysis framework with 30+ integrated tools, web REPL, and MCP server
CyberDefenderAI / Cybersecurity-in-the-field-of-AI
This repository is a consolidated directory divided into five standalone, deep-dive modules. Each module comprehensively covers a specific domain of AI implementation, vulnerabilities, threat modeling, and automated defense mechanisms.
cisagov / ScubaGear
Automation to assess the state of your M365 tenant against CISA's baselines
sherlock-project / sherlock
Hunt down social media accounts by username across social networks
usestrix / strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
KeygraphHQ / shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
GyulyVGC / sniffnet
Comfortably monitor your network traffic 🕵️♂️
soxoj / maigret
🕵️♂️ Collect a dossier on a person by username from 6K websites
The-Art-of-Hacking / h4cker
This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.org
chaitin / SafeLine
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
lissy93 / personal-security-checklist
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
SWE-agent / SWE-agent
SWE-agent takes a GitHub issue and tries to automatically fix it, using your LM of choice. It can also be employed for offensive cybersecurity or competitive coding challenges. [NeurIPS 2024]
amark / gun
An open source cybersecurity protocol for syncing decentralized graph data.
wazuh / wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
crowdsecurity / crowdsec
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
mytechnotalent / Reverse-Engineering
A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM, 8-bit AVR and 32-bit RISC-V architectures.
OpenNHP / opennhp
A lightweight, cryptography-powered, open-source toolkit built to enforce Zero Trust security for infrastructure, applications, and data in the AI-driven world.
future-architect / vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
openai / codex-security
OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security
bunkerity / bunkerweb
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
projectdiscovery / httpx
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
OpenCTI-Platform / opencti
Open Cyber Threat Intelligence Platform
reconurge / flowsint
A modern platform for visual, flexible, and extensible graph-based investigations. For cybersecurity analysts and investigators.
meirwah / awesome-incident-response
A curated list of tools for incident response
berty / berty
Berty is a secure peer-to-peer messaging app that works with or without internet access, cellular data or trust in the network
antoniaci / blackbird
An OSINT tool to search for accounts by username and email in social networks.
cipher387 / osint_stuff_tool_collection
A collection of several hundred online tools for OSINT
CarterPerez-dev / Cybersecurity-Projects
Building 70 Projects ranging from beginner to advanced so anyone can — learn from, build upon, use as a reference, or even copy directly. Gamified Cybersecurity learning 👇
ntop / ntopng
Web-based Traffic and Cybersecurity Network Traffic Monitoring
AIPentest / CyberStrikeAI
The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next.
JoseDeFreitas / awesome-youtubers
An awesome list of awesome YouTubers that teach about technology. Tutorials about web development, computer science, machine learning, game development, cybersecurity, and more.
apache / caldera
Automated Adversary Emulation Platform
bee-san / pyWhat
🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙♀️
InterceptSuite / ProxyBridge
Force Proxy to any Windows/MacOS/Linux Application TCP and UDP traffic
infobyte / faraday
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.
ihebski / DefaultCreds-cheat-sheet
One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️
OISF / suricata
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.
MISP / MISP
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
decalage2 / awesome-security-hardening
A collection of awesome security hardening guides, tools and other resources
AzeemIdrisi / PhoneSploit-Pro
An all-in-one hacking tool to remotely take over Android devices.
BitterSecurity / Decepticon
Autonomous Hacking Agent for Red Team
gnuradio / gnuradio
GNU Radio – the Free and Open Software Radio Ecosystem
Azure / Azure-Sentinel
Cloud-native SIEM for intelligent security analytics for your entire enterprise.
kaifcodec / user-scanner
🕵️♂️ (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a single Email/Username. Analyzes 2720+ actively maintained scan vectors (210+ email / 2510+ username) for security research, investigations, and digital footprinting.
jassics / security-study-plan
Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...
intelowlproject / IntelOwl
IntelOwl: manage your Threat Intelligence at scale
ntop / nDPI
Open Source Deep Packet Inspection Software Toolkit
Astrosp / Awesome-OSINT-List
📡 Comprehensive collection of OSINT tools for cybersecurity professionals, researchers, and bug bounty hunters. Topics: information gathering, reverse search, red team, trust & safety, AI.
intuitem / ciso-assistant-community
CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 200+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.
0xor0ne / awesome-list
Cybersecurity oriented awesome list
0xsyr0 / Awesome-Cybersecurity-Handbooks
A huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.
alexandreborges / malwoverview
Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.
BrowserBox / BrowserBox
💚🇺🇸🗽Secure remote browsing anywhere, any way you like it.