gichirimaku / wp2shell-PoC
CVE-2026-63030 + CVE-2026-60137 exploit RCE chain.
gichirimaku / wp2shell-PoC
interplains / zero-breach
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
opentrap / opentrap
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
Autumn-27 / ScopeSentry
ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes
Ernket / CodeScan-Artex
二开artex的代码审计平台 | 新增本地反编译java依赖库 | 多账号管理
superphaserecord / GamesenseCS2-2026-rpocket-team
Skeet-CS2 (2026) — The most sophisticated internal framework for CS2. Featuring low-latency ESP rendering, advanced hiscan telemetry, and a legendary UI. Experience the gld standard of game analytics and visual modification.
forkhelpburn / rpocket-Shellcode-Memory-Fluctuation
Advanced memory evasion PoC that cyclically encrypts shellcode and fluctuates between RW/NoAccess and RX memory protections to bypass memory scanners like Moneta and PE-Sieve.
VirtualPurser / Far-Cry-3-Value-Forge-resocket
Far Cry 3 Ultimate Trainer & Memory Editor 2026 Toolkit
HopeCourseReflect / rpocket-GamesenseCS2-2026
Skeet-CS2 (2026) — The most sophisticated internal framework for CS2. Featuring low-latency ESP rendering, advanced hiscan telemetry, and a legendary UI. Experience the gld standard of game analytics and visual modification.
chaenmasahiro0425 / claude-security-scan
「セキュリティチェックして」の一言で、Mac・リポジトリ・GitHub・Vercel・AWS・Gmailを読み取り専用で横断点検する Claude Code スキル
dhihacker / AirBandScan
Scans the aviation band with an SDR, records every voice call on its own, and lets you listen, browse, and download them from a web browser. Classifies voice/non-voice signals, with live spectrum and spectrogram views. Works with RTL-SDR, HackRF, and Airspy on Windows and Linux.
Rod292 / 3d-home-tv-os
Scan your home, turn it into a live 3D model, and make it your TV's home screen — lights wired in. An AI-agent playbook + reference implementation (Google TV, Hue, Home Assistant, iPhone, macOS).
PatchMon / PatchMon
Linux Patch Management & Automation Platform
career-ops-hq / career-ops
Open-source AI job search agent and job finder: scan job boards, score each job 1-5 against your CV before you apply, tailor an ATS-friendly resume and cover letter, get interview prep and a job application tracker. It helps you fill in each application; you press Submit. Runs locally in your AI coding CLI (Claude Code, Codex, OpenCode and more).
paperless-ngx / paperless-ngx
A community-supported supercharged document management system: scan, index and archive all your documents
aquasecurity / trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
ocrmypdf / OCRmyPDF
OCRmyPDF adds an OCR text layer to scanned PDF files, allowing them to be searched
zxing / zxing
ZXing ("Zebra Crossing") barcode scanning library for Java, Android
projectdiscovery / nuclei
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
goharbor / harbor
An open source trusted cloud native registry project that stores, signs, and scans content.
trufflesecurity / trufflehog
Find, verify, and analyze leaked credentials
promptfoo / promptfoo
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
robertdavidgraham / masscan
TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.
NVIDIA / SkillSpector
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
bee-san / RustScan
🤖 The Modern Port Scanner 🤖
firecrawl / pdf-inspector
Fast Rust library for PDF inspection, classification, and text extraction. Intelligently detects scanned vs text-based PDFs to enable smart routing decisions.
forwardemail / superagent
Ajax for Node.js and browsers (JS HTTP client). Maintained for @forwardemail, @ladjs, @spamscanner, @breejs, @cabinjs, and @lassjs.
zaproxy / zaproxy
The ZAP by Checkmarx Core project
T8RIN / ImageToolbox
🖼️ Image Toolbox is a powerful app for advanced image manipulation. It offers dozens of features, from basic tools like crop and draw to filters, OCR, and a wide range of image processing options
maurosoria / dirsearch
Web path scanner
shadow1ng / fscan
一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
forwardemail / supertest
🕷 Super-agent driven library for testing node.js HTTP servers using a fluent API. Maintained for @forwardemail, @ladjs, @spamscanner, @breejs, @cabinjs, and @lassjs.
nmap / nmap
Nmap - the Network Mapper. Github mirror of official SVN repository.
anchore / grype
A vulnerability scanner for container images and filesystems
justcallmekoko / ESP32Marauder
A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32
future-architect / vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
kubescape / kubescape
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
horsicq / Detect-It-Easy
Program for determining types of files for Windows, Linux and MacOS.
google / osv-scanner
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
openai / codex-security
OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security
sullo / nikto
Nikto web server scanner
blacklanternsecurity / bbot
The recursive internet scanner for hackers. 🧡
claudiodangelis / qrcp
:zap: Transfer files over wifi from your computer to your mobile device by scanning a QR code without leaving the terminal.
github / codeql
CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security
wpscanteam / wpscan
WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com
margelo / react-native-vision-camera
📸 A powerful, high-performance React Native Camera library.
NVIDIA / garak
the LLM vulnerability scanner
We5ter / Scanners-Box
The Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents——面向极客、企业与 AI 智能体的全域开源网络安全工具矩阵
bridgecrewio / checkov
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
yogeshojha / rengine
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.
BornToBeRoot / NETworkManager
A powerful open-source tool for managing networks and troubleshooting network problems!
google / tsunami-security-scanner
Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.
PyCQA / bandit
Bandit is a tool designed to find common security issues in Python code.
six2dez / reconftw
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
yaklang / yakit
Cyber Security ALL-IN-ONE Platform
netalertx / NetAlertX
Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.
presidentbeef / brakeman
A static analysis security vulnerability scanner for Ruby on Rails applications
lintsinghua / DeepAudit
DeepAudit：人人拥有的 AI 黑客战队，让漏洞挖掘触手可及。小白一键部署运行，自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ，一键生成报告。支持中转站。让安全不再昂贵，让审计不再复杂。
Tencent / AI-Infra-Guard
A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.
infobyte / faraday
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.