cloudflare / security-audit-skill
A coding-agent skill that runs multi-phase security audits with isolated agents and independently verified, machine-readable findings.
cloudflare / security-audit-skill
martin-olivier / airgorah
A WiFi security auditing software
z91772524-ai / pojia-next
一个脚本搞定 DSH / WorkBuddy / ZCode / Codex / Cursor / Claude 六客户端的提示词与人格替换：零依赖、双击即用、可自证、改前备份、一键还原。另附【免装 Python 的单文件 exe】；DSH 自动区分官方桌面版 / 社区桌面版。附 bandit/semgrep 扫描与 SHA256 校验。
KeygraphHQ / shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Ozark-Connect / NetworkOptimizer
Self-hosted optimization, monitoring (NMS), and security audit tool for UniFi Networks. Includes Wi-Fi Optimizer for wireless health scoring and channel optimization, advanced DNS/VLAN/firewall security checks, config optimization suggestions, centralized WAN and LAN speed test server w/ L2 tracing, CM, ONT, SFP, 5G modem stats +more.
google / osv-scanner
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
wazuh / wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
gojue / ecapture
Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64 and arm64.
prowler-cloud / prowler
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
future-architect / vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
We5ter / Scanners-Box
The Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents——面向极客、企业与 AI 智能体的全域开源网络安全工具矩阵
vigolium / vigolium
Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision
DataDog / KubeHound
Tool for building Kubernetes attack paths
tlsfuzzer / tlsfuzzer
SSL and TLS protocol test suite and fuzzer
fkie-cad / friTap
Simplifying encrypted traffic analysis for researchers by making protocol decryption effortless.
waybarrios / opencode-power-pack
54 rigorous skills for Codex, OpenCode, and Pi: code review, security audit, feature development, frontend design, MCP tools, Hugging Face ML/training, and more.
adshao / flounder
Autonomous white-hat security auditor for AI-driven code review, bug bounty research, exploit construction, and execution-grounded verification.
shinthink / blitzstrike
Blitz Strike — a universal MCP security-audit toolbelt. Reconnaissance at speed. Analysis in depth. Validation before report.
angusdevgo / Seep-Tool
CWE-602 客户端鉴权脆弱性白盒审计方法论与纵深防御加固研究框架
Krishita17 / PhantomTap
A Flipper Zero that stops guessing and starts reasoning: ML-guided RFID/NFC fuzzing & access-control auditing that turns raw card reads into a prioritized, explainable security assessment. Defensive-use only.
presidentbeef / brakeman
A static analysis security vulnerability scanner for Ruby on Rails applications
infobyte / faraday
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.
aquasecurity / cloudsploit
Cloud Security Posture Management (CSPM)
codingo / NoSQLMap
Automated NoSQL database enumeration and web application exploitation tool.
pwndoc / pwndoc
Pentest Report Generator
Bearer / bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
rubysec / bundler-audit
Patch-level verification for Bundler
Syslifters / sysreptor
A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease.
kpcyrd / sn0int
Semi-automatic OSINT framework and package manager
OWASP / masvs
The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.
find-sec-bugs / find-sec-bugs
The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
MichaelGrafnetter / DSInternals
Directory Services Internals (DSInternals) PowerShell Module and Framework
cisagov / cset
Cybersecurity Evaluation Tool
doyensec / inql
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
lirantal / npq
safely install npm packages by auditing them pre-install stage
wireghoul / graudit
grep rough audit - source code auditing tool
ssh-mitm / ssh-mitm
SSH-MITM - ssh audits made simple
pypa / pip-audit
Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them
silverhack / monkey365
Monkey365 is an open-source security assessment tool for Microsoft 365, Azure, and Microsoft Entra ID. It helps security professionals identify misconfigurations, review cloud security posture, and evaluate environments against industry security best practices and compliance standards.
freelabz / secator
secator - the pentester's swiss knife
owasp-dep-scan / dep-scan
OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.
larlarua / AutoCVE
Agent-driven automated CVE discovery platform for source code auditing, vulnerability verification, and report generation.
rustsec / advisory-db
Security advisory database for Rust crates published through crates.io
toby-bridges / api-relay-audit
Local security audit for AI API relays and LLM proxies: detects prompt injection, model substitution, tool-call rewriting, SSE anomalies, error leakage, and Web3 wallet risks.
rust-secure-code / cargo-auditable
Make production Rust binaries auditable
dradis / dradis-ce
Dradis Framework: Collaboration and reporting for IT Security teams
softstack / Smart-Contract-Security-Audits
Certified Smart Contract Audits for Ethereum, Solana, Near, Cardano, Aptos, Sui, Binance Smart Chain, Fantom, EOS, Tezos and more
HarmVeenstra / Powershellisfun
Repository with the scripts that I have used in my blogs on https://powershellisfun.com. If you like these, please sponsor this project using the Sponsor button below or buy me a coffee :) https://www.buymeacoffee.com/powershellisfun
pika-monitor / pika
Lightweight probe monitoring — Go + VictoriaMetrics + PostgreSQL/SQLite | Real-time metrics, service checks, tamper protection & security audit
factionsecurity / faction
Pen Test Report Generation and Assessment Collaboration
utmstack / UTMStack
Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.
Leo4j / Invoke-ADEnum
Active Directory Auditing and Enumeration
1838904818 / audit-repo
A practical Codex skill for evidence-backed repository health audits
Zuimeng-0710 / java-audit-lab
Evidence-driven Java security review workbench
wlmosv-png / wpaforge
Android WPA 密码破解工具 —— 按 SSID 现场派生候选、智能排序、断点续跑、后台队列，附局域网设备侦察与判断依据追溯。纯 Root，Apache-2.0。
KBT096 / windows-secure-toolkit
Local Windows security auditing and reversible hardening with a C#/.NET Framework 4.8 core and CMD/BAT entry points.
tigusigalpa / ai-kit
AI-KIT is a practical starter kit for development: ChatGPT/Codex, Claude, DeepSeek, KIMI, and other coding agents. It provides reusable project context, rules for each stack, adaptive model routing, conservative installation and updates, testing and review workflows, security guidance, Docker and Kubernetes readiness, and clean project templates.
Carlos-Dominguez-faber / adversarial-review
Kit de la clase Adversarial Review (Imperio Agéntico): app de demo con 43 fallas + prompts de auditoría UI/UX/seguridad + checklist + reporte real de Codex Security.
Taimoorkhan1122 / prod-readiness
Claude Code production-readiness audit plugin with 8 specialist lenses in 3 waves for security, reliability, tests, DevOps, live-app QA, and launch blockers.
ElderCrochet / Wireshark-Advanced
Wireshark Advanced for Windows — the complete professional build with every module enabled: packet analysis, monitoring, and diagnostics, no edition limits after install.