ghidra
nationalsecurityagency/ghidraGhidra is a software reverse engineering (SRE) framework
static-analysisdynamic-analysis-sandboxingexploit-frameworks+8
71.1k
Tools for identifying, assessing, and prioritizing security weaknesses in systems and applications.
nationalsecurityagency/ghidraGhidra is a software reverse engineering (SRE) framework
vulhub/vulhubPre-Built Vulnerable Environments Based on Docker-Compose
rapid7/metasploit-frameworkOpen-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…
swisskyrepo/payloadsallthethingsA list of useful payloads and bypass for Web Application Security and Pentest/CTF
usestrix/strixOpen-source AI penetration testing tool to find and fix your app’s vulnerabilities.
nmap/nmapNmap - the Network Mapper. Github mirror of official SVN repository.
openwrt/openwrtLinux operating system for embedded devices with writable filesystem, package management, and build framework. Enables custom firmware creation for…
imthenachoman/how-to-secure-a-linux-serverStep-by-step guide for hardening a Linux server, covering SSH security, firewalls, intrusion detection, auditing, and system configuration to reduce…
sqlmapproject/sqlmapAutomatic SQL injection and database takeover tool
keygraphhq/shannonShannon is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes…
google/oss-fuzzOSS-Fuzz - continuous fuzzing for open source software.
symfony/symfonyThe Symfony PHP framework
jumpserver/jumpserverJumpServer is an open-source Privileged Access Management (PAM) platform that provides DevOps and IT teams with on-demand and secure access to SSH,…
certbot/certbotCertbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any…
qazbnm456/awesome-web-security🐶 A curated list of Web Security materials and resources.
0x4m4/hexstrike-aiMCP server enabling AI agents to autonomously execute 150+ cybersecurity tools for automated penetration testing, vulnerability discovery, bug bounty…
thingsboard/thingsboardOpen-source IoT Platform - Device management, data collection, processing and visualization.
trufflesecurity/trufflehogFind, verify, and analyze leaked credentials