Tools for identifying, assessing, and prioritizing security weaknesses in systems and applications.
rapid7/metasploit-frameworkOpen-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…
horkimhab/poc-cve-collection🧪 Collects CVE PoCs and backs them up to the Internet Archive when they are unavailable on GitHub.
jp1337/easywallWeb interface for the nftables firewall on Linux, written in Go. The apply undoes itself after 120 seconds unless you confirm it — you cannot lock…
trufflesecurity/trufflehogFind, verify, and analyze leaked credentials
horsicq/detect-it-easyProgram for determining types of files for Windows, Linux and MacOS.
big-comfy/deadairFinds the detection rules in your SIEM that are running blind
bande-a-bonnot/boucle-frameworkAutonomous agent framework with structured memory, safety hooks, and loop management. Built by the agent that runs on it.
msaad00/agent-bomOpen security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings,…
pmd/pmdAn extensible multilanguage static code analyzer.
google/oss-fuzzOSS-Fuzz - continuous fuzzing for open source software.
spaceraccoon/vulnerability-spoiler-alertA monitoring hub that watches popular open-source repositories and uses AI to detect when commits are patching security vulnerabilities - often…
pigyon/mcpwnerModel Context Protocol server for autonomous vulnerability discovery
stackrox/stackroxThe StackRox Kubernetes Security Platform performs a risk analysis of the container environment, delivers visibility and runtime alerts, and provides…
guilherme-grimm/graph-gosimply nodes and graphs
aquasecurity/vuln-list-redhatRed Hat security advisories
opnsense/coreOPNsense GUI, API and systems backend
