#1Tools for identifying, assessing, and prioritizing security weaknesses in systems and applications.
Kitploit recommended
yogeshojha/renginereNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines,…
owasp/asvsApplication Security Verification Standard
zizmorcore/zizmorStatic analysis tool for CI/CD systems that detects and fixes security issues in GitHub Actions, Dependabot, and pre-commit configurations, including…
gommzystudio/device-activity-trackerA phone number can reveal whether a device is active, in standby or offline (and more). This PoC demonstrates how delivery receipts + RTT timing leak…
ljagiello/ctf-skillsAgent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more
elementalsouls/claude-bughunterA Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24…
microsoft/detoursRuntime Windows API interception library for hooking, monitoring, and instrumenting function calls. Supports binary rewriting and DLL injection,…
anthropics/oss-scannerService that builds enrolled open-source repositories in isolated offline VMs and scans them for security vulnerabilities, emailing findings with…
zan8in/afrogA Security Tool for Bug Bounty, Pentest and Red Teaming.
swisskyrepo/ssrfmapAutomatic SSRF fuzzer and exploitation tool
gtworek/psbitsSimple (relatively) things allowing you to dig a bit deeper than usual.
hahwul/dalfoxFast XSS scanner with parameter analysis, WAF fingerprinting, and DOM/AST verification. Supports reflected, stored, and DOM-based XSS detection via…
owasp/www-communityOWASP Community Pages are a place where OWASP can accept community contributions for security-related content.
pedramamini/awesome-yaraA curated list of awesome YARA rules, tools, and people.
strongswan/strongswanstrongSwan - IPsec-based VPN
rub-nds/pretPrinter Exploitation Toolkit - The tool that made dumpster diving obsolete.
joxeankoret/diaphoraDiaphora, the most advanced Free and Open Source program diffing tool.
jonaslejon/malicious-pdfGenerate malicious PDF test files for penetration testing, bug bounty hunting, and red teaming. Tests SSRF, XSS, XXE, NTLM credential theft, and data…
