#1Tools for identifying, assessing, and prioritizing security weaknesses in systems and applications.
Kitploit recommended
vxcontrol/pentagiFully autonomous AI Agents system capable of performing complex penetration testing tasks
thingsboard/thingsboardAll-in-one IoT Platform - Device management, data collection, processing and visualization.
trufflesecurity/trufflehogFind, verify, and analyze leaked credentials
gitleaks/gitleaksFast, open-source static analysis tool for detecting hardcoded secrets like passwords, API keys, and tokens in git repositories, files, and stdin…
osquery/osquerySQL powered operating system instrumentation, monitoring, and analytics.
lissy93/web-check🕵️♂️ All-in-one OSINT tool for analysing any website
infisical/infisicalInfisical is the open-source platform for secrets, certificates, and privileged access management.
aquasecurity/trivyFind vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
analysis-tools-dev/static-analysisCurated directory of static analysis (SAST) tools and linters for programming languages, configs, build tools, and CI, focused on improving code…
promptfoo/promptfooTest your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and…
0x4m4/hexstrike-aiMCP server enabling AI agents to autonomously execute 150+ cybersecurity tools for automated penetration testing, vulnerability discovery, bug bounty…
wazuh/wazuhOpen-source XDR and SIEM platform for threat detection, log analysis, file integrity monitoring, vulnerability assessment, and compliance management…
vitalysim/awesome-hacking-resourcesA collection of hacking / penetration testing resources to make you better!
qazbnm456/awesome-web-security🐶 A curated list of Web Security materials and resources.
we5ter/scanners-boxThe Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents——面向极客、企业与 AI 智能体的全域开源网络安全工具矩阵
netbox-community/netboxOpen-source IPAM and DCIM platform providing a centralized source of truth for modeling, documenting, and automating network infrastructure with…
edoardottt/awesome-hacker-search-enginesA curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
digitalocean/nginxconfig.io⚙️ NGINX config generator on steroids 💉
