#1Tools for identifying, assessing, and prioritizing security weaknesses in systems and applications.
Kitploit recommended
digininja/dvwaIntentionally vulnerable PHP/MariaDB web application for practicing common web security vulnerabilities across multiple difficulty levels in a legal,…
gravitational/teleportThe easiest, and most secure way to access and protect all of your infrastructure.
winsiderss/systeminformerReal-time Windows system monitor with advanced process, network, and disk analysis, stack trace debugging, malware detection, and service management.…
maurosoria/dirsearchWeb path scanner
semgrep/semgrepLightweight static analysis for many languages. Find bug variants with patterns that look like source code.
rshipp/awesome-malware-analysisDefund the Police.
webgoat/webgoatDeliberately vulnerable web application with interactive lessons and challenges for learning web application security and penetration testing…
mail-in-a-box/mailinaboxMail-in-a-Box helps individuals take back control of their email by defining a one-click, easy-to-deploy SMTP+everything else server: a mail server…
mailcow/mailcow-dockerizedDockerized mail server suite with Postfix, Dovecot, Rspamd, and ClamAV. Provides secure email hosting with integrated spam filtering, antivirus, and…
sunweb3sec/defihacklabsReproduce DeFi hacked incidents using Foundry.
secdev/scapyPython-based interactive packet manipulation library for forging, decoding, sending, capturing, and analyzing network packets across a wide range of…
trailofbits/skillsTrail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
github/codeqlCodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security
shadow1ng/fscan一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
projectdiscovery/katanaA next-generation crawling and spidering framework.
reddelexc/hackerone-reportsCurated collection of top HackerOne bug bounty reports organized by vulnerability type and program, with scripts to fetch, deduplicate, and rank…
juliocesarfort/public-pentesting-reportsA list of public penetration test reports published by several consulting firms and academic security groups.
