#1Tools for identifying, assessing, and prioritizing security weaknesses in systems and applications.
Kitploit recommended
nomi-sec/poc-in-github📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.
bigbodycobain/shadowbrokerReal-time geospatial OSINT platform aggregating 60+ public telemetry feeds (ADS-B, AIS, satellites, CCTV) into a unified map with server-side recon…
bridgecrewio/checkovStatic analysis tool for infrastructure as code that detects cloud misconfigurations, vulnerabilities, and secrets across Terraform, Kubernetes,…
decalage2/awesome-security-hardeningA collection of awesome security hardening guides, tools and other resources
dependency-check/dependencycheckOWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
kyverno/kyvernoEnforce security and compliance on Kubernetes clusters via admission controls, resource mutation, background scans, and container image signature…
threat9/routersploitExploitation Framework for Embedded Devices
fuzzdb-project/fuzzdbDictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
bitsadmin/wesngWindows Exploit Suggester - Next Generation
ed1s0nz/cyberstrikeaiThe system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation…
openai/codex-securityOpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm:…
telekom-security/tpotce🍯 T-Pot - The All In One Multi Honeypot Platform 🐝
axi0mx/ipwndfuopen-source jailbreaking tool for many iOS devices
wpscanteam/wpscanWordPress security scanner that detects vulnerabilities, enumerates plugins/themes/users, and checks for weak passwords. Integrates with the WPScan…
projectdiscovery/httpxFast, multi-probe HTTP toolkit for reconnaissance and information gathering. Probes TLS, CSP, headers, tech stack, and CDN. Supports matchers,…
blackarch/blackarchAn ArchLinux based distribution for penetration testers and security researchers.
aipentest/cyberstrikeaiThe system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation…
aquasecurity/kube-benchChecks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
