#1Tools for identifying, assessing, and prioritizing security weaknesses in systems and applications.
Kitploit recommended
astrosp/awesome-osint-list📡 Comprehensive collection of OSINT tools for cybersecurity professionals, researchers, and bug bounty hunters. Topics: information gathering,…
yaklang/yakitAll-in-one penetration testing platform with MITM proxy, web fuzzer, reverse connection handler, and plugin system for automated security testing and…
cloud-custodian/cloud-custodianRules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
bikini/exploitariumCurated archive of public proof-of-concept exploits and vulnerability research writeups covering web, binary, and network security, with a focus on…
anthropics/defending-code-reference-harnessSkills for threat modeling, scanning, triage, patching, plus an autonomous scanning harness you can /customize
fleetdm/fleetOpen-source platform to secure and manage endpoints via MDM, patch management, software deployment, and osquery-powered visibility with compliance…
kevoreilly/capev2Malware Configuration And Payload Extraction
leebaird/discoverCustom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload…
google/tsunami-security-scannerTsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high…
rr-debugger/rrRecord and replay framework for deterministic debugging of multi-threaded applications, enabling reverse execution, hardware watchpoints, and…
slowmist/knowledge-baseCurated knowledge base of blockchain security research, audit reports, guides, and translations covering smart contracts, cryptography, and AI…
defectdojo/django-defectdojoOpen-Source Unified Vulnerability Management, DevSecOps & ASPM
pycqa/banditBandit is a tool designed to find common security issues in Python code.
borntoberoot/networkmanagerA powerful open-source tool for managing networks and troubleshooting network problems!
infobyte/faradayOpen-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin…
presidentbeef/brakemanA static analysis security vulnerability scanner for Ruby on Rails applications
aflplusplus/aflplusplusAFL++ is a state-of-the-art fuzzer, and #1 in benchmarks. It was originally based on AFL. Today it comes with qemu 5.1, collision-free coverage,…
0xor0ne/awesome-listCybersecurity oriented awesome list
