strix
usestrix/strixOpen-source AI penetration testing tool to find and fix your app’s vulnerabilities.
osintreconnaissancevulnerability-scanners+9
Automated tools for detecting known vulnerabilities in systems and applications.
usestrix/strixOpen-source AI penetration testing tool to find and fix your app’s vulnerabilities.
imthenachoman/how-to-secure-a-linux-serverStep-by-step guide for hardening a Linux server, covering SSH security, firewalls, intrusion detection, auditing, and system configuration to reduce…
sqlmapproject/sqlmapAutomatic SQL injection and database takeover tool
keygraphhq/shannonShannon is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes…
0x4m4/hexstrike-aiMCP server enabling AI agents to autonomously execute 150+ cybersecurity tools for automated penetration testing, vulnerability discovery, bug bounty…
trufflesecurity/trufflehogFind, verify, and analyze leaked credentials
gitleaks/gitleaksFast, open-source static analysis tool for detecting hardcoded secrets like passwords, API keys, and tokens in git repositories, files, and stdin…
aquasecurity/trivyFind vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
we5ter/scanners-boxA powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑
promptfoo/promptfooTest your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and…
wazuh/wazuhOpen-source XDR and SIEM platform for threat detection, log analysis, file integrity monitoring, vulnerability assessment, and compliance management…
vxcontrol/pentagiFully autonomous AI Agents system capable of performing complex penetration testing tasks
chaitin/safelineSelf-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic…
infoslack/awesome-web-hackingA list of web application security
projectdiscovery/nuclei-templatesCommunity curated list of templates for the nuclei engine to find security vulnerabilities.
maurosoria/dirsearchWeb path scanner
manisso/fsocietyfsociety Hacking Tools Pack – A Penetration Testing Framework
vavkamil/awesome-bugbounty-toolsCurated directory of bug bounty tools organized by category: reconnaissance, subdomain enumeration, port scanning, content discovery, exploitation,…