#1Automated tools for detecting known vulnerabilities in systems and applications.
Kitploit recommended
0x90n/infosec-black-fridayAll the deals for InfoSec related software/tools this Black Friday
tuhinshubhra/red_hawkAll in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers
nccgroup/scoutsuiteMulti-cloud security auditing tool that leverages cloud provider APIs to gather configuration data, assess security posture, and generate HTML…
may215/awesome-termux-hacking⚡️An awesome list of the best Termux hacking tools
ottosulin/awesome-ai-securityA collection of awesome resources related AI security
1n3/intruderpayloadsA collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.
retirejs/retire.jsscanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
corazawaf/corazaGo-based Web Application Firewall library compatible with ModSecurity SecLang rules and OWASP Core Rule Set v4, providing real-time HTTP traffic…
coreruleset/corerulesetGeneric attack detection rule set for web application firewalls, protecting against OWASP Top Ten and common vulnerabilities with minimal false…
divinelabio/argusThe Ultimate Information Gathering Toolkit
gwen001/pentest-toolsA collection of custom security tools for quick needs.
guardicore/monkeyInfection Monkey - An open-source adversary emulation platform
jasonxtn/argusThe Ultimate Information Gathering Toolkit
hamed233/cybersecurity-mastery-roadmapA comprehensive, step-by-step guide to mastering cybersecurity from beginner to expert level with curated resources, tools, and career guidance
vulnerscom/nmap-vulnersNmap NSE script that queries the Vulners API to identify known vulnerabilities (CVEs) for detected network services, enhancing standard port scanning…
urbanadventurer/whatwebNext generation web scanner
lefayjey/linwinpwnBash script wrapping Active Directory tools for automated enumeration, vulnerability checks, exploitation, and password dumping via LDAP, RPC,…
semgrep/semgrep-rulesStatic analysis rule pack for detecting security vulnerabilities, dangerous code patterns, and configuration issues across many languages; integrates…
