#1Tools for testing, exploiting, and securing web applications and APIs.
Kitploit recommended
projectdiscovery/nucleiFast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…
zhaoxuya520/reverse-skillAI-powered skill router pack for reverse engineering, penetration testing, and security research. Routes AI agents to correct methodologies and…
certbot/certbotCertbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any…
cloudflare/security-audit-skillA coding-agent skill for multi-phase security audits with independently verified, machine-readable findings
vxcontrol/pentagiFully autonomous AI Agents system capable of performing complex penetration testing tasks
dgtlmoon/changedetection.ioBest and simplest tool for website change detection, web page monitoring, and website change alerts. Perfect for tracking content changes, price…
lissy93/web-check🕵️♂️ All-in-one OSINT tool for analysing any website
mobsf/mobile-security-framework-mobsfAutomated mobile application security testing framework for Android, iOS, and Windows. Performs static and dynamic analysis, malware detection, and…
0x4m4/hexstrike-aiMCP server enabling AI agents to autonomously execute 150+ cybersecurity tools for automated penetration testing, vulnerability discovery, bug bounty…
shieldfy/api-security-checklistChecklist of the most important security countermeasures when designing, testing, and releasing your API
mukul975/anthropic-cybersecurity-skills817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3…
authelia/autheliaThe Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
vitalysim/awesome-hacking-resourcesA collection of hacking / penetration testing resources to make you better!
qazbnm456/awesome-web-security🐶 A curated list of Web Security materials and resources.
we5ter/scanners-boxThe Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents——面向极客、企业与 AI 智能体的全域开源网络安全工具矩阵
digitalocean/nginxconfig.io⚙️ NGINX config generator on steroids 💉
zaproxy/zaproxyOpen-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…
