Tools

trufflesecurity/trufflehog

Find, verify, and analyze leaked credentials

ffffffff0x/f8x

红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool

owasp/trisuella-aidlca-framework

Policy-governed LLMSecOps framework providing AST-based SAST, secret scanning, supply-chain and multi-cloud CSPM checks, AI-BoM generation, and CI/CD…

hahwul/mzap

⚡️ Multiple target ZAP Scanning

joshlarsen/aws-recon

Multi-threaded AWS inventory collection tool with a focus on security-relevant resources and metadata.

lintsinghua/deepaudit

DeepAudit：人人拥有的 AI 黑客战队，让漏洞挖掘触手可及。国内首个开源的代码漏洞挖掘多智能体系统。小白一键部署运行，自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ，一键生成报告。支持中转站。​让安全不再昂贵，让审计不再复杂。

praetorian-inc/gato

GitHub Actions Pipeline Enumeration and Attack Tool

zeroecco/holos

Declarative KVM/QEMU VM orchestration tool using YAML compose files. Manages multi-VM stacks with cloud-init, SSH, PCI passthrough, and image…

rapticore/ore-mal-pkg-inspector

Multi-Ecosystem Malicious Package Detection and Supply Chain Security Scanner

owasp/secureml

SecureML - Securing and Watermarking AL models

dowjones/hammer

Dow Jones Hammer : Protect the cloud with the power of the cloud(AWS)

jbiniek/copy.fail-mitigation-mlm

Salt state to deploy a mitigation of the copy.fail vulnerability (CVE-2026-31431)