Mirage
gmh5225/mirageMicroservice OSINT platform in Rust that automates intelligence collection, correlation, and visualization for threat intelligence and attack surface…
osintreconnaissancevulnerability-analysis+2
1
gmh5225/mirageMicroservice OSINT platform in Rust that automates intelligence collection, correlation, and visualization for threat intelligence and attack surface…
lascc/dfirhubSearch artifact paths, build collection scripts, and convert Sigma rules. All in one place.
yslxotwod/imsistingGTK4 and CLI cellular security toolkit with 57 modules for 2G GSM, 3G UMTS, 4G LTE and 5G NR air interface, core network, SIM identity, RF tracking,…
pennacle-security/summitOpen-source web security testing platform: proxy, scanner and fuzzer in one CLI. By Pennacle Security.
capture0x/confirmescLinux privesc enumerator that confirms exploitability and gives you the exact root shell command - no GTFOBins searching. MCP server + AI-agent…
owasp/piihunterScans PostgreSQL databases and Jira issues for PII using regex, NER/ML, and optional self-hosted LLM detection, with redacted reports and audit…
owasp/secretsifterOWASP Incubator project: detects credentials exposed in browser-delivered content (JavaScript, config responses, live traffic).
1n3/sn1per-mcpMCP server that lets AI assistants drive a self-hosted Sn1per install, running scoped, audited scans and returning findings, ports, subdomains and…
gmh5225/mcp-god-modeDid you ever just want it to do everything? 148 POWERFUL Infosec/Admin tools on a single MCP server.
brutelogic/unkoverBash 403/401 access bypass tester that probes a URL with header spoofing, method tampering, path normalization, and encoding techniques, returning a…
maximilianfeix/hexveroThe first look at a binary or app bundle: static, execution-free analysis with evidence. CLI, 15-tool MCP server and local web UI, Node only.
yv1ing/secboxConducting cybersecurity testing using the pi agent in a pre-built sandbox environment.
affolter-engineering/xssearchRust-based XSS scanner with context-aware payload selection, WAF detection and bypass, crawling, blind XSS callbacks, and static DOM sink analysis.
affolter-engineering/snmpenSNMP enumeration tool that queries SNMPv1/v2c hosts to extract system information, TCP connections, and write access for penetration testing and…
affolter-engineering/mqattackRust CLI for MQTT penetration testing: subscribe/publish, broker fingerprinting, ACL probing, topic enumeration, credential brute-force, and Last…
joda32/aditActive Directory recon and read-only security audit over ADWS (net.tcp/9389), in Go
kr0no/bloodhound-shellAn interactive command-line shell for BloodHound API.
ambitsecurity/jshoundFind every API request a web app makes, from the JavaScript it ships: method, URL, body, headers and GraphQL operations. One command.