prowler-cloud/prowlerProwler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.…
fleetdm/fleetOpen-source platform to secure and manage endpoints via MDM, patch management, software deployment, and osquery-powered visibility with compliance…
the-infra-company/kcatcherCatch what's lurking in your Kafka clusters.
kathanp19/jsfscan.shAutomation for javascript recon in bug bounty.
h3x0v3rl0rd/cve-2007-2447Python exploit for CVE-2007-2447 targeting Samba smbd 3.0.20-Debian with reverse shell payload delivery via Netcat listener.
hackerest/pwneyeYour ONVIF and RTSP camera companion for discovering and hacking real-world security cameras 🎥
cloudflare/security-audit-skillA coding-agent skill for multi-phase security audits with independently verified, machine-readable findings
big-comfy/deadairFinds the detection rules in your SIEM that are running blind
teycir/burpapisecuritysuiteBurp Suite extension for API security testing with 15 attack types, 108+ payloads, intelligent fuzzing, BOLA/IDOR detection, AI integration, and…
psecio/versionscanA PHP version scanner for reporting possible vulnerabilities
ustayready/thunderstormA collector and derivation engine. It maps your environment, evaluates effective permissions and trust, and writes a complete attack graph as a…
mfthomps/labtainersLabtainers: A Docker-based cyber lab framework
owasp-noir/alibiCross-check the views of your attack surface and find the endpoints that cannot corroborate each other.
s0ld13rr/pentestcodeAutonomous AI penetration testing agent that orchestrates multi-agent recon, exploitation, post-exploitation, and reporting with persistent…
bishopfox/iam-vulnerableUse Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.
tismayil/fastfuz-chrome-extChrome extension for fast web fuzzing to discover hidden files and directories during penetration testing and vulnerability analysis.
