Tools

usestrix/strix

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

pycqa/bandit

Bandit is a tool designed to find common security issues in Python code.

trufflesecurity/trufflehog

Find, verify, and analyze leaked credentials

jaeles-project/jaeles

The Swiss Army knife for automated Web Application Testing

s0md3v/hardcodes

find hardcoded strings from source code

nightwatchcybersecurity/truegaze

Static analysis tool for Android/iOS apps focusing on security issues outside the source code

tejado/telegram-nearby-map

Maps nearby Telegram users using trilateration of distance data from the official Telegram library and OpenStreetMap, for OSINT and geolocation…

vladko312/sstimap

Automatic SSTI detection tool with interactive interface

peass-ng/peass-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

projectdiscovery/nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

atomdrift-project/scan

0-day malware detection for binaries, source & scripts (that doesn't suck)

nmap/nmap

High-performance network discovery and security auditing tool with advanced port scanning, OS detection, service version detection, and scriptable…

ajinabraham/njsscan

Semantic-aware SAST scanner for Node.js applications that detects insecure code patterns using libsast pattern matching and semgrep syntax-aware…

theflink/deepsleep

A variant of Gargoyle for x64 to hide memory artifacts using ROP only and PIC

crytic/echidna

Ethereum smart contract fuzzer

alessandroz/beroot

Privilege Escalation Project - Windows / Linux / Mac

spyboy-productions/cloakquest3r

Open-source security research tool for identifying origin IP exposure of websites protected by Cloudflare and similar reverse proxy services.