feed · watching · stats · help with your tokens
AI & LLMAgents & MCPSelf-hostedNetworkingSecurityDevOps & cloudData & databasesWebMobileTerminalDeveloper toolsLearningMusic & mediaHome & IoT
PythonTypeScriptJavaScriptGoRustCC++JavaC#SwiftKotlinPHPRubyShellHTMLZig
- sherlock-project/sherlock
Hunt down social media accounts by username across social networks
- swisskyrepo/PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
- Z4nzu/hackingtool
ALL IN ONE Hacking Tool For Hackers
- usestrix/strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
- Gathin23/cleanyourtv
Debloat any Android or Google TV over Wi-Fi and get an Apple TV-style home.
- mitmproxy/mitmproxy
An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
- soxoj/maigret
🕵️♂️ Collect a dossier on a person by username from 6K websites
- searxng/searxng
SearXNG is a free internet metasearch engine which aggregates results from various search services and databases. Users are neither tracked nor profiled.
- sqlmapproject/sqlmap
Automatic SQL injection and database takeover tool
- mukul975/Anthropic-Cybersecurity-Skills
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
- StevenBlack/hosts
🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.
- trailofbits/algo
Set up a personal VPN in the cloud
- ungoogled-software/ungoogled-chromium
Google Chromium, sans integration with Google
- goauthentik/authentik
The authentication glue you need.
- smicallef/spiderfoot
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
- SWE-agent/SWE-agent
SWE-agent takes a GitHub issue and tries to automatically fix it, using your LM of choice. It can also be employed for offensive cybersecurity or competitive coding challenges. [NeurIPS 2024]
- HunxByts/GhostTrack
Useful tool to track location or mobile number
- eosphoros-ai/DB-GPT
open-source agentic AI data assistant for the next generation of AI + Data products.
- fail2ban/fail2ban
Daemon to ban hosts that cause multiple authentication errors
- GreyDGL/PentestGPT
Automated Penetration Testing Agentic Framework Powered by Large Language Models
- mvt-project/mvt
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
- Datalux/Osintgram
Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname
- prowler-cloud/prowler
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
- maurosoria/dirsearch
Web path scanner
- wifiphisher/wifiphisher
The Rogue Access Point Framework
- evilsocket/opensnitch
OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.
- qazbnm456/awesome-web-security
🐶 A curated list of Web Security materials and resources.
- borgbackup/borg
Deduplicating archiver with compression and authenticated encryption.
- StarTrail-org/LEANN
[MLsys2026 Best Paper]: https://arxiv.org/abs/2506.08276. RAG on Everything with LEANN. Enjoy 97% storage savings while running a fast, accurate, and 100% private RAG application on your personal device.
- 0x4m4/hexstrike-ai
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.