feed · watching · stats · help with your tokens
AI & LLMAgents & MCPSelf-hostedNetworkingSecurityDevOps & cloudData & databasesWebMobileTerminalDeveloper toolsLearningMusic & mediaHome & IoT
PythonTypeScriptJavaScriptGoRustCC++JavaC#SwiftKotlinPHPRubyShellHTMLZig
- OWASP/mastg
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
- threat9/routersploit
Exploitation Framework for Embedded Devices
- secdev/scapy
Scapy: the Python-based interactive packet manipulation program & library.
- jopohl/urh
Universal Radio Hacker: Investigate Wireless Protocols Like A Boss
- data-privacy-stack/presidio
An open-source framework for detecting, redacting, masking, and anonymizing sensitive data (PII) across text, images, and structured data. Supports NLP, pattern matching, and customizable pipelines.
- benbusby/whoogle-search
A self-hosted, ad-free, privacy-respecting metasearch engine
- SigmaHQ/sigma
Main Sigma Rule Repository
- bunkerity/bunkerweb
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
- frappe/frappe
Low code web framework for real world applications, in Python and Javascript
- blacklanternsecurity/bbot
The recursive internet scanner for hackers. 🧡
- OpenMined/PySyft
Perform data science on data that remains in someone else's server
- aliasrobotics/cai
Cybersecurity AI (CAI), the framework for AI Security
- antoniaci/blackbird
An OSINT tool to search for accounts by username and email in social networks.
- LearningCircuit/local-deep-research
~95% on SimpleQA (e.g. Qwen3.6-27B on a 3090). Supports all local and cloud LLMs (llama.cpp, Ollama, Google, ...). 10+ search engines - arXiv, PubMed, your private documents. Everything Local & Encrypted.
- sensepost/objection
📱 objection - runtime mobile exploration
- byt3bl33d3r/CrackMapExec
A swiss army knife for pentesting networks
- jofpin/trape
People tracker on the Internet: OSINT analysis and research tool by Jose Pino
- n1nj4sec/pupy
Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C
- mailpile/Mailpile
A free & open modern, fast email client with user-friendly encryption and privacy features
- firerpa/lamda
Android Full-Stack Device Control Platform: WebRTC/H.264 remote desktop, UI/OCR/image-matching automation, one-click MITM, built-in Frida, proxy/VPN/frp/P2P networking, MCP/Agent, 160+ APIs, designed for multi-device clusters and engineered deployments.
- stamparm/maltrail
Malicious traffic detection system
- TheKingOfDuck/fuzzDicts
You Know, For WEB Fuzzing !
- PyCQA/bandit
Bandit is a tool designed to find common security issues in Python code.
- nccgroup/ScoutSuite
Multi-Cloud Security Auditing Tool
- anthropics/defending-code-reference-harness
Skills for threat modeling, scanning, triage, patching, plus an autonomous scanning harness you can /customize
- 0xInfection/Awesome-WAF
Everything about Web Application Firewalls (WAFs) from Security Standpoint! 🔥
- apache/caldera
Automated Adversary Emulation Platform
- Tencent/AI-Infra-Guard
A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.
- bleachbit/bleachbit
BleachBit system cleaner for Windows and Linux
- netalertx/NetAlertX
Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.