discover · compare · collections · requirements · contribute · feed · watching · stats · help with your tokens
AI & LLMAgents & MCPSelf-hostedNetworkingSecurityDevOps & cloudData & databasesWebMobileTerminalDeveloper toolsLearningMusic & mediaHome & IoT
PythonTypeScriptJavaScriptGoRustCC++JavaC#SwiftKotlinPHPRubyShellHTMLZig
- bee-san/pyWhat
🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙♀️
- onionshare/onionshare
Securely and anonymously share files, host websites, and chat with friends using the Tor network
- lwthiker/curl-impersonate
curl-impersonate: A special build of curl that can impersonate Chrome & Firefox
- guardicore/monkey
Infection Monkey - An open-source adversary emulation platform
- beenuar/AiSOC
Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.
- CTFd/CTFd
CTFs as you need them
- infobyte/faraday
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.
- ihebski/DefaultCreds-cheat-sheet
One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️
- cowrie/cowrie
Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/
- reddelexc/hackerone-reports
Top disclosed reports from HackerOne
- BitterSecurity/Decepticon
Autonomous Hacking Agent for Red Team
- microsoft/agent-governance-toolkit
AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.
- yadm-dev/yadm
Yet Another Dotfiles Manager
- AzeemIdrisi/PhoneSploit-Pro
An all-in-one hacking tool to remotely take over Android devices.
- androguard/androguard
Reverse engineering and pentesting for Android applications
- infinition/Bjorn
Bjorn is a powerful network scanning and offensive security tool for the Raspberry Pi with a 2.13-inch e-Paper HAT. It discovers network targets, identifies open ports, exposed services, and potential vulnerabilities. Bjorn can perform brute force attacks, file stealing, host zombification, and supports custom attack scripts.
- Trusted-AI/adversarial-robustness-toolbox
Adversarial Robustness Toolbox (ART) - Python Library for Machine Learning Security - Evasion, Poisoning, Extraction, Inference - Red and Blue Teams
- ChrispyBacon-dev/DockFlare
DockFlare: Automate Cloudflare Tunnels with Docker Labels
- bitbrute/evillimiter
Tool that monitors, analyzes and limits the bandwidth of devices on the local network without administrative access
- 1tayH/noisy
Simple random DNS, HTTP/S internet traffic noise generator
- Ge0rg3/requests-ip-rotator
A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing.
- nickspaargaren/no-google
Completely block Google and its services
- v3n0m-Scanner/V3n0M-Scanner
Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns
- TheresAFewConors/Sooty
The SOC Analysts all-in-one CLI tool to automate and speed up workflow.
- nfstream/nfstream
NFStream: a Flexible Network Data Analysis Framework.
- uber-common/metta
An information security preparedness tool to do adversarial simulation.
- ezaquarii/vpn-at-home
1-click, self-hosted deployment of OpenVPN with DNS ad blocking sinkhole
- fportantier/habu
Hacking Toolkit
- bitwire-it/ipblocklist
IP lists full of bad IPs - Updated every 2H
- sadhgurutech/mailtrim
Delete years of Gmail clutter in minutes. Free, open-source, privacy-first.