Search awesome repositories

Hide secrets with invisible characters in plain text securely using passwords 🧙🏻‍♂️⭐

:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:

Automated NoSQL database enumeration and web application exploitation tool.

The Security Toolkit for LLM Interactions

🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.

Patch-level verification for Bundler

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

Open-source credential gateway with a built-in vault. give your AI agents access to services without exposing keys.

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

Run any Linux process in a secure, unprivileged sandbox using Landlock. Think firejail, but lightweight, user-friendly, and baked into the kernel.

Find web directories without bruteforce

Resources to help you keep secrets (API keys, database credentials, certificates, ...) out of source code and remediate the issue in case of a leaked API key. Made available by GitGuardian.

:star: :star: Distributed tcpdump for cloud native environments :star: :star:

Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS

open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

An Active Defense and EDR software to empower Blue Teams

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

Program to reverse Docker images into Dockerfiles

A modular vulnerability scanner with automatic report generation capabilities.

Find exploit tool

Python low-interaction honeyclient

A security scanner for your LLM agentic workflows

:key: Hash type identifier (CLI & lib)

Hacking Toolkit

Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.

My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.

Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.

Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).

CMS/LMS/Library etc Versions Fingerprinter