security-tools

Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.

Dark Web OSINT Tool

IntelOwl: manage your Threat Intelligence at scale

Applied offensive security with Rust - https://kerkour.com/black-hat-rust

A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.

📡 Comprehensive collection of OSINT tools for cybersecurity professionals, researchers, and bug bounty hunters. Topics: information gathering, reverse search, red team, trust & safety, AI.

🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.

A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.

State-of-the-art native debugging tools

Awesome hacking is an awesome collection of hacking tools.

Practical Ethical Hacking Labs 🗡🛡

Hide secrets with invisible characters in plain text securely using passwords 🧙🏻‍♂️⭐

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.

My simple Swiss Army knife for http/https troubleshooting and profiling.

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

EMBA - The firmware security analyzer

⚔️Windows11 Penetration Suite Toolkit 🔰 The First Windows Penetration Testing Environment on Mac M Chips

An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners. I'm just maintaining it.

An ArchLinux based distribution for penetration testers and security researchers.

Open-source sandboxed agent harness for teams. Giving every employee a secured personal agent.

Nmap NSE scripts that turn a service scan into CVEs, CVSS scores and known exploits — fingerprints software from HTTP responses and checks every detected CPE against the Vulners database.

👻Stowaway -- Multi-hop Proxy Tool for pentesters

:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:

Automated NoSQL database enumeration and web application exploitation tool.

Platform Security Assessment Framework

Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start

🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.

基于 AI Agent + MCP 工具链 + 渗透 Skill 编排， 配合大语言模型， 自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。

A repository of sysmon configuration modules

ContainerSSH: Launch containers on demand