security-tools

The Official Bash Bunny Payload Repository

Attack Surface Analyzer can help you analyze your operating system's security configuration for changes during software installation.

lightweight, dependency-free bash script for security, performance auditing and infrastructure monitoring of Linux servers.

Open source vulnerability DB and triage service.

Vulnerability Intelligence Platform

Security automation content in SCAP, Bash, Ansible, and other formats

Patch-level verification for Bundler

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

OSINT & recon toolkit // 100+ tools, one-command installer, SOCMINT, GEOINT, network recon, dark web, forensics & more.

🕵️ OSINT Tools for gathering information and actions forensics 🕵️

一款部署于云端或本地的隧道代理池中间件，可将静态代理IP灵活运用成隧道IP，提供固定请求地址，一次部署终身使用

Security sensor for realtime threat detection and protection

A AI general-purpose state-space search engine, validated first on autonomous penetration testing.

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...

The Swiss Army knife for automated Web Application Testing

针对SpringBoot的开源渗透框架，以及Spring相关高危漏洞利用工具

🔐🌐 Privacy-respecting web frontends for popular services

Run any Linux process in a secure, unprivileged sandbox using Landlock. Think firejail, but lightweight, user-friendly, and baked into the kernel.

Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.

Drone pentesting framework console

Asset discovery and identification tools 快速识别 Web 指纹信息，定位资产类型。辅助红队快速定位目标资产信息，辅助蓝队发现疑似脆弱点

Quickly clone or backup massive amounts of org/users repositories into one directory - Supports GitHub, GitLab, Bitbucket, and more 🐇🥚

面向红队的, 高性能高度自由可拓展的自动化扫描引擎 | A highly controllable and extensionable automated scanning engine for red teams

ARL官方仓库备份项目：ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

Curated List of Privacy Respecting Services and Software

All-in-One malware analysis tool.

Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.

A collection of awesome resources & modules for the Flipper Zero device. Best used with Rogue Master Flipper Zero Custom Firmware.