Security tools

A curated meta-repository that aggregates 751+ OSINT, penetration testing, forensics, and security tools across 50 categories with automated...

VulnClaw is an AI-driven penetration testing CLI tool that automates the full attack lifecycle—reconnaissance, vulnerability discovery, exploitation,...

VPS Audit is a lightweight, dependency-free Bash script for security and performance auditing of Linux servers, specifically targeting Debian/Ubuntu...

CyberStrike is an open-source AI-powered offensive security agent that automates penetration testing by integrating with LLMs (Claude, GPT, etc.) to...

PentAGI is a fully autonomous AI-powered penetration testing platform that orchestrates multi-agent systems to conduct complex security assessments...

Betterleaks is a configurable secrets scanner for detecting exposed credentials across Git repositories, cloud storage, and collaboration platforms....

Metabigor is an OSINT reconnaissance tool written in Go that performs network discovery, certificate transparency searches, IP enrichment, and...

Claude-BugHunter is a specialized skill bundle for the Claude Code system that transforms Claude into a bug-hunting and red-team operator, bundling...

privacy.sexy is an open-source desktop tool for enforcing privacy and security hardening configurations on Windows, macOS, and Linux through...

pentest-ai-agents is a collection of 50 Claude Code subagents that extend Claude into an offensive security research assistant, covering recon, web...

AutoCVE is an agent-driven automated platform for CVE discovery through source code auditing, vulnerability verification, and report generation. It...

Cairn is a state-space search engine designed for AI-driven autonomous penetration testing and vulnerability discovery. It uses a blackboard...

This repository is a curated collection of 150+ red teaming tools and techniques designed for penetration testers and security professionals...

MetaRadar is an Android application for scanning, analyzing, and tracking Bluetooth Low Energy (BLE) devices in your environment, with capabilities...

OneCLI is an open-source credential gateway that acts as a proxy between AI agents and external services, storing secrets centrally and injecting...

Project Copacetic (copa) is a CLI tool for patching container image vulnerabilities directly without full image rebuilds, using vulnerability...

Security Onion is a free, open Linux distribution for threat hunting, network security monitoring, and log management that bundles IDS, PCAP...

AI-Infra-Guard is a comprehensive red teaming platform by Tencent's Zhuque Lab designed to identify security vulnerabilities in AI systems through...

Password Pusher is a self-hosted web application for securely sharing passwords, text, files, and URLs via auto-expiring links with full audit...

OSV.dev is Google's open-source vulnerability database and triage service that aggregates security vulnerabilities across ecosystems and provides an...

reconFTW is an automated reconnaissance framework designed for bug bounty hunters and penetration testers to enumerate subdomains, perform security...

CVE Binary Tool is a free, open-source security scanner that identifies known vulnerabilities in binaries and software components by matching against...

Zizmor is a static analysis tool for GitHub Actions written in Rust that identifies common security vulnerabilities in CI/CD workflows, including...

Keychain 3 is a Python rewrite of a classic shell tool that manages SSH and GPG agent lifecycle across login shells, cron jobs, and remote sessions....

LuaN1aoAgent is an autonomous penetration testing agent powered by large language models that uses a Plan-Execute-Reflect framework combined with...

This is a curated index of OSINT (Open Source Intelligence) tools and resources organized by category—covering areas like breach databases, social...

Infisical is an open-source secrets and certificate management platform designed for teams to centralize, sync, and rotate secrets across...

ghorg is a CLI tool that rapidly clones or backs up all repositories from an organization or user across multiple Git providers (GitHub, GitLab,...

dotenvx is a secure, multi-environment configuration manager that extends the original dotenv library with encryption and cross-platform CLI...

Trivy is a comprehensive security scanner for finding vulnerabilities, misconfigurations, secrets, and software licenses across container images,...