Open Source Threat Detection Response Tools

PayloadsAllTheThings ★ 82K

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Anthropic-Cybersecurity-Skills ★ 35K

817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud

pentagi ★ 33K

Fully autonomous AI Agents system capable of performing complex penetration testing tasks

ProjectDiscovery ★ 33K

Advanced vulnerability detection and management platform

PentestGPT ★ 16K

Automated Penetration Testing Agentic Framework Powered by Large Language Models

ecapture ★ 16K

Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64 and arm64.

crowdsec ★ 15K

Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.

Osintgram ★ 15K

Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname

thc-hydra ★ 12K

hydra

vuls ★ 12K

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

osv-scanner ★ 11K

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

rengine ★ 8.9K

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data corr

reconftw ★ 8.3K

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

cve ★ 8.2K

Gather and update all available and newest CVEs with their PoC.

WhatWeb ★ 7.0K

Next generation web scanner

AllHackingTools ★ 6.5K

All-in-One Hacking Tools For Hackers! And more hacking tools! For termux.

PhoneSploit-Pro ★ 6.4K

An all-in-one hacking tool to remotely take over Android devices.

Infosec_Reference ★ 6.0K

An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

Nettacker ★ 5.7K

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

pacu ★ 5.4K

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

cameradar ★ 5.3K

Cameradar hacks its way into RTSP videosurveillance cameras

GDA-android-reversing-Tool ★ 4.9K

the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports mali

airgorah ★ 4.9K

A WiFi security auditing software

malicious-pdf ★ 4.5K

💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and w

afrog ★ 4.5K

A Security Tool for Bug Bounty, Pentest and Red Teaming.

knockpy ★ 4.2K

Knock Subdomain Scan

Raccoon ★ 4.1K

A high performance offensive security tool for reconnaissance and vulnerability scanning

Tracecat ★ 3.9K

Open source security automation platform for builders

emba ★ 3.7K

EMBA - The firmware security analyzer

dockle ★ 3.3K

Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start

redamon ★ 3.3K

Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approv

Pentest-Swarm-AI ★ 3.1K

Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — su

bundler-audit ★ 2.8K

Patch-level verification for Bundler

sn0int ★ 2.6K

Semi-automatic OSINT framework and package manager

brutespray ★ 2.6K

Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.

artex-global ★ 2.5K

ARTEX 한국어판 · AI 자율 침투 테스트 프레임워크(upstream: Autumn-27/ARTEX, AGPL-3.0)

find-sec-bugs ★ 2.5K

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

nfcgate ★ 2.4K

An NFC research toolkit application for Android

ezXSS ★ 2.4K

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

linWinPwn ★ 2.2K

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

evillimiter ★ 2.0K

Tool that monitors, analyzes and limits the bandwidth of devices on the local network without administrative access

AngryOxide ★ 2.0K

802.11 Attack Tool

DSInternals ★ 2.0K

Directory Services Internals (DSInternals) PowerShell Module and Framework

cset ★ 1.9K

Cybersecurity Evaluation Tool

nomore403 ★ 1.9K

403/401 bypass tool: finds HTTP access-control bypasses via path, method, header and raw-request mutations. Baseline diff, auto-calibration, replayable curl evi

linkedin2username ★ 1.9K

OSINT Tool: Generate username lists for companies on LinkedIn

fsociety ★ 1.9K

A Modular Penetration Testing Framework

inql ★ 1.8K

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Bu

npq ★ 1.8K

safely install npm packages by auditing them pre-install stage

One-Lin3r ★ 1.8K

Gives you one-liners that aids in penetration testing operations, privilege escalation and more

SSTImap ★ 1.7K

Automatic SSTI detection tool with interactive interface

graudit ★ 1.7K

grep rough audit - source code auditing tool

enum4linux-ng ★ 1.7K

A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and

GooFuzz ★ 1.6K

GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the

crlfuzz ★ 1.6K

A fast tool to scan CRLF vulnerability written in Go

clairvoyance ★ 1.6K

Obtain GraphQL API schema even if the introspection is disabled

mutillidae ★ 1.5K

OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an easy-to-use web hac

ssh-mitm ★ 1.5K

SSH-MITM - ssh audits made simple

NOIR ★ 1.4K

手机隐私审计：用 adb 扫出 Android 应用的权限、上报端点与数据流向，并给出可回滚的处置。Desktop Android leak audit: permissions, endpoints, data flows, reversible fixes.

cwe_checker ★ 1.4K

cwe_checker finds vulnerable patterns in binary executables

scilla ★ 1.3K

Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration

Artemis ★ 1.3K

A modular vulnerability scanner with automatic report generation capabilities.

artifact-keeper ★ 1.2K

Open-source universal artifact registry. Drop-in Artifactory/Nexus alternative with 40+ package formats, security scanning, WASM plugins, and edge replication.

KubeHound ★ 1.0K

Tool for building Kubernetes attack paths

pojia-next ★ 1.0K

十五个 AI 客户端的内置提示词一键替换：双击即用、可自证、改前备份、一键还原。v8.26：一键破甲全程托管（自动结束进程+注入+自动拉起）、注入步骤实时提示、写后自检回滚、托盘常驻。免装 Python 单文件 exe，完全免费开源。

HydraSoft-DLL-Hijack-Scanner ★ 821

HydraSoft: dependency-free Windows DLL hijack scanner with centralized remote management — HydraAgent, PHP API, and a web console for endpoint security checks a

cve-lite-cli ★ 782

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output,

opentrap ★ 775

A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWA

tenzir ★ 770

Tenzir is the data pipeline engine for security teams.

RedTiger-Tools ★ 763

RedTiger-Tools is a multifunction automation tool dedicated to pentesting and OSINT. The project is open source and designed to be fully configurable according

Powershellisfun ★ 728

Repository with the scripts that I have used in my blogs on https://powershellisfun.com. If you like these, please sponsor this project using the Sponsor button

Snitch ★ 693

Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteu

pika ★ 656

Lightweight probe monitoring — Go + VictoriaMetrics + PostgreSQL/SQLite | Real-time metrics, service checks, tamper protection & security audit

eraser ★ 627

🧹 Cleaning up images from Kubernetes nodes

rustinel ★ 526

Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.

Zen-Ai-Pentest ★ 501

🛡⚔️AI-Powered Penetration Testing Framework with automated vulnerability scanning, multi-agent system, and compliance reporting🛡⚔️