Open source infosec projects
Every project in the registry tagged infosec, ranked by real GitHub adoption.
🕵️♂️ Collect a dossier on a person by username from 3000+ sites
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data corr
Gather and update all available and newest CVEs with their PoC.
Open Source Vulnerability Management Platform
An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.
Cameradar hacks its way into RTSP videosurveillance cameras
Applied offensive security with Rust - https://kerkour.com/black-hat-rust
Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
EMBA - The firmware security analyzer
Pentest Report Generator
Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.
Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, r
Free email OSINT tool, 5000+ platforms, identity clustering, breach detection. No API keys required. pip install mailaccess
GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the
Reconmap is a collaboration-first security operations platform for infosec teams and MSSPs, enabling end‑to‑end engagement management, from reconnaissance throu
Dradis Framework: Collaboration and reporting for IT Security teams
Agile Threat Modeling Toolkit
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWA
MasterParser is a powerful DFIR tool designed for analyzing and parsing Linux logs
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
Related tags
Frequently asked questions
How many open source infosec projects are there?
This registry tracks 21 projects tagged infosec, with 138,433 GitHub stars between them. The most-adopted is maigret at 39,620 stars.
Are these infosec projects free to use?
Yes — 21 of the 21 carry an explicit open-source licence across 5 distinct licences, so there is no licence fee. Where a project also sells a hosted or enterprise version, the self-hosted path remains free.
Which infosec project should I choose?
The list above is ranked by GitHub stars, but stars measure attention rather than fit. Check three things on each card: the licence (permissive versus copyleft), the language it is written in, and the last-push date — a high-star project that has not been pushed in a year is a liability.
Are these infosec projects still maintained?
17 of the 21 were pushed in the last 90 days, and every card shows its exact last-push date so you can see the rest. Sort your shortlist by that date before committing to a migration.