automated-pentesting-tool #pentest
AutoPentestTool/

https://github.com/AbhishekGolsar/automated-pentesting-tool

pentest-kit #password #scanner
PentestKit is a modular penetration testing toolkit built in Go, combining port scanning, directory brute-forcing, security header analysis, and network discovery into a single powerful CLI tool.

https://github.com/anass-asbai/pentest-kit

NetRunn3r #bugbounty #recon #scanner
Automation tool for Bug Bounty from Recon -> Enum -> Vuln Scan

https://github.com/m3m0rydmp/NetRunn3r

Recon-X #osint #recon
A Linux tool for gathering system,network,and basic OSINT information with secure,consent based tracking.

https://github.com/adithyanks2005/Recon-X

missingpersons-sd-gov-documentation #osint
A Node.js + Puppeteer OSINT tool that extracts publicly available data from the South Dakota Missing Persons database missingpersons.sd.gov and converts it into a clean, automatically updated CSV d...

https://github.com/CoreData-Labs/missingpersons-sd-gov-documentation

WhiteSINT #osint
An OSINT Multi-Tool, written in python for White Hat usage

https://github.com/no0xpy/WhiteSINT

ethereum-contract-audit-checklist #scanner
Security audit checklist and automated scanner for common Solidity vulnerabilities before mainnet deploy

https://github.com/yellowpeacockavzoohlk/ethereum-contract-audit-checklist

CyberOS-Cardputer #scanner #wireless
Cyberpunk OS for M5Stack Cardputer ⚡ WiFi scanner • Radar • Security detect • Hacker UI

https://github.com/nguyenphuhoang243-web/CyberOS-Cardputer

cookie-audit #scanner
Most cookie consent setups are broken in ways nobody notices until an audit. This Puppeteer-powered CLI fires up a headless browser to capture, classify, and grade every cookie your site sets. Scan...

https://github.com/diShine-digital-agency/cookie-audit

grasp #scanner #web
98-tool MCP server + interactive architecture maps for any repo or local codebase. Dependency graphs, security scanner, DORA metrics, Grasp Brain (SQLite+Kuzu), AI chat — 34 languages, 15 AI provid...

https://github.com/ashfordeOU/grasp

superlevels #ad #exploit
A super Chrome extension I made that's safer than installing external malware/spyware-filled extensions that form a massive security risk, this one is open source and you can read and check the sou...

https://github.com/levelsio/superlevels

hackingtool-plugin #osint
Claude Code plugin: 183+ pentesting & OSINT tools from Z4nzu/hackingtool. Auto-runs what it can, hands off the rest.

https://github.com/AKCodez/hackingtool-plugin

vlnr #exploit #scanner
AI security agent for the Python supply chain: scans packages, generates exploits, and validates them in Docker, autonomously.

https://github.com/nandrzej/vlnr

WeSCE-Benchmark #pentest
WeSCE: Multi-Scale Energy Benchmark for Security Drift in Weakly-Specified LLM Code Editing

https://github.com/WoooooZzy/WeSCE-Benchmark

cis-backend #pentest
this project is a backend service designed to support a CIS (Center for Internet Security) advisory or compliance system. It provides APIs and logic for evaluating, managing, and reporting security...

https://github.com/devpulse-star/cis-backend

Auctify #web
Professional auction house plugin for Minecraft Paper/Spigot servers with real-time bidding, H2/MySQL/SQLite storage, multi-language support, and bank-grade security.

https://github.com/PteroxOS/Auctify

netwatch #osint
NETWATCH is a terminal-based security monitoring tool that gives you continuous, live visibility into every active network connection on your machine, with automatic risk scoring, GeoIP intelligenc...

https://github.com/kyegomez/netwatch

not-a-security-issue #exploit
A deterministic Use-After-Free (UAF) in com.apple.iokit.IOSurface affecting macOS 15.x through 26.x. Reported to Apple, but they were 'unable to identify a security issue.' So, here is the PoC for ...

https://github.com/MEKOD/not-a-security-issue

kernelbreach-app #pentest
a hacker themed, pokemon inspired, dungeon crawling ASCII RPG

https://github.com/knightsky-cpu/kernelbreach-app

leona-open #exploit
Leona open-source shell: Android runtime security alpha + server-side BoxId pipeline

https://github.com/zedbully/leona-open

SecScan #exploit #scanner
Local-LLM-powered security scanner. Multi-lens per-file review + architecture extraction + threat-model synthesis + sandboxed exploit PoCs. 100% local inference via LM Studio.

https://github.com/jhammant/SecScan