parsex #pentest
Parse and extract key data across multiple security tools

https://github.com/thelicato/parsex

OWASP-Top-10-Web-Security-Notes #exploit #scanner #web
Comprehensive beginner-to-advanced OWASP Top 10 notes covering web application vulnerabilities, exploitation techniques, prevention methods, security testing tools, and practical cybersecurity conc...

https://github.com/Deependu001/OWASP-Top-10-Web-Security-Notes

pussy-project.github.io #osint #web
Official website for Pussy OSINT tool

https://github.com/pussy-project/pussy-project.github.io

pussy #osint
Complete OSINT tool for information gathering

https://github.com/pussy-project/pussy

cve-hunt-tool #exploit #osint
Local OSINT pipeline for CVE threat intelligence -13 sources, MITRE ATT&CK, MSRC, KQL queries, Claude AI enrichment

https://github.com/shelvinjohn/cve-hunt-tool

doxcord #osint
osint tool for dumping links containing trackers from each user on one or all discords

https://github.com/boringthegod/doxcord

Vulnerability_Assessment_Labs #scanner #web
This repository contains a structured series of Vulnerability Assessment labs focused on SOC and Blue Team skills. The labs cover vulnerability scanning, network and web assessment, misconfigurati...

https://github.com/Najya808/VulnerabilityAssessmentLabs

qlint #scanner
Multi-language code quality scanner. Walks any codebase and produces JSON, HTML, and Markdown reports covering complexity, duplication, security, and code smells.

https://github.com/ropean/qlint

cherenkov-professional #scanner
Autonomous AI-powered security testing framework with dual-brain architecture. 132+ scanners, zero-trust design, Ollama-powered local execution. MIT Licensed.

https://github.com/moaidmoatasem/cherenkov-professional

sentivoguard #scanner
Complete privacy & security desktop suite — 14 integrated tools, real-time scanner, encrypted vault, license-gated Windows installer.

https://github.com/artffee/sentivoguard

Orbit #cloud #exploit
Orbit is a comprehensive, security-first server management platform that unifies app deployment, database management, GitOps automation, real-time monitoring, and enterprise-grade security tools (W...

https://github.com/KenyanRedwoods01/Orbit

MCPGuard #pentest
MCPGuard is a CLI for security and reliability checks on MCP tools before AI agents call them. It validates schema quality, runtime behavior, timeout handling, and secret leakage risks.

https://github.com/hieuchaydi/MCPGuard

cathook #pentest
2026 x64 linux training software

https://github.com/pupnoodle/cathook

L0ck #pentest
A security-first macOS encryption app that locks files into device-bound .l0ck containers using Keychain-backed keys, protected preview flows, and system-level safeguards against unauthorized delet...

https://github.com/lopleec/L0ck

m365-security-toolkit #pentest
Free M365 MFA Audit script + Security Hardening Pack for MSP admins

https://github.com/JUrica11/m365-security-toolkit

actionfence #pentest
Embeddable AI action firewall for MCP servers and APIs

https://github.com/saifeldeen911/actionfence

sec-npm #pentest
🛡️ Zero-Trust npm wrapper for secure package installations. Deep AST & Shadow Execution detection for Zero-Day threats. Active Honey-Trap defense to block credential exfiltration.

https://github.com/OussamaGhribi/sec-npm

ai-repository-security-baseline #exploit #scanner
A baseline configuration and guidelines for securing source code repositories, covering branch protection, access controls, secret scanning, and CI/CD hardening.

https://github.com/the-missing-pink/ai-repository-security-baseline

linux-from-zero-ar #pentest
A complete Arabic Linux guide for beginners covering commands, permissions, networking, bash scripting, system administration, and security basics.

https://github.com/eiadnouman/linux-from-zero-ar

copyfail-rs #exploit #scanner
Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.

https://github.com/Liverwortenuresis371/copyfail-rs

smart-contract-security #exploit #scanner
Smart contract auditing journey — Ethernaut, Damn Vulnerable DeFi, exploit POCs, and audit reports.

https://github.com/josmiles/smart-contract-security