reposcan #scanner
Scan cloned repositories for suspicious artifacts with this local, dependency-free security tool.

https://github.com/dyego63-arch/reposcan

oryon-action #scanner
Oryon headless security scanner and GitHub Action MVP

https://github.com/Guayamose/oryon-action

pi-psst #pentest
Inject vault secrets into bash commands and scrub sensitive data from AI agent outputs automatically.

https://github.com/twylatrumpetlike730/pi-psst

next-16.2.4-pocs #exploit
Next.js v16.2.4 Security PoC Collection (CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, CVE-2026-44581, CVE-2026-44580, CVE-2026-44577, CVE-2026-445...

https://github.com/dwisiswant0/next-16.2.4-pocs

opsec-atlas #pentest
The Operator's Field Map for Offensive Security

https://github.com/msk3d0ut/opsec-atlas

server-hardening-guides #web
Production security checklists for self-hosted web applications — WordPress/Docker stack hardening, pentest-validated, adversarial-reviewed.

https://github.com/biyro02/server-hardening-guides

CHUNZA-Security #pentest
CHUNZA v1.6.0 @sdk57849/CHUNZA-Security

https://github.com/sdk12339/CHUNZA-Security

Security-Quiz-System #pentest
Security-Quiz-System security / pentest utility.

https://github.com/Ericktxy28967/Security-Quiz-System

Local-Model #pentest
Autonomous security agent on Kali Linux using Qwen 2.5-7B with LM Studio

https://github.com/XenoCoreGiger31/Local-Model

FlowiseAI-CVE-Chain-PoC #exploit
FlowiseAI CVE-2025-58434 & CVE-2025-59528 exploit PoC, demonstrating unauthenticated ATO via reset token leakage, followed by authenticated RCE. Includes a reproductible Docker lab environment.

https://github.com/0xDaeras/FlowiseAI-CVE-Chain-PoC

envleaks #scanner
Scan code, git history, and CI for exposed secrets, API keys, and credentials with 100+ patterns and SARIF output

https://github.com/Archducal-woodthrush229/envleaks

keyhog #scanner
The fastest, most accurate secret scanner. 896 detectors, Hyperscan SIMD, GPU acceleration, 96% recall. Built in Rust.

https://github.com/santhsecurity/keyhog

CodeAlpha_Network_Sniffer #pentest
A Python-based Network Sniffer tool developed for the CodeAlpha Cybersecurity Internship. It captures live network traffic and analyzes IP addresses, protocols (TCP/UDP/ICMP), and data payloads for...

https://github.com/SaeedAhmad7tuygbguyg/CodeAlphaNetworkSniffer

GhostDorks #bugbounty #exploit #osint #recon
Project Ghost Engine is an advanced, automated OSINT (Open Source Intelligence) and reconnaissance tool designed for security researchers, bug bounty hunters, and penetration testers. It aggregat...

https://github.com/G3eKLAZy/GhostDorks

osint-username-enumerator #osint #recon
OSINT username enumeration tool that replaces rigid, exact-string matching with algorithmic permutations.

https://github.com/gfranklin1/osint-username-enumerator

OSINT #exploit #osint
Curated list of tools and resources for open-source intelligence investigation.

https://github.com/b4h4w/OSINT

OSINT-Profiler #exploit #osint
Gather and analyze open source intelligence with this cross-platform tool featuring a PyQt6 interface, CLI support, and automated reporting.

https://github.com/Despairing-australiancrawl83/OSINT-Profiler

sanctioncheck #pentest
Screen entities against EU, UN, OFAC, and DGT sanctions lists using a fast, scriptable command-line tool for AML and KYC compliance workflows.

https://github.com/dovedownpat422/sanctioncheck

OMNIA-SECURITY #scanner
Bounded structural diagnostics for security-relevant behavior. Not a scanner. Decision remains external.

https://github.com/Tuttotorna/OMNIA-SECURITY

agent-scanner #scanner
Security scanner for AI agents, MCP servers, and agent skills

https://github.com/go-authgate/agent-scanner

SupplyChainChecker #scanner
Fast Go scanner for supply-chain compromise exposure across npm, PyPI, lockfiles, dependencies, and host IOCs. Built for incident response triage.

https://github.com/MichelDiz/SupplyChainChecker