ghostgates #pentest
CI/CD security analysis tool that identifies structural bypass paths in GitHub Actions workflows, branch protections, environments, and OIDC trust policies.

https://github.com/InfoSecHack/ghostgates

airtable-to-baserow #ad
A tool to securely migrate data from AirTable to Baserow, rather than generating a publicly accessible link of AirTable data for Baserow to load from, as that risks violating compliance law and sec...

https://github.com/abgulati/airtable-to-baserow

CVE-2024-38063-Exploit-Refactoring #exploit
bash

https://github.com/arrhenius975/CVE-2024-38063-Exploit-Refactoring

ultimate-pentest-toolkit #pentest
All-in-One Security Testing Solution for Authorized Penetration Testing

https://github.com/windantara/ultimate-pentest-toolkit

poc-cors-toolkit #bugbounty #exploit #scanner #web
Este proyecto es una herramienta completa en HTML para auditar configuraciones de CORS (Cross-Origin Resource Sharing) en aplicaciones web. Fue diseñada pensando en bug bounty hunters, pentesters ...

https://github.com/theoffsecgirl/poc-cors-toolkit

edgewalker #scanner
EdgeWalker is a high-performance IoT security scanner and offensive security tool that audits your home network detecting open ports, default credentials and known vulnerailities

https://github.com/periphery-security/edgewalker

seed-vault.io #pentest
Encrypt your crypto seed phrase into an offline QR code. AES-256-GCM. 100% client-side.

https://github.com/lesagejeanno-cmd/seed-vault.io

llm-security-scanner #scanner
大模型安全漏洞自动化扫描平台

https://github.com/jinzy666/llm-security-scanner

cloud-audit #cloud #scanner
Fast, opinionated AWS security scanner. Curated checks. Zero noise. Copy-paste fixes.

https://github.com/gebalamariusz/cloud-audit

TokenShield #pentest
Turbocharged Real-time Authentication and Authorization Engine for Enterprise Scalability and Multi-factor Security Suite

https://github.com/yuvisevia/TokenShield

ObscurityError404- #pentest
A collection of cybersecurity tools, scripts, and research focused on ethical hacking and network security.

https://github.com/obscurityerror404/ObscurityError404-

Finder #osint #recon
FINDER is an automated reconnaissance framework designed for efficient and scalable subdomain enumeration. It integrates multiple industry-standard OSINT tools to discover, validate, and filter sub...

https://github.com/Anandakrishnanms/Finder

wscan #cloud #scanner #web
wscan is a multi-threaded web vulnerability scanner built in Python. It performs automated security testing against web applications by crawling pages and detecting common security misconfiguration...

https://github.com/Alanps01/wscan

agentprey #scanner
Developer-first security scanner for AI agents. Run 20+ prompt-injection vectors, generate JSON/HTML reports, and gate CI with deterministic exit codes.

https://github.com/agentprey/agentprey

nullsec-hak5-toolkit #wireless
Universal Hak5 device management toolkit - CLI suite for WiFi Pineapple, Bash Bunny, Rubber Ducky, Packet Squirrel, Key Croc, and Shark Jack

https://github.com/bad-antics/nullsec-hak5-toolkit

elliot #bugbounty #recon #scanner #web
Elliot is a bug bounty toolkit for recon and vulnerability discovery. It automates subdomain enumeration, endpoint collection, and scanning with Nuclei, Dalfox, and other tools to detect XSS and se...

https://github.com/alley341/elliot

dojops #pentest
AI DevOps Automation Engine

https://github.com/dojops/dojops

AI-Security-Exercises #pentest
AI Security Exercises #1 - Prompt Injection

https://github.com/CyberSecurityUP/AI-Security-Exercises

SSRF-Hunter #bugbounty
SSRF Hunter is a comprehensive Server-Side Request Forgery (SSRF) detection tool designed specifically for bug bounty hunters and security researchers.

https://github.com/rohit-1006/SSRF-Hunter

IC_CS_01 #scanner #web
Cyber security task 1 Web Application Security Scanner

https://github.com/harbhayormhi/ICCS01