开源项目排行榜

OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security

Tunneling data over webrtc to bypass censorship

817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0

Find leaked secrets everywhere.

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

Proxmox VE Helper-Scripts (Community Edition)

Search public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub, with CVSS, EPSS and CISA KEV context.

CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 200+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.

🕵️‍♂️ All-in-one OSINT tool for analysing any website

An open-source engine that turns continuous content streams into search and monitoring. Durable ingestion, hybrid search, alerts, and plugins for formats, models and business rules.

Awesome Security lists for SOC/CERT/CTI

A modular vulnerability scanner with automatic report generation capabilities.

Comfortably monitor your network traffic 🕵️‍♂️

awesome game security [Welcome to PR]

UNIX-like reverse engineering framework and command-line toolset.

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

Find secrets with Gitleaks 🔑

The Most Comprehensive Docker Security Scanner

Find, verify, and analyze leaked credentials

The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.

List of Computer Science courses with video lectures.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

A collection of various awesome lists for hackers, pentesters and security researchers

Scapy: the Python-based interactive packet manipulation program & library.

The ZAP by Checkmarx Core project

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.