numasec

numasec The open source AI security agent. Give your terminal a security brain. Run security workflows with your local tools, agents, runbooks, findings, evidence, replay and reports. npm install -g numasec Demo | Why | What it feels like | Try it | What it does | Commands | Architecture | Roadma...

scriptkiddi3

Streamline your recon and vulnerability detection process with SCRIPTKIDDI3, A recon and initial vulnerability detection tool built using shell script and open source tools. How it works • Installation • Install with Docker • Usage • MODES • Important Notes | Webhook configurations • For Develope...

teller

:computer: Never leave your terminal for secrets :pager: Create easy and clean workflows for working with cloud environments :magright: Scan for secrets and fight secret sprawl Teller - the open-source universal secret manager for developers Never leave your terminal to use secrets while...

Query-Hub

CQL-Hub | CrowdStrike SIEM & LogScale Queries Welcome to the CQL-Hub Backend Repository This repository powers cql-hub.com: A free, community-driven hub for CrowdStrike Falcon SIEM queries. All queries stored here are automatically published and made visible on the CQL-Hub website, making it easi...

privacytests

PrivacyTests PrivacyTests is an open-source testing program that measures browser privacy characteristics, and a website, https://privacytests.org, that renders the results for human consumption. PrivacyTests uses the MIT license. aioquic: a submodule with a fork of the aioquic project for...

hobbits

About Hobbits was developed at Mahlet in 2019 as an integrated data analysis tool. It was open-sourced and is now passively maintained by Adam and anyone who wants to contribute. Join the Discord server if you want to ask questions, contribute, or just chat about binary analysis tools...

cynative

Build your own security agents Open-source framework for security agents with live, read-only access to your infrastructure. Quickstart · Built-in agents · Your first agent · Docs Ask your infrastructure anything. Cynative runs frontier models across your code, cloud and runtime - reasoning throu...

Refloow-Geo-Forensics

📍 Refloow™ Geo Forensics Official Github Repository Professional Open-Source OSINT & Digital Forensics Tool Version 1.4.0 Latest: Version 1.0.0 Launch: Refloow™ Geo Forensics is a high-performance, open-source digital forensics tool designed for investigators, OSINT practitioners, and security...

Sirius

Sirius Scan Sirius is an open-source vulnerability scanner with automated discovery, CVE-based detection, and a modern web UI. Clone, run four commands, start scanning. Quick Start root@kitploit: git clone https://github.com/SiriusScan/Sirius.git cd Sirius docker compose -f...

Sudomy

Sudomy Subdomain Enumeration & Analysis Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing advanced automated reconnaissance framework. This tool can also be used for OSINT Open-source intelligence activities. Features ! For recent time, Sudomy has these...

routersploit

RouterSploit - Exploitation Framework for Embedded Devices Community Join community on Embedded Exploitation Discord. Description The RouterSploit Framework is an open-source exploitation framework dedicated to embedded devices. It consists of various modules that aid penetration testing...

sast-scan

Introduction root@kitploit: ███████╗ ██████╗ █████╗ ███╗ ██╗ ██╔════╝██╔════╝██╔══██╗████╗ ██║ ███████╗██║ ███████║██╔██╗ ██║ ╚════██║██║ ██╔══██║██║╚██╗██║ ███████║╚██████╗██║ ██║██║ ╚████║ ╚══════╝ ╚═════╝╚═╝ ╚═╝╚═╝ ╚═══╝ Scan is a free open-source security tool for modern DevOps teams. With an...

iDescriptor

Cross-platform, open-source and free idevice management tool written in Rust and Qt Cape is the first-of-its kind private and secure consumer cellular service in the US,...

AiSOC

AiSOC An open-source, self-hostable AI SOC. The agent's prompts, tool calls, and rationale are logged step-by-step and replayable. MIT-licensed. The community-maintained demo at tryaisoc.com runs on Fly.io and can go offline; see docs/operations/live-demo-runbook.md and use Codespaces as the...

sandy

sandy Copyright 2013 Sandy Written by: Laszlo Toth, Ferenc Spala Description Sandy is an open-source Samsung phone encryption assessment framework. Sandy has different modules that allow you to carry out different attack scenarios against encrypted Samsung phones. For the details check our Derbyc...

CVE-2023-25157-and-CVE-2023-25158

GeoServer & GeoTools SQL Injection CVE-2023-25157 & CVE-2023-25158 This repository contains a detailed description and replication steps of the SQL Injection vulnerabilities found in the GeoServer platform and GeoTools Library. The vulnerability has been assigned the identifier CVE-2023-25157 for...

ESP32-Bit-Pirate

ESP32 Bit Pirate ESP32 Bit Pirate is open-source firmware that turns your device into a multi-protocol development and analysis tool, inspired by the legendary Bus Pirate. It supports sniffing, sending, scripting, and interacting with various digital protocols I2C, UART, 1-Wire, SPI, etc. via a...

inquisitor

Inquisitor Notice This project is only partially complete and I have yet to implement many of the features described in the following blog post I made: https://penafieljlm.com/2017/07/14/inquisitor/. Inquisitor is a simple tool for gathering information on companies and organizations through the...

CVE-2025-64495-POC

CVE-2025-64495-POC Open WebUI vulnerable to Stored DOM XSS via prompts when 'Insert Prompt as Rich Text' is enabled resulting in ATO/RCE Summary The functionality that inserts custom prompts into the chat window is vulnerable to DOM XSS when 'Insert Prompt as Rich Text' is enabled, since the prom...

Cortex

Cortex tries to solve a common problem frequently encountered by SOCs, CSIRTs and security researchers in the course of threat intelligence, digital forensics and incident response: how to analyze observables they have collected, at scale , by querying a single tool instead of several? Cortex, an...