TheCl0n3r

TheCl0n3r TheCl0n3r will allow you to download and manage your git repositories. Preface About 90% of the penetration testing tools used in my experience can be found primarily on github. The aim of this was to make it easier to download, update and delete these git repositories. If moving to a n...

defending-code-reference-harness

Defending Code Reference Harness A reference implementation for autonomous vulnerability discovery and remediation with Claude, based on our learnings from partnering with security teams at several organizations since launching Claude Mythos Preview. For a write up of these learnings along with...

social-analyzer

Social Analyzer - API, CLI, and Web App for analyzing & finding a person's profile across +1000 social media \ websites. It includes different analysis and detection modules, and you can choose which modules to use during the investigation process. The detection modules utilize a rating mechanism...

gitbleed_tools

GitBleed Tools - for extracting data from mirrorred git repositories About This repo contains shell scripts that can be used to download and analyze differences between cloned and mirror Git repositories. For more information about the underlying quirk in Git behavior, please visit read our blog...

bugsy

Bugsy Bugsy is a command-line interface CLI tool that provides automatic security vulnerability remediation for your code. It is the community edition version of Mobb, the first vendor-agnostic automated security vulnerability remediation tool. Bugsy is designed to help developers quickly identif...

ronin

ronin Website Source Issues Documentation Discord | Mastodon Description Ronin is a free and Open Source Ruby toolkit for security research and development. Ronin contains many different CLI commands and Ruby libraries for a variety of security tasks, such as encoding/decoding data, filter...

Vulnhalla

Vulnhalla Automated CodeQL Analysis with LLM Classification For a detailed overview of the research and motivation behind Vulnhalla, see the official CyberArk Threat Research blog post: Vulnhalla: Picking the True Vulnerabilities from the CodeQL Haystack Vulnhalla automates the complete security...

bkcrack

bkcrack Crack legacy zip encryption with Biham and Kocher's known plaintext attack. Overview A ZIP archive may contain many entries whose content can be compressed and/or encrypted. In particular, entries can be encrypted with a password-based symmetric encryption algorithm referred to as...

nccfsas

Introduction This repository holds information released publicly by NCC Group's Full Spectrum Attack Simulation FSAS team...

gh-dork

gh-dork Supply a list of dorks and, optionally, one of the following: a user -u a file with a list of users -uf an organization -org a file with a list of organizations -of a repo -r You can also pass: an output directory to store results -o a filename to store valid items, if your users or org...

snallygaster

snallygaster Finds file leaks and other security problems on HTTP servers. what? snallygaster is a tool that looks for files accessible on web servers that shouldn't be public and can pose a security risk. Typical examples include publicly accessible git repositories, backup files potentially...

titus

Titus: High-Performance Secrets Scanner Titus is a high-performance secrets scanner that detects credentials, API keys, and tokens in source code, files, and git history. It ships with 487 detection rules covering hundreds of services and credential types, drawn from NoseyParker and Kingfisher...

PolinRider

PolinRider: DPRK Threat Actor Implants Malware in Hundreds of GitHub Repos Date: 2026-03-07 Last updated: 2026-04-11 — see April 10–11 Update below Severity: CRITICAL — active supply chain infection across 1,950+ public repositories, confirmed operational merger with the TasksJacker / Contagious...

git-all-secrets

git-all-secrets About git-all-secrets is a tool that can: Clone multiple public/private github repositories of an organization and scan them, Clone multiple public/private github repositories of a user that belongs to an organization and scan them, Clone a single public/private repository of an...

git-all-secrets

git-all-secrets 概要 git-all-secrets は以下のことが可能なツールです： 組織の複数の公開/非公開 GitHub リポジトリをクローンし、スキャンする、 組織に所属するユーザーの複数の公開/非公開 GitHub リポジトリをクローンし、スキャンする、 組織の単一の公開/非公開リポジトリをクローンし、スキャンする、 ユーザーの単一の公開/非公開リポジトリをクローンし、スキャンする、 ユーザーの単一の公開/シークレット gist をクローンし、スキャンする、 組織内のチームのリポジトリをクローンし、スキャンする、 上記すべてを同時に行う！ そうです！...

gitleaks

Gitleaks ┌─○───┐ │ │╲ │ │ │ ○ │ │ ○ ░ │ └─░───┘ root@kitploit: !WARNING Gitleaksは機能完成しています。新機能のマージは行いません。今後のリリースはセキュリティパッチのみとなります。私はBetterleaksに注力しています。 license: https://raw.githubusercontent.com/gitleaks/gitleaks/master/LICENSE badge-license:...

GitMiner

⚠️ Repository Deprecated — Project Replaced This repository is no longer maintained and has been officially deprecated. The project continues under active development at: https://github.com/unkl4b/Gitminer3 Please migrate to GitMiner3 to access the latest updates, improvements, and active support...

gitjacker

gitjacker Gitjacker downloads git repositories and extracts their contents from sites where the .git directory has been mistakenly uploaded. It will still manage to recover a significant portion of a repository even where directory listings are disabled. For educational/penetration testing use...

octosuite

Terminal-based toolkit for GitHub data analysis. root@kitploit: $ octosuite user torvalds root@kitploit: from pprint import pprint import octosuite user = octosuite.Username="torvalds" exists, profile = user.exists if exists: pprintprofile Installation root@kitploit: pip install octosuite Usage T...

AtomShields

AtomShields |Build| |Codacy| |Docs| |Version| .. |Docs| image:: https://readthedocs.org/projects/atomshields/badge/?version=latest :target: http://atomshields.readthedocs.io/en/latest/?badge=latest :alt: Read the Docs .. |Version| image:: http://img.shields.io/pypi/v/atomshields.svg?style=flat...