collectvars collects JavaScript variables, highlights risky ones, and helps you understand code structure, while you casually browse.
Language JavaScript
Licence GPL-3.0
Stars 35
Last push 2024-08-28
First discovered 2026-11-08 09:33:10 UTC
Last indexed 2026-11-08 application-security bugbounty bugbounty-tool chrome-extension infosec javascript pentesting secret-scanning
Source: GitHub repository metadata.
Practical Ethical Hacking Labs 🗡🛡
Language Not specified
Licence Not specified
Stars 3,940
Last push 2024-04-23
First discovered 2026-11-08 09:37:34 UTC
Last indexed 2026-11-08 ethical-hacking-labs hacking linux penetration-testing pentesting security security-tools tutorial
Source: GitHub repository metadata.
Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens PRs that fix what it finds. MCP both ways: plug in any MCP server as a tool, or drive RedAmon from Claude Code or your own agent.
Language Python
Licence MIT
Stars 3,322
Last push 2026-11-07
First discovered 2026-11-08 09:35:31 UTC
Last indexed 2026-11-08 agentic-ai ai ai-penetration-testing ai-pentesting autonomous-agents bug-bounty cybersecurity ethical-hacking
Source: GitHub repository metadata.
Curated, link-verified list of autonomous / AI / LLM-agent penetration-testing tools, research, benchmarks, labs & platforms.
Language Not specified
Licence Not specified
Stars 3
Last push 2026-07-04
First discovered 2026-11-08 09:36:30 UTC
Last indexed 2026-11-08 ai-security autonomous-agents awesome awesome-list cybersecurity llm llm-agents offensive-security
Source: GitHub repository metadata.
Entropy scanner for Linux to detect packed or encrypted binaries related to malware. Finds malicious files and Linux processes and gives output with cryptographic hashes.
Language Go
Licence Not specified
Stars 171
Last push 2024-06-11
First discovered 2026-11-08 09:40:17 UTC
Last indexed 2026-11-08 blueteam blueteamin incident-response incident-response-tooling intrusion-detection intrusion-detection-system linux malware
Source: GitHub repository metadata.
Sandia Cyber Omni Tracker (SCOT)
Language JavaScript
Licence Not specified
Stars 254
Last push 2026-11-02
First discovered 2026-11-08 09:40:17 UTC
Last indexed 2026-11-08 applications cyber-security cybersecurity incident-response javascript perl scr-1627 snl-applications
Source: GitHub repository metadata.
GPU-accelerated secret scanner for code, Git history, containers, cloud, browser assets, and CI. 923 detectors, live verification, CUDA, Metal, WGPU.
Language Rust
Licence Not specified
Stars 113
Last push 2026-10-27
First discovered 2026-11-08 09:33:09 UTC
Last indexed 2026-11-08 api-key-scanner api-keys ci-cd-security cloud-security code-scanning container-security credentials devsecops
Source: GitHub repository metadata.
Who and what to follow in the world of cyber security
Language Not specified
Licence Not specified
Stars 151
Last push 2020-09-23
First discovered 2026-11-08 09:40:17 UTC
Last indexed 2026-11-08 cyber-security cybersecurity incident-response malware network news security
Source: GitHub repository metadata.
网络安全 · 攻防对抗 · 蓝队清单,中文版
Language HTML
Licence Not specified
Stars 979
Last push 2023-12-03
First discovered 2026-11-08 08:42:11 UTC
Last indexed 2026-11-08 attack-defense awesome blue-team chinese-translation cybersecurity
Source: GitHub repository metadata.
AI-powered codebase audit tool that scans for dependency vulnerabilities, deprecated API usage & generates comprehensive security reports. Uses MCP connectors for intelligent analysis with automated audit workflows.
Language Python
Licence Not specified
Stars 1
Last push 2025-06-07
First discovered 2026-11-08 09:29:54 UTC
Last indexed 2026-11-08 ai-tools code-audit dependency-scanning devops mcp python report-generator security
Source: GitHub repository metadata.
A simple blockchain in Javascript. For educational purposes only.
Language JavaScript
Licence MIT
Stars 1,773
Last push 2025-11-21
First discovered 2026-11-08 09:29:25 UTC
Last indexed 2026-11-08 blockchain cryptography wallet
Source: GitHub repository metadata.
Scapy: the Python-based interactive packet manipulation program & library.
Language Python
Licence GPL-2.0
Stars 12,682
Last push 2026-11-04
First discovered 2026-11-08 08:42:31 UTC
Last indexed 2026-11-08 network network-analysis network-discovery network-security network-visualization packet-analyser packet-capture packet-crafting
Source: GitHub repository metadata.
Free diagnostic security tool for Windows endpoints, featuring network utilities and device OPSEC analysis, all in one
Language Python
Licence Not specified
Stars 78
Last push 2026-10-28
First discovered 2026-11-08 09:36:24 UTC
Last indexed 2026-11-08 all-in-one cybersecurity diagnostics digital-forensics endpoint-security freeware gui-application indie-dev
Source: GitHub repository metadata.
secureCodeBox (SCB) - continuous secure delivery out of the box
Language Go
Licence Not specified
Stars 992
Last push 2026-11-06
First discovered 2026-11-08 09:35:42 UTC
Last indexed 2026-11-08 devsecops hacktoberfest kubernetes kubernetes-operator owasp securecodebox security security-automation
Source: GitHub repository metadata.
Go security checker
Language Go
Licence Apache-2.0
Stars 9,001
Last push 2026-11-03
First discovered 2026-11-08 08:42:31 UTC
Last indexed 2026-11-08 golang security security-automation security-tools static-analysis static-code-analysis
Source: GitHub repository metadata.
All of our GitHub Actions rolled into one. Or as we like to say: One GitHub Action to rule them all!
Language Not specified
Licence GPL-3.0
Stars 22
Last push 2023-06-07
First discovered 2026-11-08 09:33:10 UTC
Last indexed 2026-11-08 deployment-pipeline devsecops devsecops-best-practices devsecops-pipeline github-actions secret-scanning security-automation software-composition-analysis
Source: GitHub repository metadata.
SEAL 911 is a project designed to give users, developers, and security researchers an accessible way to connect with a small group of highly trusted security professionals in case of emergency.
Language Not specified
Licence Not specified
Stars 338
Last push 2026-10-30
First discovered 2026-11-08 09:40:17 UTC
Last indexed 2026-11-08 emergency-response incident-response seal911 security-alliance
Source: GitHub repository metadata.
Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.
Language Shell
Licence Not specified
Stars 4,974
Last push 2026-11-06
First discovered 2026-11-08 09:37:34 UTC
Last indexed 2026-11-08 case-management cyber-security endpoint-security information-security intrusion-detection-system monitoring network-security security
Source: GitHub repository metadata.
Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer
Language Not specified
Licence Not specified
Stars 690
Last push 2020-08-07
First discovered 2026-11-08 09:35:42 UTC
Last indexed 2026-11-08 application-security appsec devsecops infosec interview-questions sdlc security-engineer-interview security-engineering
Source: GitHub repository metadata.
MasterParser is a powerful DFIR tool designed for analyzing and parsing Linux logs
Language PowerShell
Licence MIT
Stars 768
Last push 2026-02-01
First discovered 2026-11-08 09:30:51 UTC
Last indexed 2026-11-08 automation cyber cyber-security dfir dfir-automation digital-forensic incident-response infosec
Source: GitHub repository metadata.
What this index tells you We collect selected public repository metadata through GitHub’s official API and store it on our server. This is not a complete index of GitHub. Categories come from discovery queries and topics; a “skills” or “plugins” result is not a verified installation format. We do not run or audit the projects listed here.
Check the original repository’s licence, installation instructions and maintenance history before using it. Stars do not establish security, and a recent push does not prove that a project works. GitHub may have newer information than our last indexed record.
Search is lexical, not an AI answer engine. Short words and spelling differences can affect matches. This site is independent of GitHub. Report a wrong category, stale result or removal request .