#infosec (30 Repositories)
Ranked open-source repositories tagged with #infosec, scored by pull request acceptance likelihood and maintainer engagement velocity.
73.8%
87.1h
30 repositories tagged #infosec
wazuh/wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
THORCollective/HEARTH
A community-driven repository for threat hunting ideas, methodologies, and research that serves as a central gathering place for hunters to share knowledge, collaborate on techniques, and advance the field of threat hunting.
xsa/infosec-events
List of past and future infosec related events.
opencve/opencve
Vulnerability Intelligence Platform
SAP/cloud-active-defense
Add a layer of active defense to your cloud applications.
halilkirazkaya/arsenal-ng
The classic launcher, evolved. Fast, Go-based command library equipped with 200+ cybersecurity cheat-sheets. Just install and start hacking.
Zyrexnn/Cybermes
Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes Agent, specialized reasoning skills, and multi-model LLM orchestration.
Ullaakut/cameradar
Cameradar hacks its way into RTSP videosurveillance cameras
PaperMtn/slack-watchman
Slack enumeration and exposed secrets detection tool
x90skysn3k/brutespray
Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.
reconmap/reconmap
Reconmap is a collaboration-first security operations platform for infosec teams and MSSPs, enabling end‑to‑end engagement management, from reconnaissance through execution and reporting. With built-in command automation, output parsing, and AI‑assisted summaries, it delivers faster, more structured, and high‑quality security assessments.
nmatt0/moria
IoT firmware identification and extraction
InfosecHouse/InfosecHouse
Tools & Resources for Cyber Security Operations
pandora-analysis/pandora
Pandora is an analysis framework to discover if a file is suspicious and conveniently show the results
ffuf/ffuf
Fast web fuzzer written in Go
Macmod/ldapx
Flexible LDAP proxy that can be used to inspect & transform all LDAP packets generated by other tools on the fly.
edoardottt/favirecon
Use favicons to improve your target recon phase. Quickly detect technologies, WAF, exposed panels, known services.
digininja/DVWA
Damn Vulnerable Web Application (DVWA)
emproof-com/nyxstone
Nyxstone: assembly / disassembly library based on LLVM, implemented in C++ with Rust and Python bindings, maintained by emproof.com
kennbroorg/iKy
OSINT Project. Collect information from a mail. Gather. Profile. Timeline.
vulnersCom/nmap-vulners
Nmap NSE scripts that turn a service scan into CVEs, CVSS scores and known exploits — fingerprints software from HTTP responses and checks every detected CPE against the Vulners database.
AndrewDryga/emisar
Let AI agents investigate and operate infrastructure through declared actions, bounded by policy and host-side checks. Approvals when required, with an audit trail. By Protectorate.
rderaison/bromure
Proper sandboxing for agentic coding and web browsing
owl234/ARL-Next
现代化资产测绘与漏洞监控平台 (ARL-Next)。经典 ARL 架构重构，聚焦企业资产关联、异步解耦并发调度与原生 MCP 协议集成，容器化开箱部署。
pedrosilvaevangelista/Cyberlivre
Curso completo de Segurança Cibernética com conteúdos gratuitos em português.
klarna-incubator/gram
Gram is Klarna's own threat model diagramming tool
AnonCatalyst/Ominis-OSINT
This Python application is an OSINT (Open Source Intelligence) tool called "Ominis OSINT - Web Hunter." It performs online information gathering by querying Google for search results related to a user-inputted query. The tool extracts relevant information such as titles, URLs, and potential mentions of the query in the results.
pablosnt/rekono
Offensive security platform that automates attack surface discovery and vulnerability management
0xSteph/pentest-ai-agents
Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.
praetorian-inc/brutus
Fast, zero-dependency credential testing tool in Go. Brute force SSH, MySQL, PostgreSQL, Redis, MongoDB, SMB, and 20+ protocols. Hydra alternative with native nerva/naabu pipeline integration.