Discover quality open-source projects, submit projects anonymously, and claim and edit your own project.
A little curiosity. A world of open source.
THE FIRST COLLECTIONx64dbg is an open-source user-mode debugger for Windows, aimed at reverse engineering and malware analysis of executables whose source code is unavailable. It ships 32-bit and 64-bit builds, a plugin system, and can be compiled from source by users.
SWE-agent is an autonomous AI agent that uses language models to automatically fix GitHub issues, find cybersecurity vulnerabilities, and solve custom coding challenges. Built by Princeton and Stanford researchers.
Strix is an open-source AI-powered penetration testing tool that uses autonomous agents to identify, validate, and fix application vulnerabilities through real proof-of-concept exploits.
MergeMind is a GitHub Actions and GitLab CI integration that analyzes pull/merge request diffs and maps code changes to SOX, SOC2 and ISO 27001 controls, posting risk level, control gaps and remediation advice as a PR comment. Full compliance output requires a paid license key.
Sherlock is a command-line tool that hunts down social media accounts by username across 400+ networks. It supports multiple usernames, site filtering, proxy use, and output in text, CSV, or XLSX formats, with installation via pip/pipx, Docker, or system packages.
Local-first, zero-egress forensics toolkit for detecting and sanitizing AI watermarks: Unicode steganography visualization, statistical text detectors, C2PA/EXIF/XMP cleaning, SARIF/CI audit and MCP agent tools.
WordPress plugin client for ovos console error monitoring and cyberdefense. Reports PHP/JS errors, security events, and scanner probes to a self-hosted console instance. Features CVE matching, traffic rollups, and AI-driven analysis.
Shannon is an open-source, autonomous AI pentester for web applications and APIs. It analyzes your source code to find attack paths, then executes real exploits against a running app, reporting only vulnerabilities proven with a working proof of concept.
Anakrisis is an ethics-aware OSINT investigation planning and risk evaluation MCP server. It classifies investigations, scores risk against local YAML doctrine, flags prohibited actions, and scaffolds case documentation, supporting both cloud and local AI models.
IPScout enriches IP addresses from 67 sources (cloud, CDN, threat feeds) via command line, providing threat ratings, caching, and configurable output formats.
Zentra is an AI-powered CLI security scanner for developers, combining SAST, DAST, supply-chain, API, and IaC analysis with LLM orchestration, CI integration, and an authorized pentest mode.
A curated collection of 150+ tools and techniques for red teaming and penetration testing, organized by MITRE ATT&CK framework categories covering reconnaissance, initial access, execution, privilege escalation, defense evasion, credential access, lateral movement, command and control, exfiltration, and impact.
ImHex is a feature-rich, cross-platform hex editor built for reverse engineers, programmers, and anyone doing binary analysis. It offers a custom pattern language, data inspector, diffing, disassembler, YARA scanning, node-based data processing, theming, and plugin support.
Maigret is an OSINT command-line tool that builds a dossier on a person from a username alone, checking 3000+ sites, extracting profile data, and exporting reports in HTML, PDF, JSON, CSV and graph formats.
