Security Tools

the-book-of-secret-knowledge

github

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

sherlock

github

Hunt down social media accounts by username across social networks

PayloadsAllTheThings

github

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

caddy

github

Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

pocketbase

github

Open Source realtime backend in 1 file

mitmproxy

github

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

shannon

github

Shannon Lite is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

Xray-core

github

Xray, Penetrates Everything. Also the best v2ray-core. Where the magic happens. An open platform for various uses.

XX-Net

github

A proxy tool to bypass GFW.

CheatSheetSeries

github

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

tailscale

github

The easiest, most secure way to use WireGuard and 2FA.

algo

github

Set up a personal VPN in the cloud

hosts

github

🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.

nuclei

github

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

authelia

github

The Single Sign-On Multi-Factor portal for web apps, now OpenID Certified™

Obtainium

github

Get Android app updates straight from the source.

lynis

github

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

test-your-sysadmin-skills

github

A collection of Linux Sysadmin Test Questions and Answers. Test your knowledge and skills in different fields with these Q/A.

objection

github

📱 objection - runtime mobile exploration

faraday

github

Open Source Vulnerability Management Platform

Cerberus

producthunt

Cursor for AI hacking that can't go out of scope

MindFort

producthunt

Recursively learning security agents

Foil AI Code Security

producthunt

AI code security review that runs entirely on your Mac

QNSP — Quantum-Native Security Platform

producthunt

Post-Quantum Security for AI, Data, and Critical Systems.