Top #infosec Tools & Software

sherlock

github

Hunt down social media accounts by username across social networks

maigret

github

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

wazuh

github

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

routersploit

github

Exploitation Framework for Embedded Devices

DVWA

github

Damn Vulnerable Web Application (DVWA)

nishang

github

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

cve

github

Gather and update all available and newest CVEs with their PoC.

Awesome-WAF

github

Everything about Web Application Firewalls (WAFs) from Security Standpoint! 🔥

awesome-shodan-queries

github

🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

AllAboutBugBounty

github

All about bug bounty (bypasses, payloads, and etc)

bugbounty-cheatsheet

github

A list of interesting payloads, tips and tricks for bug bounty hunters.

faraday

github

Open Source Vulnerability Management Platform

awesome-security-hardening

github

A collection of awesome security hardening guides, tools and other resources

Anthropic-Cybersecurity-Skills

github

754 structured cybersecurity skills for AI agents · Mapped to 5 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND & NIST AI RMF · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 26 security domains · Apache 2.0

1earn

github

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

awesome-infosec

github

A curated list of awesome infosec courses and training resources.

can-i-take-over-xyz

github

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

NetExec

github

The Network Execution Tool

awesome-cybersecurity-blueteam

github

:computer:🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.

cameradar

github

Cameradar hacks its way into RTSP videosurveillance cameras

black-hat-rust

github

Applied offensive security with Rust - https://kerkour.com/black-hat-rust

awesome-sec-talks

github

A collected list of awesome security talks

snoop

github

Snoop — инструмент разведки на основе открытых данных (OSINT world)

stegcloak

github

Hide secrets with invisible characters in plain text securely using passwords 🧙🏻‍♂️⭐