Security Research
CVE repos and security research
Showing 41-60 of 1,841 projects
google/oss-fuzz
OSS-Fuzz is a continuous fuzzing platform for open-source software, focused on improving security and stability.
redcanaryco/atomic-red-team
Small and highly portable detection tests based on MITRE's ATT&CK framework for security researchers.
chaitin/xray
A comprehensive security assessment tool that supports scanning for common web vulnerabilities and custom PoCs.
apsdehal/awesome-ctf
A curated list of CTF (Capture the Flag) frameworks, libraries, resources and software for security professionals.
quay/clair
Clair is a static analysis tool for scanning container images and identifying vulnerabilities.
lockfale/OSINT-Framework
This is a comprehensive OSINT (Open-Source Intelligence) framework for gathering intelligence and conducting reconnaissance.
BishopFox/sliver
Sliver is an adversary emulation framework written in Go that can be used for red team engagements.
beefproject/beef
The Browser Exploitation Framework Project is a penetration testing tool for web applications.
tennc/webshell
This is an open-source webshell project that provides access to remote servers through various scripting languages.
SpecterOps/BloodHound-Legacy
BloodHound-Legacy is a PowerShell tool for discovering paths to domain admin in Active Directory environments.
knownsec/404StarLink
404StarLink is a collection of high-quality, meaningful, and actively maintained open-source security projects.
edoardottt/awesome-hacker-search-engines
A curated list of awesome search engines for penetration testing, vulnerability assessments, and security research.
veeral-patel/how-to-secure-anything
A comprehensive repository covering security engineering principles and practices to systematically secure anything.
paralax/awesome-honeypots
A curated list of honeypot resources for security researchers and developers.
SigmaHQ/sigma
A Python library for creating and managing security detection rules for SIEM and monitoring tools.
sullo/nikto
Nikto is a powerful open-source web server scanner for security testing and vulnerability detection.
justcallmekoko/ESP32Marauder
A suite of Wi-Fi and Bluetooth offensive and defensive tools for the ESP32 microcontroller.
hslatman/awesome-threat-intelligence
A curated list of Awesome Threat Intelligence resources for security professionals.
samratashok/nishang
Nishang is an offensive PowerShell framework for red team, penetration testing, and security operations.
quasar/Quasar
Remote administration tool for Windows, focused on security and remote control capabilities.
Stay in the loop
Get weekly updates on trending AI coding tools and projects.