bestofgithub.devRepositories with the GitHub topic “infosec”: 24 repositories with 427k stars between them, mostly written in Python, Go and HTML. The highest-rated is sherlock-project/sherlock, #18 on the bestofgithub Elo ladder.
Hunt down social media accounts by username across social networks
brew install sherlock🕵️♂️ Collect a dossier on a person by username from 6K websites
brew install maigretExploitation Framework for Embedded Devices
git clone https://github.com/threat9/routersploit.gitWeb path scanner
git clone https://github.com/maurosoria/dirsearch.gitWazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
git clone https://github.com/wazuh/wazuh.git817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
git clone https://github.com/mukul975/Anthropic-Cybersecurity-Skills.gitHunt down social media accounts by username across social networks
brew install sherlockHunt down social media accounts by username across social networks
🕵️♂️ Collect a dossier on a person by username from 6K websites
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS…
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
Damn Vulnerable Web Application (DVWA)
Fast web fuzzer written in Go
Web path scanner
This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.
Community guide to securing and improving privacy on macOS.
Exploitation Framework for Embedded Devices
Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined…
Gather and update all available and newest CVEs with their PoC.
An HTTP toolkit for security research.
🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩💻
All about bug bounty (bypasses, payloads, and etc)
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous…
Everything about Web Application Firewalls (WAFs) from Security Standpoint! 🔥
One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️
A list of interesting payloads, tips and tricks for bug bounty hunters.
A collection of awesome security hardening guides, tools and other resources
:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins…
A curated list of GPT agents for cybersecurity