A-poc/RedTeam-Tools
Open on GitHubTools and Techniques for Red Team / Penetration Testing
- 1,731+28 Elo, change today
- 10.1k stars
- 1.3k forks
- 155 watchers
git clone https://github.com/A-poc/RedTeam-Tools.gitTop Security Tools repositories
Repositories with the GitHub topic “security-tools”: 49 repositories with 785k stars between them, mostly written in Go, Python and Shell. The highest-rated is vxcontrol/pentagi, #212 on the bestofgithub Elo ladder.
Biggest movers this week
zizmorcore/zizmor
Open on GitHubRustStatic analysis for GitHub Actions (and more)
- 1,600+13 Elo, change today
- 7k stars
- 286 forks
git clone https://github.com/zizmorcore/zizmor.gitNVIDIA/SkillSpector
Open on GitHubPythonSecurity scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
- 2,117+6 Elo, change today
- 26.2k stars
- 2.3k forks
- 95 watchers
brew install skillspectortrufflesecurity/trufflehog
Open on GitHubGoFind, verify, and analyze leaked credentials
- 1,985+7 Elo, change today
- 29.3k stars
- 2.7k forks
- 214 watchers
brew install trufflehogTencent/AI-Infra-Guard
Open on GitHubPythonA full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.
- 1,677+5 Elo, change today
- 7.5k stars
- 762 forks
git clone https://github.com/Tencent/AI-Infra-Guard.gitlissy93/personal-security-checklist
Open on GitHubTypeScript🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
- 1,740+6 Elo, change today
- 22.7k stars
- 1.4k forks
- 203 watchers
git clone https://github.com/lissy93/personal-security-checklist.gitTop 49 on the Elo ladder
- #212vxcontrol/pentagi
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
- #216NVIDIA/SkillSpector
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection…
- #226KeygraphHQ/shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and…
- #473trufflesecurity/trufflehog
Find, verify, and analyze leaked credentials
- #518aquasecurity/trivy
Finds vulnerabilities, misconfigurations, secrets and SBOM issues in containers, Kubernetes and code.
- #523smicallef/spiderfoot
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
- #527gitleaks/gitleaks
Find secrets with Gitleaks 🔑
- #706x64dbg/x64dbg
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
- #779Infisical/infisical
Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.
- #967lissy93/web-check
🕵️♂️ All-in-one OSINT tool for analysing any website
- #1,052wazuh/wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
- #1,420qeeqbox/social-analyzer
API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites
- #1,882lissy93/personal-security-checklist
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
- #1,942prowler-cloud/prowler
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security…
- #1,966A-poc/RedTeam-Tools
Tools and Techniques for Red Team / Penetration Testing
- #2,068BishopFox/sliver
Adversary Emulation Framework
- #2,188google/osv-scanner
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
- #2,304CISOfy/lynis
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing…
- #2,449fail2ban/fail2ban
Daemon to ban hosts that cause multiple authentication errors
- #2,480Tencent/AI-Infra-Guard
A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and…
- #2,617bee-san/RustScan
🤖 The Modern Port Scanner 🤖
- #2,760jason5ng32/MyIP
The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check…
- #3,248edoardottt/awesome-hacker-search-engines
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team…
- #3,315shadow1ng/fscan
一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round…
- #3,575zizmorcore/zizmor
Static analysis for GitHub Actions (and more)
- #4,097motdotla/dotenv
Loads environment variables from .env for nodejs projects.
- #4,233six2dez/reconftw
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform…
- #4,234secdev/scapy
Scapy: the Python-based interactive packet manipulation program & library.
- #4,3141N3/Sn1per
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+…
- #5,067yogeshojha/rengine
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined…
- #5,299future-architect/vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network…
- #5,349trickest/cve
Gather and update all available and newest CVEs with their PoC.
- #5,644smallstep/certificates
🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can…
- #5,863PyCQA/bandit
Bandit is a tool designed to find common security issues in Python code.
- #5,969vavkamil/awesome-bugbounty-tools
A curated list of various bug bounty tools
- #6,239google/syzkaller
syzkaller is an unsupervised coverage-guided kernel fuzzer
- #6,456urbanadventurer/WhatWeb
Next generation web scanner
- #6,504toniblyx/my-arsenal-of-aws-security-tools
List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
- #6,551jakejarvis/awesome-shodan-queries
🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩💻
- #6,602securego/gosec
Go security checker
- #6,786authzed/spicedb
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
- #7,239j3ssie/osmedeus
A Modern Orchestration Engine for Security
- #7,460The-Z-Labs/linux-exploit-suggester
Linux privilege escalation auditing tool
- #7,497infinition/Bjorn
Bjorn is a powerful network scanning and offensive security tool for the Raspberry Pi with a 2.13-inch e-Paper HAT. It…
- #8,365decalage2/awesome-security-hardening
A collection of awesome security hardening guides, tools and other resources
- #8,640guardicore/monkey
Infection Monkey - An open-source adversary emulation platform
- #8,757elementalsouls/Claude-BugHunter
A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681…
- #9,047presidentbeef/brakeman
A static analysis security vulnerability scanner for Ruby on Rails applications
- #9,227liamg/traitor
:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins…