GitHub trending

Open-source repositories gaining traction right now.

Filters

14 repositories

KeygraphHQ/shannon

Shannon Lite is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

TypeScript47K5.4K

#penetration-testing#pentesting#security-audit#security-automation#security-tools

aquasecurity/trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Go38K620

#security#security-tools#docker#containers#vulnerability-scanners

qeeqbox/social-analyzer

Sponsor Star qeeqbox / social-analyzer API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites

JavaScript24K2.3K

#osint#social-media#analyzer#username#profile

vxcontrol/pentagi

Fully autonomous AI Agents system capable of performing complex penetration testing tasks

Go22K2.9K

#ai-agents#ai-security-tool#autonomous-agents#golang#graphql

smicallef/spiderfoot

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

Python21K3.4K

#footprinting#osint#threatintel#python#infosec

NVIDIA/SkillSpector

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks.

Python15K1.2K

#agent-security#agent-skills#agentic-ai#ai-security#claude-code

google/osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

Go11K770

#scanner#security-audit#security-tools#vulnerability-scanner

Unclecheng-li/VulnClaw

基于 AI Agent + MCP 工具链 + 渗透 Skill 编排，配合大语言模型，自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。

Python1.7K164

#ai#ai-agent#ai-tools#ctf#cybersecurity

luckyPipewrench/pipelock

Security harness for AI agents — egress proxy with DLP scanning, SSRF protection, MCP response scanning, and workspace integrity monitoring

Go80694

#ai-agents#ai-security#dlp#golang#llm-security

praetorian-inc/brutus

Fast, zero-dependency credential testing tool in Go. Brute force SSH, MySQL, PostgreSQL, Redis, MongoDB, SMB, and 20+ protocols. Hydra alternative with native fingerprintx/naabu pipeline integration.

Go31142

#brute-force#credential-testing#cybersecurity#golang#hacking-tools

TheGreatAzizi/IP-Security-Analyzer-Cloudflare-Worker

IP Security Analyzer: A pro-grade Cloudflare Worker for forensic intelligence. Detects VPNs, Proxies & Hosting IPs via heuristic ASN auditing. Includes Security Scoring, WebRTC Leak Test, ISP classification, and Geo-location. Built with a modern Bento UI and live terminal logs. Powerful, open-source and real-time network forensic tool.

JavaScript10118

#internet#ip#security#security-tools#vpn