Tech-Radar

Small offensive network toolkit for Raspberry Pi (+ Waveshare 1.44″ LCD HAT) and Cardputer Zero inspired by pager and sharkjack fonctionnalities. For redteam and educational purposes only. · Sprache: Python · Topics: bluetooth-le, cardputer, cardputerzero, cybersecurity, deauth, ethical-hacking · ⭐ 1,320 Stars

PyInstaCrack: Ultimate Instagram hacking suite. Python-driven, AI-enhanced, brute-force chaos. Stealth ops, ethical only. Slice through defenses like a cyber god! ☠️ · Sprache: Python · Topics: ai-security, cybersecurity, ethical-hacking, hacking, instagram-bruteforce, penetration-testing · ⭐ 192 Stars

Eine kritische Schwachstelle (Unauthentifizierte RCE) wurde in der Ruflo MCP Bridge Version 3.16.2 entdeckt, die Remote Code Execution ermöglicht. Betroffen sind Systeme, die diese Bridge verwenden. Es wird dringend empfohlen, die Software umgehend zu aktualisieren oder entsprechende Sicherheitsmaßnahmen zu ergreifen, um unbefugten Zugriff zu verhindern.

A deauth attack that disconnects all devices from the target wifi network (2.4Ghz & 5Ghz), WPA3 also supported (PMF not tested) · Sprache: Python · Topics: deauth, deauthentication-attack, deauther, denial-of-service, denial-of-service-attack, dos · ⭐ 943 Stars

📦 Produce secure packages and containers with declarative configurations · Sprache: Go · Topics: almalinux, azure-linux, build-tools, buildkit, cloud-native, containers · ⭐ 327 Stars

Sage ist ein neuer Open-Source-KI-Assistent, der in Mythic integriert ist, um offensive Sicherheitsoperationen zu optimieren. Er hilft Betreibern, indem er Befehle generiert und die Verwaltung von Informationen übernimmt, wodurch menschliche Fehler reduziert werden. Benutzer müssen jede Aktion genehmigen, bevor sie ausgeführt wird, was eine überwachte Kontrolle gewährleistet.

Sicherheitsfachleute schließen oder depriorisieren oft Sicherheitslücken, ohne sie vollständig zu überprüfen, da ihnen die Zeit fehlt. Dies betrifft 44 % der Befragten, insbesondere CISOs und Sicherheitsverantwortliche (54 %). Die meisten (72 %) befürchten, dass echte Schwachstellen unentdeckt bleiben, und die Rückstände wachsen stetig. Es wird empfohlen, nicht nur auf mehr Personal zu setzen, sondern auch den Umgang mit KI-generierten Befunden zu optimieren, da diese sowohl die Anzahl der Meldungen erhöhen als auch von Angreifern genutzt werden könnten.

Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence. · Sprache: TypeScript · Topics: cmmc, compliance, hipaa, incident-response, log-analysis, log-parsing · ⭐ 592 Stars

🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH. · Sprache: Go · Topics: acme, acme-server, ca, certificate-authority, certificates, go · ⭐ 9,053 Stars

Local-first, open-source security gateway for AI coding agents. Enforce tool-call policies, detect secrets, and audit actions on-device. · Sprache: Go · Topics: agent-security, ai-agent-security, ai-agents, ai-security-tool, ai-security-tools, antigravity · ⭐ 616 Stars

A post exploitation framework for advanced Red Team operations · Sprache: TypeScript · Topics: active-directory, adversary-simulation, c2, c2-framework, cobalt-strike, command-and-control · ⭐ 153 Stars

A powerful tool for using AWS Identity Center for the CLI and web console. · Sprache: Go · Topics: aws, aws-identity-center, aws-sso, cli, credentials, credentials-helper · ⭐ 671 Stars

A CI/CD Red Team Framework for demonstrating Build Pipeline security risks. · Sprache: Go · Topics: ci, cli, devops, devsecops, exploitation, github-actions · ⭐ 399 Stars

🧵 CLI tool for directly patching container images! · Sprache: Go · Topics: cncf, compliance, container-image, container-security, containers, devsecops · ⭐ 1,747 Stars

A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation. · Sprache: Python · Topics: agent, agent-security, agentic-ai, ai-infra, ai-red-teaming, ai-safety · ⭐ 7,449 Stars

Local-first password manager with direct device-to-device sync · Sprache: TypeScript · Topics: android, chrome-extension, firefox-addon, ios, passkeys, password-manager · ⭐ 594 Stars

Gather and update all available and newest CVEs with their PoC. · Sprache: HTML · Topics: cve, cve-poc, exploit, hacking, infosec, latest-cve · ⭐ 8,198 Stars

Security automation content in SCAP, Bash, Ansible, and other formats · Sprache: Shell · Topics: ansible, application-security, cce, compliance, cpe, cybersecurity · ⭐ 2,835 Stars

The complete hacking & penetration testing roadmap. From beginner to elite. 44,982 lines, 150+ Diagram across the roadmap: OPSEC, web security, Active Directory, binary exploitation, EDR evasion, and 0-day research. 300+ tools, 200+ MITRE techniques, C & Rust payloads, lab guides, books, courses, blogs, practice platforms, and AI security resources · Sprache: C · Topics: active-directory, bug-bounty, ctf, cybersecurity, ethical-hacking, hacking · ⭐ 185 Stars

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data · Sprache: Go · Topics: abac, acl, authorization, ciam, cloud-native, database · ⭐ 7,209 Stars

Open-source sandboxed agent harness for teams. Giving every employee a secured personal agent. · Sprache: TypeScript · Topics: ai-agents, cli, mcp, nodejs, postgres, rust · ⭐ 3,630 Stars

Your ONVIF and RTSP camera companion for discovering and hacking real-world security cameras 🎥 · Sprache: Python · Topics: cctv, cctv-hacking, hacking, hacking-tool, hacking-tools, ip-camera · ⭐ 421 Stars

a library for performing fast, configurable cleansing of HTML coming from untrusted sources · Sprache: DIGITAL Command Language · Topics: html, java-library, javascript, security-tools, xss-filter · ⭐ 207 Stars

IntelOwl: manage your Threat Intelligence at scale · Sprache: Python · Topics: cyber-security, cyber-threat-intelligence, cybersecurity, dfir, enrichment, hacktoberfest · ⭐ 4,811 Stars

Grab your DNS logs, detect anomalies, and finally understand what's happening on your network. The missing piece between DNS servers and your data stack. · Sprache: Go · Topics: collector, coredns, dns, dns-server, dnstap, fluentd · ⭐ 574 Stars

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more · Sprache: Go · Topics: containers, devsecops, docker, go, golang, hacktoberfest · ⭐ 39,156 Stars

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions. · Sprache: Python · Topics: cve, cvss, devsecops, hacktoberfest, python, sbom · ⭐ 1,809 Stars

A modular vulnerability scanner with automatic report generation capabilities. · Sprache: Python · Topics: artemis, pentesting, security, security-scanner, security-tools, vulnerability-detection · ⭐ 1,261 Stars

secator - the pentester's swiss knife · Sprache: Python · Topics: automation, cybersecurity, hacking, osint, pentesting, reconnaissance · ⭐ 1,328 Stars

SecObserve is an open source vulnerability and license management system for software development teams and cloud environments. It supports a variety of open source vulnerability scanners and integrates easily into CI/CD pipelines. · Sprache: Python · Topics: devsecops, license-management, security-automation, security-tools, shiftleft, vulnerability-management · ⭐ 334 Stars