Awesome GitHub RepositoriesVulnerability Assessment and Testing

यह प्रोजेक्ट एक समुदाय-संचालित निर्देशिका है जो सॉफ्टवेयर टूल, फ्रेमवर्क और शैक्षिक सामग्रियों का एक व्यापक इंडेक्स है। यह एक ओपन-सोर्स नॉलेज बेस के रूप में कार्य करता है, जो डेवलपर्स को उच्च-गुणवत्ता वाली सामग्री खोजने में मदद करने के लिए विविध इंजीनियरिंग डोमेन और तकनीकी संसाधनों को एक संरचित वर्गीकरण में व्यवस्थित करता है। यह निर्देशिका अपने विकेंद्रीकृत पीयर-रिव्यू मॉडल के माध्यम से अलग दिखती है, जहाँ स्वतंत्र योगदानकर्ता सटीकता और प्रासंगिकता सुनिश्चित करने के लिए प्रविष्टियों को क्यूरेट, सत्यापित और अपडेट करते हैं। सभी जानकारी एक वर्ज़न-कंट्रोल, फ्लैट-फाइल मार्कडाउन फॉर्मेट में संग्रहीत की जाती है, जो पूरे संग्रह के लिए प्लेटफ़ॉर्म स्वतंत्रता, पारदर्शिता और ऑडिटेबिलिटी सुनिश्चित करती है। यह प्रोजेक्ट तकनीकी संसाधन खोज, पेशेवर करियर विकास और सॉफ्टवेयर विकास ज्ञान प्रबंधन सहित क्षमताओं के एक विशाल क्षेत्र को कवर करता है। यह संरचित शिक्षण पथों, इंफ्रास्ट्रक्चर और सुरक्षा टूल, डेटा प्रबंधन यूटिलिटी और स्वास्थ्य सेवा से लेकर डिजिटल मानविकी तक के क्षेत्रों के लिए विशेष संसाधनों तक पहुँच प्रदान करता है। रिपॉजिटरी को एक सार्वजनिक, वर्ज़न-कंट्रोल संग्रह के रूप में बनाए रखा जाता है, जो इसके संरचित डेटा तक प्रोग्रामेटिक पहुँच और समुदाय-संचालित अपडेट की अनुमति देता है।

यह प्रोजेक्ट तकनीकी ज्ञान और प्रशासनिक संसाधनों की एक केंद्रीकृत, समुदाय-संचालित रिपॉजिटरी के रूप में कार्य करता है। यह एक संरचित वर्गीकरण प्रदान करता है जो अलग-अलग जानकारी को एक खोजने योग्य फ्रेमवर्क में एकत्रित करता है, जो सिस्टम प्रशासकों और साइबर सुरक्षा चिकित्सकों के लिए निरंतर सीखने और त्वरित समस्या-समाधान का समर्थन करता है। आक्रामक सुरक्षा, इंफ्रास्ट्रक्चर प्रबंधन और सॉफ्टवेयर विकास में संसाधनों को मैप करके, यह कौशल अधिग्रहण और पेशेवर संदर्भ के लिए एक एकीकृत पथ प्रदान करता है। प्रोजेक्ट को कमांड-लाइन-फर्स्ट डिज़ाइन दर्शन द्वारा परिभाषित किया गया है, जो कुशल सिस्टम प्रशासन और दोहराने योग्य सुरक्षा वर्कफ़्लो की सुविधा के लिए टर्मिनल-आधारित यूटिलिटी और स्क्रिप्ट करने योग्य इंटरफ़ेस को प्राथमिकता देता है। यह एक प्लेटफ़ॉर्म-अज्ञेयवादी दृष्टिकोण के माध्यम से खुद को अलग करता है, दस्तावेज़ीकरण और परिचालन मार्गदर्शिकाएं बनाए रखता है जो विविध Unix-जैसे और क्लाउड-आधारित वातावरणों में लागू रहती हैं। यह मॉड्यूलर टूलचेन एकीकरण उपयोगकर्ताओं को विशिष्ट प्रशासनिक या सुरक्षा कार्यों के लिए तैयार किए गए कस्टम वातावरण बनाने की अनुमति देता है। रिपॉजिटरी सिस्टम ऑडिटिंग, नेटवर्क प्रबंधन और इंफ्रास्ट्रक्चर हार्डनिंग के लिए व्यापक टूलकिट सहित क्षमताओं के एक व्यापक क्षेत्र को कवर करती है। यह साइबर सुरक्षा कौशल विकास के लिए संरचित शिक्षण पथ प्रदान करती है, जो एथिकल हैकिंग लैब और पेनेट्रेशन टेस्टिंग मानकों से लेकर भेद्यता मूल्यांकन और सिस्टम कॉन्फ़िगरेशन सर्वोत्तम प्रथाओं तक फैली हुई है। संग्रह में उत्पादकता टूल, डायग्नोस्टिक यूटिलिटी और शैक्षिक सामग्रियों की एक विस्तृत श्रृंखला भी शामिल है जिसे नियमित रखरखाव को सुव्यवस्थित करने और समग्र सुरक्षा स्थिति को बढ़ाने के लिए डिज़ाइन किया गया है।

gstack is an AI agent framework and development workflow system designed to automate the software development lifecycle. It coordinates specialized AI personas to manage tasks across product design, engineering management, and quality assurance, transforming product intent into technical specifications and final releases. The project is distinguished by its deep integration of headless browser automation and semantic code memory. It utilizes a persistent Chromium daemon for web scraping and visual auditing, and implements a searchable knowledge base that logs architectural decisions and repos

This project is a comprehensive, community-sourced knowledge base designed for security professionals and researchers. It functions as a centralized repository of offensive security techniques, providing a structured collection of exploit payloads, attack vectors, and methodologies for conducting vulnerability assessments and penetration testing. The repository distinguishes itself through a cross-platform payload taxonomy that categorizes exploitation methods by vulnerability type and target environment, enabling rapid lookup during security assessments. It maintains high standards of data i

This project is a comprehensive cybersecurity tool collection designed to support security research, penetration testing, and vulnerability assessment. It functions as a unified penetration testing suite, providing a centralized environment where professionals can access a wide range of offensive security utilities to identify system weaknesses and study attack vectors. The platform distinguishes itself through a modular architecture that aggregates disparate security scripts into a single, hierarchical command-line interface. It simplifies the management of these utilities by integrating ext

OpenHands is an autonomous agent framework designed for software engineering workflows. It provides a modular platform for orchestrating AI agents that reason, plan, and execute tasks within isolated, containerized development environments. By integrating with standard version control and development tools, the system enables agents to autonomously navigate codebases, implement features, and resolve issues through iterative reasoning and tool execution. The platform distinguishes itself through a model-agnostic orchestrator that connects diverse language models to a unified tool registry. It

SecLists is a centralized library of security assessment data designed to support vulnerability discovery and penetration testing. It functions as a comprehensive repository of wordlists, payloads, and testing methodologies used to audit software, firmware, and internet-connected hardware for technical vulnerabilities. The project distinguishes itself through a standardized taxonomy and a language-agnostic data format, which allows security tools to predictably ingest and utilize its assets regardless of the underlying programming environment. By decoupling raw testing data from execution log

Ghidra is a software reverse engineering suite designed to analyze compiled binaries and reconstruct program logic without access to original source code. It provides an interactive environment for disassembly and decompilation, utilizing a platform-independent intermediate representation to maintain consistency across diverse hardware architectures. The framework supports automated binary analysis through programmatic routines, enabling the investigation of complex code patterns and security indicators. The platform distinguishes itself through a modular architecture that allows for extensiv

Agent-skills is a collection of structured instructions and behavioral personas designed to standardize how AI coding agents perform engineering tasks. It functions as a workflow orchestrator that maps natural language intent to repeatable technical sequences and verification checklists. The project distinguishes itself through the use of specialized markdown-defined roles, such as security auditors or test engineers, to apply targeted domain expertise. It employs an evidence-based verification model that requires runtime data or passing tests as mandatory exit criteria to ensure AI-generated

This project is a full-stack web framework designed for building database-backed applications through a standardized architectural pattern. It provides a comprehensive suite of integrated libraries that manage the entire request-response lifecycle, from routing incoming web traffic to rendering dynamic server-side templates. By utilizing an object-relational mapping layer, the framework allows developers to define domain models that map database tables directly to application objects, simplifying data persistence, schema migrations, and complex relationship management. The framework is distin

hacker-scripts is a multi-purpose toolkit comprising a security vulnerability testing suite, a keyword-driven email automator, and a TCP remote hardware controller. It provides a collection of scripts for identifying security weaknesses and conducting controlled hacking experiments across multiple programming language environments. The system automates email workflows by scanning headers and bodies for specific strings to trigger server responses and sends randomized text and email alerts based on system activity. It also enables remote hardware control by sending binary commands over network

This project is a standardized repository of malicious and malformed character sequences designed to stress-test data parsing and sanitization routines. It serves as a security testing corpus and a language-neutral reference for auditing software robustness against injection flaws and unexpected data handling errors across diverse platforms. The dataset functions as a benchmark for input validation, providing a curated collection of edge-case strings that allow developers to identify potential crashes and security vulnerabilities. By decoupling these test vectors from application logic, the r

Shannon is an integrated security platform designed for autonomous penetration testing, static and dynamic analysis, and automated vulnerability remediation within self-hosted, private infrastructure. It functions as a unified security suite that orchestrates the entire lifecycle of vulnerability management, from initial discovery and reachability prioritization to the generation and verification of code-level patches. The platform distinguishes itself through its agentic approach to security, deploying autonomous agents to execute both black-box and white-box exploits against running applica

Filament is a full-stack framework for building administrative panels and management interfaces within the Laravel ecosystem. It provides a declarative, component-based architecture that allows developers to construct complex, data-driven applications using server-side configuration objects rather than manual HTML. By inspecting database model structures and relationships, the framework automates the generation of CRUD interfaces, forms, and data tables, significantly reducing boilerplate code. The project distinguishes itself through a highly modular and extensible design that supports custo

Hono is a lightweight web framework built on Web Standard APIs that executes across JavaScript runtimes including Cloudflare Workers, Deno, Bun, and Node.js.

Nuclei is a modular security scanning framework designed for automated vulnerability detection and infrastructure reconnaissance. It functions as a template-driven engine that executes security checks across diverse network protocols, allowing users to define custom detection logic to identify vulnerabilities, misconfigurations, and exposed assets. The platform distinguishes itself through its highly extensible architecture, which supports distributed scanning, headless browser automation for dynamic web content, and out-of-band interaction monitoring to detect blind vulnerabilities. It integ

Repomix is an AI-focused development utility designed to prepare local and remote codebases for analysis, review, and automated interaction. It functions as a codebase context bundler and a Model Context Protocol server, aggregating project files into structured documents that are optimized for ingestion by large language models. By serving as a bridge between local repositories and external intelligence agents, the tool facilitates real-time codebase inspection and automated development workflows. The system distinguishes itself through rigorous repository token management and security-consc

Hashcat is a high-performance hash cracking software and OpenCL compute application used to recover plain-text passwords from hashed data. It functions as a GPU-accelerated recovery tool and distributed password cracker, leveraging CPUs and GPUs to perform intensive cryptographic computations. The system differentiates itself through a distributed cracking workflow that coordinates tasks across multiple machines via an overlay network to share computational load. It further optimizes recovery speed using Markov chain keyspace optimization to prioritize the most likely password candidates. Th

This project is a suite of specialized tools for linting, minifying, analyzing, and managing container images and their associated registries. It provides a set of utilities including an image minifier to reduce image size, a security profiler to harden running containers, an image analyzer for static inspection, and a registry manager for organizing multi-architecture indices. The toolset distinguishes itself through behavior-based optimization and security. It uses dynamic analysis to track executed instructions and file access to remove unused binary data, and records kernel interactions t

This project is a comprehensive API security audit checklist and vulnerability audit framework. It provides a structured guide of security countermeasures for designing, testing, and deploying secure APIs across various protocols. The framework includes specialized guides for securing OAuth 2.0 authorization flows, implementing zero trust networking for service-to-service communication, and protecting GraphQL endpoints from resource exhaustion and information leakage. It also provides standards for integrating static analysis, dynamic scanning, and secret detection into CI/CD delivery pipelin