Awesome GitHub RepositoriesSecurity Testing and Auditing

यह प्रोजेक्ट तकनीकी ज्ञान और प्रशासनिक संसाधनों की एक केंद्रीकृत, समुदाय-संचालित रिपॉजिटरी के रूप में कार्य करता है। यह एक संरचित वर्गीकरण प्रदान करता है जो अलग-अलग जानकारी को एक खोजने योग्य फ्रेमवर्क में एकत्रित करता है, जो सिस्टम प्रशासकों और साइबर सुरक्षा चिकित्सकों के लिए निरंतर सीखने और त्वरित समस्या-समाधान का समर्थन करता है। आक्रामक सुरक्षा, इंफ्रास्ट्रक्चर प्रबंधन और सॉफ्टवेयर विकास में संसाधनों को मैप करके, यह कौशल अधिग्रहण और पेशेवर संदर्भ के लिए एक एकीकृत पथ प्रदान करता है। प्रोजेक्ट को कमांड-लाइन-फर्स्ट डिज़ाइन दर्शन द्वारा परिभाषित किया गया है, जो कुशल सिस्टम प्रशासन और दोहराने योग्य सुरक्षा वर्कफ़्लो की सुविधा के लिए टर्मिनल-आधारित यूटिलिटी और स्क्रिप्ट करने योग्य इंटरफ़ेस को प्राथमिकता देता है। यह एक प्लेटफ़ॉर्म-अज्ञेयवादी दृष्टिकोण के माध्यम से खुद को अलग करता है, दस्तावेज़ीकरण और परिचालन मार्गदर्शिकाएं बनाए रखता है जो विविध Unix-जैसे और क्लाउड-आधारित वातावरणों में लागू रहती हैं। यह मॉड्यूलर टूलचेन एकीकरण उपयोगकर्ताओं को विशिष्ट प्रशासनिक या सुरक्षा कार्यों के लिए तैयार किए गए कस्टम वातावरण बनाने की अनुमति देता है। रिपॉजिटरी सिस्टम ऑडिटिंग, नेटवर्क प्रबंधन और इंफ्रास्ट्रक्चर हार्डनिंग के लिए व्यापक टूलकिट सहित क्षमताओं के एक व्यापक क्षेत्र को कवर करती है। यह साइबर सुरक्षा कौशल विकास के लिए संरचित शिक्षण पथ प्रदान करती है, जो एथिकल हैकिंग लैब और पेनेट्रेशन टेस्टिंग मानकों से लेकर भेद्यता मूल्यांकन और सिस्टम कॉन्फ़िगरेशन सर्वोत्तम प्रथाओं तक फैली हुई है। संग्रह में उत्पादकता टूल, डायग्नोस्टिक यूटिलिटी और शैक्षिक सामग्रियों की एक विस्तृत श्रृंखला भी शामिल है जिसे नियमित रखरखाव को सुव्यवस्थित करने और समग्र सुरक्षा स्थिति को बढ़ाने के लिए डिज़ाइन किया गया है।

gstack is an AI agent framework and development workflow system designed to automate the software development lifecycle. It coordinates specialized AI personas to manage tasks across product design, engineering management, and quality assurance, transforming product intent into technical specifications and final releases. The project is distinguished by its deep integration of headless browser automation and semantic code memory. It utilizes a persistent Chromium daemon for web scraping and visual auditing, and implements a searchable knowledge base that logs architectural decisions and repos

This project is a comprehensive, community-sourced knowledge base designed for security professionals and researchers. It functions as a centralized repository of offensive security techniques, providing a structured collection of exploit payloads, attack vectors, and methodologies for conducting vulnerability assessments and penetration testing. The repository distinguishes itself through a cross-platform payload taxonomy that categorizes exploitation methods by vulnerability type and target environment, enabling rapid lookup during security assessments. It maintains high standards of data i

This project is a comprehensive cybersecurity tool collection designed to support security research, penetration testing, and vulnerability assessment. It functions as a unified penetration testing suite, providing a centralized environment where professionals can access a wide range of offensive security utilities to identify system weaknesses and study attack vectors. The platform distinguishes itself through a modular architecture that aggregates disparate security scripts into a single, hierarchical command-line interface. It simplifies the management of these utilities by integrating ext

OpenHands is an autonomous agent framework designed for software engineering workflows. It provides a modular platform for orchestrating AI agents that reason, plan, and execute tasks within isolated, containerized development environments. By integrating with standard version control and development tools, the system enables agents to autonomously navigate codebases, implement features, and resolve issues through iterative reasoning and tool execution. The platform distinguishes itself through a model-agnostic orchestrator that connects diverse language models to a unified tool registry. It

SecLists is a centralized library of security assessment data designed to support vulnerability discovery and penetration testing. It functions as a comprehensive repository of wordlists, payloads, and testing methodologies used to audit software, firmware, and internet-connected hardware for technical vulnerabilities. The project distinguishes itself through a standardized taxonomy and a language-agnostic data format, which allows security tools to predictably ingest and utilize its assets regardless of the underlying programming environment. By decoupling raw testing data from execution log

Ghidra is a software reverse engineering suite designed to analyze compiled binaries and reconstruct program logic without access to original source code. It provides an interactive environment for disassembly and decompilation, utilizing a platform-independent intermediate representation to maintain consistency across diverse hardware architectures. The framework supports automated binary analysis through programmatic routines, enabling the investigation of complex code patterns and security indicators. The platform distinguishes itself through a modular architecture that allows for extensiv

hacker-scripts is a multi-purpose toolkit comprising a security vulnerability testing suite, a keyword-driven email automator, and a TCP remote hardware controller. It provides a collection of scripts for identifying security weaknesses and conducting controlled hacking experiments across multiple programming language environments. The system automates email workflows by scanning headers and bodies for specific strings to trigger server responses and sends randomized text and email alerts based on system activity. It also enables remote hardware control by sending binary commands over network

This project is a standardized repository of malicious and malformed character sequences designed to stress-test data parsing and sanitization routines. It serves as a security testing corpus and a language-neutral reference for auditing software robustness against injection flaws and unexpected data handling errors across diverse platforms. The dataset functions as a benchmark for input validation, providing a curated collection of edge-case strings that allow developers to identify potential crashes and security vulnerabilities. By decoupling these test vectors from application logic, the r

Shannon is an integrated security platform designed for autonomous penetration testing, static and dynamic analysis, and automated vulnerability remediation within self-hosted, private infrastructure. It functions as a unified security suite that orchestrates the entire lifecycle of vulnerability management, from initial discovery and reachability prioritization to the generation and verification of code-level patches. The platform distinguishes itself through its agentic approach to security, deploying autonomous agents to execute both black-box and white-box exploits against running applica

Filament is a full-stack framework for building administrative panels and management interfaces within the Laravel ecosystem. It provides a declarative, component-based architecture that allows developers to construct complex, data-driven applications using server-side configuration objects rather than manual HTML. By inspecting database model structures and relationships, the framework automates the generation of CRUD interfaces, forms, and data tables, significantly reducing boilerplate code. The project distinguishes itself through a highly modular and extensible design that supports custo

Hono is a lightweight web framework built on Web Standard APIs that executes across JavaScript runtimes including Cloudflare Workers, Deno, Bun, and Node.js.

Nuclei is a modular security scanning framework designed for automated vulnerability detection and infrastructure reconnaissance. It functions as a template-driven engine that executes security checks across diverse network protocols, allowing users to define custom detection logic to identify vulnerabilities, misconfigurations, and exposed assets. The platform distinguishes itself through its highly extensible architecture, which supports distributed scanning, headless browser automation for dynamic web content, and out-of-band interaction monitoring to detect blind vulnerabilities. It integ

Repomix is an AI-focused development utility designed to prepare local and remote codebases for analysis, review, and automated interaction. It functions as a codebase context bundler and a Model Context Protocol server, aggregating project files into structured documents that are optimized for ingestion by large language models. By serving as a bridge between local repositories and external intelligence agents, the tool facilitates real-time codebase inspection and automated development workflows. The system distinguishes itself through rigorous repository token management and security-consc

Hashcat is a high-performance hash cracking software and OpenCL compute application used to recover plain-text passwords from hashed data. It functions as a GPU-accelerated recovery tool and distributed password cracker, leveraging CPUs and GPUs to perform intensive cryptographic computations. The system differentiates itself through a distributed cracking workflow that coordinates tasks across multiple machines via an overlay network to share computational load. It further optimizes recovery speed using Markov chain keyspace optimization to prioritize the most likely password candidates. Th

This project is a comprehensive API security audit checklist and vulnerability audit framework. It provides a structured guide of security countermeasures for designing, testing, and deploying secure APIs across various protocols. The framework includes specialized guides for securing OAuth 2.0 authorization flows, implementing zero trust networking for service-to-service communication, and protecting GraphQL endpoints from resource exhaustion and information leakage. It also provides standards for integrating static analysis, dynamic scanning, and secret detection into CI/CD delivery pipelin

Radare2 is a comprehensive framework for reverse engineering and analyzing compiled software. It provides a command-line environment designed for disassembling, debugging, and patching binary executables across a wide range of processor architectures and operating systems. The system distinguishes itself through a modular, plugin-based architecture that supports cross-platform analysis and automated workflows. It utilizes memory-mapped file access to enable efficient structural inspection and modification of binaries without requiring full file loads. By lifting machine instructions into a un

Osquery is a unified endpoint monitoring framework that exposes operating system internals as relational tables. By representing hardware, network, and process activity as structured data, it allows users to retrieve system state and configuration information using standard SQL syntax. The system distinguishes itself through a cross-platform abstraction layer that normalizes disparate operating system interfaces into a consistent schema across Windows, macOS, and Linux. It supports both interactive local analysis via a command-line shell and distributed fleet orchestration, where recurring qu

This project provides a framework for managing multi-agent systems, designed to automate complex software development, infrastructure, and business workflows. It functions as a multi-agent workflow orchestrator that routes tasks to domain-specific workers while maintaining state persistence and infrastructure automation. By leveraging large language models, the system decomposes high-level objectives into actionable plans, ensuring that complex operations are executed with consistency and reliability. The framework distinguishes itself through its hierarchical agent registry and policy-driven

This project provides a Model Context Protocol server that enables autonomous agents to interact with and manage automation workflows. It functions as an integration layer, allowing language models to discover, build, test, and deploy complex automation sequences through natural language instructions and structured schema-based communication. The platform distinguishes itself by offering granular control over automation logic, including the ability to perform surgical, incremental patches to specific workflow nodes rather than replacing entire structures. It supports multi-instance connectivi